Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67eddc17-30ea-48fe-880d-7b5a8b03a030.roa
File: 67eddc17-30ea-48fe-880d-7b5a8b03a030.roa (raw, json)
Hash identifier: ummxw6VhSrXml8scmxS1EWXMDFzUuVKnIJ4iXtxFp4M=
Subject key identifier: D3:45:05:1D:D4:75:11:D5:15:95:C9:F2:7A:FF:1E:8F:0C:41:98:2A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 486D76053EED67636A0009DEF6D92F7B5432F63F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67eddc17-30ea-48fe-880d-7b5a8b03a030.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.246.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6d:76:05:3e:ed:67:63:6a:00:09:de:f6:d9:2f:7b:54:32:f6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=5091fdccb85c4dd8cb36de05760d30bb411440b4df92940d81e170cc6f8dffff, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:cb:2a:6f:ec:fa:d0:19:43:3e:04:fb:6b:
8f:61:27:e4:b3:0d:45:26:0b:c3:04:5c:be:05:59:
30:f1:ce:27:b7:ea:d6:9a:75:7e:8d:aa:27:48:d4:
1b:29:e3:2f:63:72:ae:48:22:61:37:1e:9e:bd:f3:
02:53:27:f7:04:81:e7:58:46:cd:bd:01:f5:e1:63:
ae:7e:c4:9f:2b:52:86:bb:e3:2a:aa:c1:37:e9:aa:
05:33:4e:38:c7:0d:3d:17:1b:01:07:c4:1b:54:fd:
95:20:42:50:26:cc:7c:7b:57:f4:1c:6d:fe:a0:fc:
55:0d:4b:fd:05:e4:bd:c6:1d:ca:55:5e:60:6a:12:
99:96:24:25:fd:3e:d4:2a:42:8e:a0:ff:c7:b9:fa:
0e:2b:28:08:ed:92:86:3a:39:9d:97:49:db:4b:b0:
79:61:64:09:80:d6:c1:d4:fb:f4:44:48:0a:62:81:
ae:51:c6:bd:cb:2f:5f:ce:9b:60:41:15:81:94:05:
09:12:c4:13:46:31:72:f8:77:08:d9:78:34:10:3a:
68:7d:46:ea:6b:14:c0:2d:5a:c5:1a:f7:be:35:39:
9f:bb:6d:20:0a:aa:1d:2e:3b:bd:01:a6:cd:2c:4f:
1c:7d:08:0f:33:29:7b:b8:23:10:0b:85:33:01:bc:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:05:1D:D4:75:11:D5:15:95:C9:F2:7A:FF:1E:8F:0C:41:98:2A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67eddc17-30ea-48fe-880d-7b5a8b03a030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.246.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b2:a4:72:13:97:68:d6:a9:7a:98:db:0c:86:58:58:6c:81:
c1:bd:5c:b5:5e:99:4c:cf:bd:3b:94:07:97:66:73:9b:00:56:
3d:bd:72:9c:ad:6f:91:4a:46:df:9d:c8:34:88:7e:fa:26:dc:
3c:60:2d:2f:77:05:ef:dc:96:be:7f:20:cd:95:3f:66:72:c4:
04:08:67:10:24:c5:e5:27:e3:7d:2a:4c:81:49:05:d5:bf:92:
7f:29:bb:f7:b5:61:28:e2:52:d4:f0:95:79:bf:15:80:39:66:
14:d8:61:03:3c:ce:b8:74:c5:50:d3:59:5c:4d:0b:bd:06:9b:
e0:f6:4a:75:79:c1:2d:92:ed:35:dc:89:f0:3a:82:ca:fa:3b:
0d:9f:c2:8a:a2:e6:f0:56:0b:44:e5:7b:be:a1:f5:ca:d9:1d:
58:76:3f:63:66:ab:98:c8:cd:9b:49:89:aa:d4:9f:66:b7:03:
c8:fd:6b:0b:1f:6a:57:24:70:e6:bf:0d:1a:26:98:f5:8b:15:
34:31:de:6c:d2:c2:ae:8f:af:5f:36:0c:88:99:13:a6:5e:ca:
80:b2:94:5e:89:2a:b6:5e:38:e1:81:bd:7e:4a:e3:28:46:5c:
2c:d5:3c:77:66:12:ff:1c:3b:1b:24:8e:32:9d:b7:e6:bb:52:
f1:27:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:26 2024 by rpki-client on console.sobornost.net