Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b60dddc-79ff-4630-ae39-5d29920471be.roa
File: 7b60dddc-79ff-4630-ae39-5d29920471be.roa (raw, json)
Hash identifier: yP4q/hpvlgIruLq1MvObmdRTiMrLXsoh7Lphm973MtU=
Subject key identifier: 46:B3:46:DD:99:EF:A8:8A:CE:3B:76:A9:69:9D:F7:0E:1B:A4:13:7D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0D661BE7918A4F598BB125B0E39A299BF2DFB33D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b60dddc-79ff-4630-ae39-5d29920471be.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.246.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:66:1b:e7:91:8a:4f:59:8b:b1:25:b0:e3:9a:29:9b:f2:df:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=3e1d5525d5b215bb9034934b46b88f102d06e08f8d66db0b55aa8ff743a90b32, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:db:2c:ad:cb:b0:0a:dd:f9:07:ed:57:46:
59:bc:32:7b:50:11:5a:be:f7:a7:94:bc:59:c3:dd:
2e:0d:60:3c:4f:ac:2a:6a:8f:14:48:cc:7d:fc:99:
3d:cf:ea:3d:81:8b:6b:8f:ac:21:67:32:fa:79:84:
24:a9:41:b4:e2:2b:0b:b0:5a:59:71:49:93:64:bd:
7c:5c:d0:da:d7:a9:c6:9d:69:92:59:c5:9d:bf:5c:
16:45:af:cc:5b:5e:60:f6:52:c6:cd:ce:0f:08:b7:
fd:e7:b5:8c:5d:87:b5:47:3a:71:dc:10:81:2c:60:
e4:94:2f:3b:36:dc:e3:0c:bc:7f:90:c4:59:67:49:
a0:6c:56:9a:1b:04:72:a8:e5:a3:a4:5e:48:97:5b:
78:aa:31:97:52:ba:85:c6:3e:ff:5e:64:40:85:27:
cf:d3:d3:69:96:fa:27:5b:91:0a:17:d0:c2:83:24:
d4:43:d2:37:ef:12:b7:a9:b3:0b:1e:80:1e:37:c4:
bb:97:35:c2:df:14:22:8b:3c:1e:0a:fc:ff:50:d3:
ac:3f:81:72:78:85:06:ab:4c:0c:5d:7c:0e:18:99:
04:30:69:16:fc:85:88:9f:53:d9:6c:eb:63:67:b8:
01:ef:83:62:f4:ca:18:3a:59:3c:41:af:15:a2:5a:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:46:DD:99:EF:A8:8A:CE:3B:76:A9:69:9D:F7:0E:1B:A4:13:7D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b60dddc-79ff-4630-ae39-5d29920471be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.246.176.0/20
Signature Algorithm: sha256WithRSAEncryption
21:ab:58:99:e2:c3:21:2e:37:1c:35:69:8e:2e:98:06:8d:eb:
66:61:d8:f7:95:7a:2b:aa:a4:cb:05:8b:9a:b7:98:14:a5:50:
97:e3:3d:70:24:31:9f:e0:ad:8f:a1:f1:89:ed:08:e4:db:89:
6c:13:78:cd:25:96:52:f9:96:1f:da:b2:6a:4a:71:b1:79:58:
70:a7:87:34:12:92:15:14:c6:a8:94:f2:84:bd:09:da:84:f7:
05:6b:dd:6a:5e:82:a9:aa:68:d7:78:6c:5e:d0:d7:0a:78:83:
6e:aa:5d:58:d3:7b:49:45:1a:92:83:f2:d4:46:e2:8d:8e:be:
61:53:c5:05:da:3a:5c:0a:a0:1d:f0:be:bf:93:f3:5f:b9:3d:
70:6d:0a:35:ee:a3:a0:57:b4:4d:15:e0:46:4a:da:dd:52:80:
82:5b:ea:fe:b9:b2:64:ce:cf:bd:1d:ea:33:d0:1b:23:46:33:
45:46:7d:b3:b9:a1:c9:c8:c2:c2:c3:34:99:44:e6:9c:7f:78:
6e:bd:63:30:70:fa:96:24:e2:78:40:0c:48:80:12:c7:83:1b:
75:ba:63:d0:0f:2c:c5:53:88:09:a8:28:23:ff:42:6e:9d:10:
77:18:30:70:7f:56:25:72:b2:49:8b:16:59:d3:83:0b:59:00:
ab:47:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:26 2024 by rpki-client on console.sobornost.net