Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
File: dda383dc-2bda-4b83-8178-05fa6ae6d942.roa (raw, json)
Hash identifier: M1dp/gRaNJb8eIpxbpfhvM/ANCaBKB6MnwW74kfdUbg=
Subject key identifier: 85:8E:FF:31:43:EE:93:2D:27:45:98:FF:1A:09:F2:FA:A5:C9:24:61
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4053D44A045738674CDD9571EE05D5141461599A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 69.169.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:53:d4:4a:04:57:38:67:4c:dd:95:71:ee:05:d5:14:14:61:59:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=556e5aeec06c7ada577e66e88b44bff7bc9a1f06cdd7b650d3795979d0e395ec, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:05:ff:ee:83:d7:0a:9d:17:17:57:a6:b5:
16:03:60:5e:79:49:b5:29:2b:b9:64:75:62:ed:9b:
ac:14:7a:7b:e9:93:0c:20:7e:21:72:e3:5a:10:15:
ad:55:2c:2f:1b:b0:84:00:fa:a5:f6:e7:27:50:9e:
f2:d3:60:af:da:14:dd:a9:35:24:ed:cb:44:30:7b:
ff:6f:16:93:eb:31:da:56:a9:12:7f:05:18:c0:d2:
20:4f:2b:72:0b:c2:35:ae:17:9c:e3:90:09:3b:3b:
20:a5:96:d4:51:30:c2:0b:ec:df:7e:6f:80:cc:5a:
b8:dc:48:45:e9:32:92:3e:27:f5:58:41:c8:8a:2e:
e3:c5:53:cd:a8:1a:9c:64:45:97:99:4a:15:aa:cf:
70:9f:bd:80:16:ff:f3:70:97:db:92:a8:3d:fe:f1:
8d:a2:30:6a:81:27:d3:f3:23:4d:dc:59:65:05:d2:
cb:20:f0:52:a9:0e:0f:28:6b:fc:2b:38:40:27:ac:
df:de:b8:b8:b3:aa:fe:69:71:02:66:3d:1b:36:fa:
4f:8b:93:3b:79:38:41:b0:77:aa:cf:d1:77:00:19:
84:bd:aa:36:78:9b:b0:56:62:78:0a:31:83:59:85:
df:d9:30:a3:44:3e:b6:0b:a7:82:1a:5b:64:a5:22:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:FF:31:43:EE:93:2D:27:45:98:FF:1A:09:F2:FA:A5:C9:24:61
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:26:53:8f:31:ff:fb:41:b6:66:69:c8:51:66:2d:13:c8:50:
e0:b0:37:54:96:53:8f:a2:0f:f3:8a:e3:1c:e7:b7:35:b1:75:
1b:a5:32:27:22:96:e9:fd:47:20:7b:c0:8f:f4:21:8e:33:6c:
fb:45:47:8d:d3:39:55:dd:97:10:26:e9:6c:c7:4a:1e:cd:96:
02:fd:ba:b9:b4:de:4e:6f:d9:7c:52:bf:93:aa:fb:61:12:25:
41:fc:dc:c1:86:5f:a9:cb:9f:cf:6a:ac:9a:58:2f:b8:99:42:
9f:ed:c8:4d:60:4d:ea:70:48:95:f0:e2:b4:96:9b:82:b3:53:
a9:13:6d:66:ef:d9:43:98:19:51:d3:a9:0d:f0:87:63:a5:e4:
45:c3:b3:4f:a5:95:3f:76:33:15:13:8c:17:47:42:d4:f3:5f:
4a:22:15:c1:6f:b1:67:9c:98:21:db:cf:69:e5:17:c7:b9:64:
8b:05:13:ca:57:b9:34:8a:60:06:11:1a:79:4c:6a:32:78:88:
53:2b:02:2e:9f:c6:3e:7a:9f:60:ce:bd:9b:d5:d2:42:52:d6:
9e:c6:0a:cb:f4:6a:71:28:3a:81:d6:7b:84:fc:ec:05:67:e7:
6c:88:ed:c7:00:9c:52:e0:48:71:46:46:bb:c2:d8:51:55:2b:
9b:b3:7e:48
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQFPUSgRXOGdM3ZVx7gXVFBRhWZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTZlNWFlZWMwNmM3YWRhNTc3ZTY2ZTg4YjQ0YmZmN2Jj
OWExZjA2Y2RkN2I2NTBkMzc5NTk3OWQwZTM5NWVjMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+SgX/7oPXCp0XF1emtRYDYF55SbUpK7lkdWLtm6wUenvp
kwwgfiFy41oQFa1VLC8bsIQA+qX25ydQnvLTYK/aFN2pNSTty0Qwe/9vFpPrMdpW
qRJ/BRjA0iBPK3ILwjWuF5zjkAk7OyClltRRMMIL7N9+b4DMWrjcSEXpMpI+J/VY
QciKLuPFU82oGpxkRZeZShWqz3CfvYAW//Nwl9uSqD3+8Y2iMGqBJ9PzI03cWWUF
0ssg8FKpDg8oa/wrOEAnrN/euLizqv5pcQJmPRs2+k+Lkzt5OEGwd6rP0XcAGYS9
qjZ4m7BWYngKMYNZhd/ZMKNEPrYLp4IaW2SlIr71AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhY7/MUPuky0nRZj/Ggny+qXJJGEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2RkYTM4M2RjLTJiZGEtNGI4My04MTc4LTA1ZmE2YWU2ZDk0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARFqeAwDQYJKoZIhvcNAQELBQADggEBAC4mU48x//tBtmZpyFFmLRPIUOCw
N1SWU4+iD/OK4xzntzWxdRulMicilun9RyB7wI/0IY4zbPtFR43TOVXdlxAm6WzH
Sh7NlgL9urm03k5v2XxSv5Oq+2ESJUH83MGGX6nLn89qrJpYL7iZQp/tyE1gTepw
SJXw4rSWm4KzU6kTbWbv2UOYGVHTqQ3wh2Ol5EXDs0+llT92MxUTjBdHQtTzX0oi
FcFvsWecmCHbz2nlF8e5ZIsFE8pXuTSKYAYRGnlMajJ4iFMrAi6fxj56n2DOvZvV
0kJS1p7GCsv0anEoOoHWe4T87AVn52yI7ccAnFLgSHFGRrvC2FFVK5uzfkg=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net