Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dd1fe956-aaed-411d-9093-88449b6e454d.roa
File: dd1fe956-aaed-411d-9093-88449b6e454d.roa (raw, json)
Hash identifier: mGtToYYcBXxy7E38gNpeOckiex6WrcKUBZ2crEgHTTI=
Subject key identifier: 31:37:AA:79:CF:03:3E:D6:A0:22:60:4A:EA:A2:33:DE:D9:5F:C8:2E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4E5555032CB43ABA555EDE0D536FB09D8944C1BD
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dd1fe956-aaed-411d-9093-88449b6e454d.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:55:55:03:2c:b4:3a:ba:55:5e:de:0d:53:6f:b0:9d:89:44:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=656b14f987d9ab161e5015b9166f5ba1efa8f3fb5681d3f1ef26ef8accc2fedc, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:e8:55:0e:77:00:7b:39:4b:8f:cf:bf:fd:
ed:7e:23:2a:ff:b9:c1:f2:7a:d9:9b:8f:52:df:4a:
9d:b2:7f:b3:e8:a0:c1:9a:27:1a:c5:02:19:fa:ee:
c1:f0:e6:da:95:d5:87:5d:42:1a:ff:0b:ec:dd:c6:
3e:67:10:0f:c2:31:86:a5:8e:eb:80:0c:66:08:48:
ae:2d:62:a6:37:09:08:b1:57:f0:65:59:d0:29:71:
7a:9a:ff:fa:2a:f2:b9:99:0c:ed:a0:c0:44:b6:4d:
09:c6:be:72:37:51:55:3b:c2:66:05:3c:53:8d:ba:
25:5c:d8:a4:5a:e3:9d:fb:7a:f3:28:c4:7b:ff:2b:
da:a9:04:73:6f:0f:64:1d:2a:c2:1c:f4:32:ce:e9:
2a:75:50:06:f8:2b:23:41:7e:98:89:62:c7:b8:99:
ad:5f:56:9a:7a:3f:39:40:4b:3c:15:04:9d:06:9c:
1e:f9:db:6a:dd:3e:fb:8a:da:b1:68:fa:47:88:a1:
fb:84:ef:4e:22:08:cd:46:4a:a9:6f:7a:3d:7f:c3:
d1:5e:32:36:1d:b5:95:6e:e8:21:e6:e3:ad:c9:83:
d7:6c:a2:6e:6c:8e:09:61:d2:2e:59:fe:25:06:ac:
3c:6f:4e:c0:bb:d7:ea:1b:0d:89:20:84:66:c8:cb:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:AA:79:CF:03:3E:D6:A0:22:60:4A:EA:A2:33:DE:D9:5F:C8:2E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dd1fe956-aaed-411d-9093-88449b6e454d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:df:85:dc:07:35:a3:f6:cb:46:a1:ea:99:71:28:20:b8:64:
69:a8:52:cd:32:b6:d4:71:25:fa:88:75:c6:c8:8e:5f:62:65:
1e:13:90:b3:a7:65:01:3d:0e:00:4a:87:17:45:16:c5:9c:11:
3c:40:63:2b:84:b5:71:7e:6e:27:d2:ef:f6:df:18:8f:75:e6:
0e:4c:83:e4:62:8e:c6:6c:f0:6e:c6:fd:43:fd:4e:b5:c1:bc:
45:ad:00:87:27:45:66:fb:40:79:00:fa:80:60:31:a4:d0:ae:
1a:d0:ce:15:d3:4b:06:95:e3:8e:c2:11:c9:f1:98:a8:ca:31:
fe:26:19:d0:54:0a:fd:d2:62:bc:c1:b3:b7:83:6f:01:48:98:
7a:27:3e:a0:5a:57:0d:b0:04:61:da:b8:e5:b0:91:c8:d5:f9:
01:b2:4e:81:41:40:21:d1:f1:74:ea:48:d8:07:33:57:0d:00:
a8:b2:ee:b3:ce:35:99:31:e3:bb:59:04:99:2c:7d:46:27:f1:
b9:71:01:ab:9a:ea:1c:79:85:c1:70:f0:71:37:7a:88:a1:96:
56:95:e9:9a:80:6c:2f:17:3a:51:89:45:95:a3:16:62:8b:b2:
bf:ca:84:d4:40:bf:3b:b1:cf:38:90:c4:d8:21:38:4a:9b:c7:
9d:75:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net