Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
File: 0b9e3099-082c-46cc-bb55-b8cacf55412c.roa (raw, json)
Hash identifier: ZN8oTPLp5az30d8Q26tIIXekQ7N0S7Oz3f7H2ELdswk=
Subject key identifier: DF:F3:EF:E5:6A:59:E3:B0:3A:5C:FB:71:B4:09:82:52:34:07:84:19
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7D5CA713CED4E572726733177E7B368D0E13AC16
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5c:a7:13:ce:d4:e5:72:72:67:33:17:7e:7b:36:8d:0e:13:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=61144a7a705fbc6104ee535e0b449ba9a4dc03100ca85f9272f2735c2d637b2a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:d6:23:ca:10:7d:af:d4:86:ff:64:7e:20:
88:c5:e6:40:f9:f5:3d:e0:09:e5:30:f0:be:72:df:
e4:e9:90:02:16:82:9a:4e:1b:97:d1:fd:da:19:54:
e3:19:ea:f5:fd:1d:b3:34:7d:72:32:95:b5:8c:51:
d8:71:16:1a:34:eb:8a:cb:7c:2a:0e:ed:9a:a4:58:
94:4b:b3:f8:5c:8f:f1:89:e5:f2:c8:3c:82:78:c1:
48:04:61:54:78:c0:06:c6:ea:26:d7:ea:42:de:89:
09:41:b4:c3:d8:5a:a1:7a:71:ce:34:ba:35:2d:d4:
6d:c7:9c:eb:c4:f9:ad:b1:f8:6e:16:b9:b7:30:7b:
bc:c7:e4:32:d8:98:2e:7d:3a:af:aa:79:21:ac:b9:
9d:05:b1:b8:23:27:56:0a:03:47:0d:72:28:4b:c0:
c4:a7:00:79:10:5f:e9:fe:e4:bf:33:89:89:35:70:
4f:bf:6b:06:3d:c3:21:c3:ce:9b:69:5a:e0:13:36:
a6:17:99:b7:25:53:b6:4f:a3:31:90:32:09:46:7e:
33:f8:12:c3:a3:9d:30:a5:bd:aa:a4:de:e0:37:14:
fa:bd:75:5b:d2:95:da:30:c6:12:3c:71:fd:68:3c:
ec:7b:32:6e:7e:ae:a8:d3:f4:cc:30:a2:b8:11:90:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:EF:E5:6A:59:E3:B0:3A:5C:FB:71:B4:09:82:52:34:07:84:19
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:ef:c9:49:33:8f:7d:a0:41:41:33:7b:5b:08:21:9b:aa:2d:
44:3a:a3:82:b9:d7:a7:71:2f:b1:c6:15:09:47:54:93:e1:45:
b7:5d:80:de:a9:e2:96:f2:df:63:b5:93:4f:f9:66:b5:74:0d:
33:ad:4e:29:04:3f:bd:22:71:bb:81:fd:33:a1:c1:2c:4e:c5:
4f:7e:ba:13:8a:03:c1:fe:1f:e9:08:d4:18:93:7d:d4:ba:69:
5a:5a:07:9b:f3:f9:59:cd:0c:94:b5:3c:eb:07:81:3c:3d:c4:
65:0e:1e:c5:40:f9:01:c1:e1:00:17:6f:48:b6:9d:52:c7:5b:
d6:bb:4d:be:a5:87:2a:17:9b:5f:31:6e:47:a8:c7:0c:a7:5d:
da:cf:de:a4:7d:8d:3d:57:b8:c6:6f:81:70:e5:7c:41:bd:c3:
8d:73:58:91:81:25:28:28:0e:ba:cf:c2:df:4b:3f:07:e4:3c:
e9:71:6b:da:4c:ef:dd:fd:f2:88:f8:bd:74:a5:ec:d2:d1:ca:
64:40:e3:91:26:c4:8b:e8:f2:ba:09:a9:0f:a5:25:94:6b:92:
34:2a:7a:8a:45:88:fb:6e:ec:09:8b:51:f0:f1:c3:7c:44:83:
19:c8:c4:05:79:2c:ea:43:ab:61:dc:40:64:90:91:50:77:3c:
40:1a:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:26 2024 by rpki-client on console.sobornost.net