Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e761a560-e4fb-4ca5-b6b3-d20b5a70afea.roa
File: e761a560-e4fb-4ca5-b6b3-d20b5a70afea.roa (raw, json)
Hash identifier: zHG7KR5mJFlZC25/R3RyQkXN3wuhuWHJt8SBGrejhW0=
Subject key identifier: E2:B7:97:7D:F5:68:88:5A:0E:37:CC:5B:8F:13:2A:28:F6:B9:5D:AF
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 49FF98D3042F8A3ECD912368D19DD7D04C2D3FA8
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e761a560-e4fb-4ca5-b6b3-d20b5a70afea.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.221.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ff:98:d3:04:2f:8a:3e:cd:91:23:68:d1:9d:d7:d0:4c:2d:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=63ba47c3c2bc8f0a5ce44d3ac525f257193215009f2fc68fc237711a58a596ec, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:cf:bb:5e:cc:38:05:4c:58:85:1b:f9:1b:
49:64:41:62:f7:08:76:a9:17:f5:eb:ec:2e:6e:c0:
cc:47:69:9d:cd:40:2f:16:a8:a9:71:d4:1e:92:91:
a9:b7:eb:f7:cf:27:1f:c9:6d:7d:b0:c7:a8:b7:51:
5b:08:b1:6e:bf:ea:0d:6b:b9:18:a0:d6:f8:5a:41:
81:fe:e8:d6:a7:5d:fe:f1:7a:29:ce:7b:9f:5d:50:
54:38:60:97:10:31:33:60:90:2e:f7:87:c9:d0:d4:
f7:8c:5c:b6:5b:b8:f9:89:f6:72:70:03:ac:4c:cf:
a8:ca:28:2f:07:64:cb:f0:cb:87:0c:fd:7b:cb:de:
20:04:d7:39:d4:64:e5:65:c2:30:83:28:c6:7e:15:
c7:b3:b6:f3:a9:4d:b5:88:f5:f1:8e:05:c8:22:60:
9a:74:c7:3b:31:6e:c1:55:21:92:34:28:19:1a:63:
59:54:02:49:47:c7:59:41:6c:b5:d5:77:da:f5:07:
09:fc:c8:3f:9a:69:7f:66:0e:ad:b6:eb:e8:42:6b:
3b:75:5e:cb:86:4a:f7:90:85:2c:af:4c:96:54:a1:
b8:6a:d1:6a:a1:10:3f:25:07:36:34:b9:df:86:d9:
38:aa:99:18:d4:d0:2f:e7:3d:9d:b4:f0:54:8a:ee:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:97:7D:F5:68:88:5A:0E:37:CC:5B:8F:13:2A:28:F6:B9:5D:AF
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e761a560-e4fb-4ca5-b6b3-d20b5a70afea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.164.0/23
Signature Algorithm: sha256WithRSAEncryption
50:47:cd:bf:78:32:d1:ee:d7:c7:b3:23:47:15:26:0f:60:62:
04:1a:b2:76:07:b1:c0:ec:e6:71:ed:7b:e5:3f:43:53:70:56:
08:d6:a1:33:76:00:ff:70:65:63:68:37:7e:80:ff:3e:f9:df:
e6:fa:29:a6:c4:c2:2b:c4:29:b8:68:bd:da:c3:6d:3a:ca:b0:
64:61:af:85:2e:6e:92:5a:f7:05:56:da:86:11:dc:09:3e:c8:
7c:88:a0:ec:b8:3d:8e:10:74:60:b8:32:e0:ce:d0:c5:c6:17:
24:0d:a2:74:b4:2b:07:cc:92:c7:ed:f9:47:38:86:ba:bd:68:
8d:98:bc:6a:4f:9b:b3:c8:92:ce:8a:69:2a:3a:2f:77:70:64:
ef:d3:e7:ef:31:33:b3:d7:e2:18:61:80:e8:b1:e5:cc:b3:d2:
d5:9c:bc:fa:ac:94:76:6e:3b:dd:ea:69:73:ed:76:cd:3b:56:
b7:e1:07:08:ee:0e:79:56:c1:76:8e:6e:62:d1:76:1e:42:c0:
90:33:bd:7d:26:09:49:77:b9:a7:fa:e1:85:73:39:b3:44:c0:
1f:64:3a:a7:87:0c:62:59:3e:9a:6e:d5:cc:48:57:30:fc:11:
7d:e4:d3:80:07:bf:32:6c:b9:80:89:93:12:65:2c:3d:57:63:
d4:30:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net