Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78167543-e39e-4b2b-8485-993f717a15e1.roa
File: 78167543-e39e-4b2b-8485-993f717a15e1.roa (raw, json)
Hash identifier: dnjAIqm8D0kqx4lPzmjUSiKj7simuxECfEdnOfDfPzA=
Subject key identifier: A5:88:C4:8B:F0:E4:98:4C:D1:00:4F:A2:1C:F9:36:43:A7:4F:F6:30
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 781806D4784F3F25C2DC785B370F15DCBEE38828
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78167543-e39e-4b2b-8485-993f717a15e1.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:18:06:d4:78:4f:3f:25:c2:dc:78:5b:37:0f:15:dc:be:e3:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=32d4e5b21a1f18fb07e4333a48f395bc20d6a393db3b00752c6f8fc92eccacfe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:1d:49:e4:95:6c:06:1c:29:09:9e:e4:ea:
51:f9:96:83:88:d6:ce:df:72:cc:02:d3:96:7c:b9:
48:17:ff:e6:af:93:ba:b5:f1:46:a4:cf:f3:86:b6:
b8:06:a1:b5:80:da:02:9f:31:8d:75:87:2a:ef:64:
fa:d9:6e:ee:6a:3b:55:10:e5:a4:f8:76:5a:a5:5f:
f1:48:2d:d3:d1:b4:f6:3e:4c:64:bd:65:1a:14:b0:
6a:3f:fd:93:a5:11:c6:bb:9d:36:b8:42:d9:fc:f7:
86:9e:58:7f:7c:6c:79:9a:96:12:22:3e:80:b3:b5:
e8:7e:5f:82:cc:f7:66:97:09:e5:8b:99:65:de:61:
fc:c9:e2:a7:b7:a7:1e:01:03:9f:51:62:c9:b8:c6:
70:c6:7b:cc:d4:dd:cc:51:0f:4a:19:98:f2:6d:b1:
1c:3d:bf:6f:48:2a:db:24:e3:a9:4e:70:f6:f6:e5:
fc:5d:70:b1:0c:f7:ff:34:f1:bb:6e:eb:35:4b:9c:
2f:dc:5d:a2:ef:9b:d5:4d:83:70:30:0d:44:66:45:
01:55:99:18:1f:72:00:51:dc:36:3c:6a:f9:87:14:
ab:10:e4:5d:a5:8f:1d:b7:ed:31:eb:61:f8:85:f7:
dd:af:8a:92:f7:fe:9d:a7:88:f1:43:71:f9:0d:82:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:C4:8B:F0:E4:98:4C:D1:00:4F:A2:1C:F9:36:43:A7:4F:F6:30
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78167543-e39e-4b2b-8485-993f717a15e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.250.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:b9:7c:11:52:09:79:2c:1a:37:e8:1d:ca:fb:0d:4a:ad:0d:
02:ca:dd:ea:2f:dc:d7:d9:00:01:55:5f:2d:c2:a7:84:1c:44:
26:e2:20:d8:27:84:37:32:bb:62:09:63:54:da:03:dc:95:65:
8d:cf:5f:30:84:da:08:d9:50:60:29:ef:66:91:e9:38:67:ab:
3d:4b:cb:d2:47:25:a5:57:c0:e8:28:df:e4:d4:94:4e:08:e2:
23:85:3b:ee:29:57:97:84:2a:46:5d:65:aa:47:40:9d:29:45:
c1:9f:53:ec:4e:28:80:5e:17:90:ac:65:82:bc:bc:f8:93:c9:
98:16:59:6d:40:a6:06:10:e4:72:f0:d6:96:e7:98:97:8a:8a:
62:3f:6c:8d:47:2b:63:8e:32:18:6f:4c:5c:22:20:38:8a:f9:
c5:31:ea:18:64:a9:18:7d:26:bb:9e:84:05:57:6b:fb:0b:2e:
64:02:49:3e:f5:c0:3e:e0:01:b4:3c:15:50:48:e0:9a:11:b5:
e1:be:75:52:62:a0:b2:08:31:1a:2c:01:18:ac:9f:30:4a:ea:
bc:af:08:e8:b2:36:d1:95:18:3b:3d:04:8b:18:ee:5d:07:23:
71:e7:6f:ca:59:61:9a:42:97:23:75:de:23:df:64:9c:85:2d:
66:22:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:26 2024 by rpki-client on console.sobornost.net