Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa
File: f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json)
Hash identifier: /Nb0qxH2bnBO689omJtd/VrUAk5XCqb0kQsek5S/iL8=
Subject key identifier: 2D:D0:17:41:A8:D9:50:8D:98:36:A9:5B:87:08:84:B1:9A:F9:F8:E6
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 016840ADAC76A5CDDD551F192C62C78A381C51E4
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa
Signing time: Sat 29 Mar 2025 00:10:15 +0000
ROA not before: Sat 29 Mar 2025 00:10:15 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 8987
IP address blocks: 23.249.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:68:40:ad:ac:76:a5:cd:dd:55:1f:19:2c:62:c7:8a:38:1c:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 29 00:10:15 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: serialNumber=e1e7e86abdb7f1e3fec950f14ac67fae56ee010121d1a4f8bfcfd26fb87222a8, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:30:04:bc:62:f3:6c:d3:a0:7d:6e:0c:90:
04:cf:a3:67:6a:4c:64:02:36:4f:c2:68:c4:af:26:
91:23:85:01:d3:45:62:96:0b:96:5c:fe:2c:a5:a0:
fe:39:b0:21:a7:3d:19:9e:dc:48:d6:2d:9b:33:56:
2b:ed:1c:bb:57:85:5a:eb:58:38:c8:c2:54:d5:ad:
89:0a:d8:15:09:bf:31:66:75:74:ff:a8:c0:e3:0b:
49:d4:f1:40:19:2c:02:41:b5:7b:a5:91:78:26:43:
73:0f:70:43:65:34:f9:64:a0:a0:f3:cc:76:fc:de:
43:23:19:23:c5:db:8b:6c:1c:84:6f:00:22:24:3a:
c4:6c:41:69:8f:2c:8b:62:fa:f2:65:b3:8d:d0:28:
8a:a1:96:17:40:b7:cb:52:53:a1:88:95:28:a0:0b:
0d:68:d1:d2:52:c1:e3:b4:66:ca:01:fc:dd:af:5a:
79:0c:1e:ff:50:8c:ea:31:8c:d2:b8:b7:9e:3c:7a:
cb:3a:1d:88:cc:6b:d4:4b:2f:63:75:6a:66:d9:d8:
35:1d:ee:48:bd:72:39:6d:cd:3d:e4:68:b4:51:e4:
18:5a:9c:21:1d:dc:0a:02:7f:c5:98:cb:e5:db:26:
9d:0b:c3:3e:e4:1f:90:30:fe:8d:c9:0f:c9:e4:8b:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D0:17:41:A8:D9:50:8D:98:36:A9:5B:87:08:84:B1:9A:F9:F8:E6
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.210.0/23
Signature Algorithm: sha256WithRSAEncryption
23:28:df:c1:9c:26:44:13:a0:bc:25:9c:cc:99:36:81:71:27:
fb:e3:ec:93:4e:8c:55:79:40:8f:2b:48:07:5c:e0:10:af:d9:
7e:38:ab:36:13:65:0b:bf:5f:c3:45:f3:3f:f4:a6:73:06:50:
90:9f:aa:7d:f2:32:4a:02:81:c5:d1:e8:f9:e8:37:5a:f9:f9:
4c:9b:57:bb:b7:c2:26:c1:12:f6:38:7a:c1:1c:86:aa:7b:42:
62:49:9b:26:97:32:21:22:7b:78:54:ee:c5:5e:53:2e:3f:e0:
43:ef:a7:c7:3b:08:79:f4:3f:a6:98:38:a8:3c:cb:ef:4a:47:
0b:cd:76:4b:42:17:0e:25:f7:0c:9e:73:2d:f3:f0:d9:68:7c:
b7:c0:88:25:4e:63:08:df:bd:74:d7:ce:b4:72:f8:c4:9a:81:
9e:bf:d2:ea:f3:5c:b2:32:29:59:37:4d:5b:24:c3:41:fe:3b:
68:7d:3f:77:95:a5:ec:5b:ec:26:66:8f:8c:14:cf:95:93:e3:
c5:06:81:85:d4:ed:ca:76:2c:54:76:46:9b:f2:df:17:d1:5b:
2d:af:67:c6:f7:a9:71:bd:af:fc:9c:0b:00:1d:2a:4d:82:61:
35:1c:d9:d9:68:03:1f:e1:33:db:38:48:ca:e6:bf:02:72:20:
cb:ef:33:91
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAWhArax2pc3dVR8ZLGLHijgcUeQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzI5MDAxMDE1WhcNMjUwNTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWU3ZTg2YWJkYjdmMWUzZmVjOTUwZjE0YWM2N2ZhZTU2
ZWUwMTAxMjFkMWE0ZjhiZmNmZDI2ZmI4NzIyMmE4MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5WjAEvGLzbNOgfW4MkATPo2dqTGQCNk/CaMSvJpEjhQHT
RWKWC5Zc/iyloP45sCGnPRme3EjWLZszVivtHLtXhVrrWDjIwlTVrYkK2BUJvzFm
dXT/qMDjC0nU8UAZLAJBtXulkXgmQ3MPcENlNPlkoKDzzHb83kMjGSPF24tsHIRv
ACIkOsRsQWmPLIti+vJls43QKIqhlhdAt8tSU6GIlSigCw1o0dJSweO0ZsoB/N2v
WnkMHv9QjOoxjNK4t548ess6HYjMa9RLL2N1ambZ2DUd7ki9cjltzT3kaLRR5Bha
nCEd3AoCf8WYy+XbJp0Lwz7kH5Aw/o3JD8nki2wpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULdAXQajZUI2YNqlbhwiEsZr5+OYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2Y1NTgzNTlhLTJhMDItNGM4ZS05YTcyLTcxNTliMjU2OWQ2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBACMo38GcJkQToLwlnMyZNoFxJ/vj
7JNOjFV5QI8rSAdc4BCv2X44qzYTZQu/X8NF8z/0pnMGUJCfqn3yMkoCgcXR6Pno
N1r5+UybV7u3wibBEvY4esEchqp7QmJJmyaXMiEie3hU7sVeUy4/4EPvp8c7CHn0
P6aYOKg8y+9KRwvNdktCFw4l9wyecy3z8NlofLfAiCVOYwjfvXTXzrRy+MSagZ6/
0urzXLIyKVk3TVskw0H+O2h9P3eVpexb7CZmj4wUz5WT48UGgYXU7cp2LFR2Rpvy
3xfRWy2vZ8b3qXG9r/ycCwAdKk2CYTUc2dloAx/hM9s4SMrmvwJyIMvvM5E=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net