Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dcf1c8e0-e7e1-439b-b61d-a9e81e08e77a.roa
File: dcf1c8e0-e7e1-439b-b61d-a9e81e08e77a.roa (raw, json)
Hash identifier: R12ro3Wg27jnHnhY8Wq56Sv/nz0rS75IVgU+b7kfsbk=
Subject key identifier: 2F:B5:36:DF:21:A1:87:04:14:71:F3:AD:F6:D6:EC:EB:50:ED:68:DD
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 570262C12C383D6C103AD271CEDF02E36C875490
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dcf1c8e0-e7e1-439b-b61d-a9e81e08e77a.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.221.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:02:62:c1:2c:38:3d:6c:10:3a:d2:71:ce:df:02:e3:6c:87:54:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=fb1446c1deb4ea7050941e57240dcac0433f833df9ce2068925ff804f3305842, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:fc:1a:f2:f0:b8:a2:74:ca:be:31:73:dc:
d6:36:e6:72:94:b2:71:36:4d:57:57:70:79:73:36:
7d:ba:c0:17:39:90:0d:b8:db:16:83:9b:c3:64:67:
50:a0:ad:88:02:db:16:82:bf:62:70:40:be:0f:18:
b4:ae:f3:82:2e:48:9a:94:0a:86:15:4a:12:5d:c4:
b1:55:ba:07:40:1f:80:e3:ff:93:c4:a2:05:a5:23:
fb:88:12:b2:a7:8b:da:5b:dc:30:25:12:88:58:07:
86:af:de:c5:a3:2c:d7:ca:da:9e:ef:66:35:c0:11:
b6:24:f7:7c:32:67:d0:fb:99:d7:74:d4:66:6c:8f:
9a:13:2d:2a:1c:25:42:9c:04:d3:24:0f:9f:a9:21:
cb:18:89:78:f0:a4:a7:05:7f:f7:31:33:de:dd:bd:
31:cc:40:d9:4e:7d:73:49:39:81:0b:51:07:0f:0c:
8d:f3:a4:0d:ec:34:17:d6:e2:c1:71:63:a7:b8:3c:
86:e7:f5:0a:33:24:5b:1b:a1:e0:a0:39:b5:99:6d:
e0:b0:9f:e4:8e:73:d9:44:81:d3:9b:64:59:de:15:
30:b1:84:60:31:99:99:00:31:01:a1:bd:d6:a2:2c:
61:8f:66:8a:67:32:c8:02:b7:40:c6:03:ea:91:c7:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:36:DF:21:A1:87:04:14:71:F3:AD:F6:D6:EC:EB:50:ED:68:DD
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dcf1c8e0-e7e1-439b-b61d-a9e81e08e77a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.160.0/19
Signature Algorithm: sha256WithRSAEncryption
64:de:ae:66:f2:31:ac:80:2d:a6:18:8b:98:14:bd:ed:15:16:
51:df:19:f7:09:08:61:48:2b:77:d9:5b:5d:7f:7b:d9:fe:82:
00:fe:fb:29:32:62:b9:8b:68:aa:fd:65:45:53:9a:64:b2:69:
49:e9:75:4d:eb:5f:63:26:1e:38:bf:b0:02:b5:3c:17:4e:37:
5e:4d:04:61:11:ce:ef:0a:d8:99:f8:5f:2e:5d:b8:ea:bc:01:
b8:22:94:e9:fe:6c:55:0b:e8:5c:1d:65:0c:7d:4e:17:38:86:
57:03:6a:42:46:5f:08:49:8a:14:62:03:73:11:61:50:79:63:
ca:dc:d2:c1:99:67:e2:9a:12:74:4f:d9:5b:8d:1b:b5:ce:1a:
39:ac:13:d2:1a:e2:91:10:76:f4:29:8c:db:a4:ff:5b:d0:f7:
f5:0b:a5:b3:e9:7d:89:15:8d:da:d5:a9:30:d9:83:29:ed:ef:
54:41:f7:8e:d9:d5:f3:87:43:51:ee:f7:94:a8:ae:c5:4d:77:
e3:30:e0:b6:89:16:4c:27:ae:d9:96:c8:5e:20:a3:bb:dc:c6:
76:76:18:53:b2:28:0c:98:11:ea:a4:b5:44:4b:7f:b3:35:1a:
de:ba:da:df:3d:69:dd:6b:18:7c:fb:22:d9:13:b1:69:41:a6:
1e:af:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net