Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa
File: 0e4939d5-bdf6-4674-b927-d463fb918e11.roa (raw, json)
Hash identifier: T/3HvkVnPJBv6QMwPw0Qq5d0NgcdoYgY/dNDD8SyTtw=
Subject key identifier: 1D:C5:BA:09:D9:80:E0:3E:EB:80:A2:3B:A0:09:81:91:3A:76:14:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34B980621FC40C8A8412AB7ED021AF6A4EBBB6C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa
Signing time: Mon 07 Apr 2025 15:11:45 +0000
ROA not before: Mon 07 Apr 2025 15:11:45 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b9:80:62:1f:c4:0c:8a:84:12:ab:7e:d0:21:af:6a:4e:bb:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:11:45 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=d323871a1e7c046932d8586c7d682764534f7d44dbbc31482118f24d1c0a6636, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:f4:e3:71:87:dc:f4:36:f2:b9:80:42:b4:
96:5b:bb:43:68:c2:a2:8a:18:cf:2e:76:e3:28:8a:
52:d7:5c:f6:77:e2:3f:fd:bd:22:cf:74:55:73:48:
f0:8f:c1:a1:b7:5a:a1:a1:76:ac:b4:43:94:d7:ed:
75:f2:c5:8e:e6:00:95:76:d1:08:41:e5:8d:d1:cf:
40:f2:5d:8c:b5:1f:9e:f6:74:f4:cb:d7:51:1f:f7:
94:59:04:89:57:56:bc:c4:4a:21:fa:1a:12:ac:89:
af:f4:e6:31:2f:60:49:85:41:f0:b7:0f:cb:ea:d0:
71:5a:d0:61:6b:20:98:f0:72:c0:34:06:f5:69:25:
de:5f:69:c1:43:67:37:45:3e:c7:65:67:02:c7:5c:
08:67:dc:3a:55:b5:3a:22:84:cf:d5:b0:d1:eb:47:
22:cb:d4:45:64:80:39:12:1a:1d:ea:7a:b2:50:e9:
fa:43:ec:dc:c4:84:8f:8b:79:d2:a4:cc:be:2c:72:
e9:9c:92:10:75:1c:c7:e5:e7:90:8e:40:81:bc:b1:
2b:cb:33:23:5e:fe:e4:88:0d:48:3a:d4:f9:5d:d3:
32:a9:59:d7:1e:41:0f:30:99:5f:06:1c:ae:d3:f0:
a4:1b:ea:f4:d5:c5:f7:87:3f:ca:b4:6b:7f:0e:86:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:BA:09:D9:80:E0:3E:EB:80:A2:3B:A0:09:81:91:3A:76:14:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:dd:5a:eb:5d:16:65:e7:25:89:65:bb:0d:b3:55:0a:9e:0a:
19:54:b5:12:81:47:af:ce:e9:cd:9b:f3:2e:ce:be:9a:5e:26:
3c:37:1d:52:77:3d:a4:4b:67:15:d3:1d:a6:9a:93:55:c5:bc:
6d:6d:f2:d0:2d:af:05:cc:46:43:90:4b:13:8a:5e:b5:48:a3:
63:ba:a2:fc:42:4d:d9:e4:bc:7a:5f:a2:69:12:70:3b:fa:90:
1b:7d:b8:9f:ff:79:9d:ca:41:f7:da:9a:a1:08:1c:72:f4:2d:
82:6c:55:fb:b1:ce:17:29:29:af:af:55:23:3f:89:ed:3b:32:
fd:9d:ac:ad:33:d5:92:17:4a:7b:63:24:8a:d0:f7:74:ca:4f:
f5:78:3e:c3:01:0a:a1:05:fd:ea:2d:a3:0c:d1:7d:3a:70:70:
a7:ed:62:fe:b2:78:af:6d:4d:68:70:b7:8c:b8:5e:c3:cf:21:
ec:97:33:f5:05:9b:c5:c9:38:d7:28:80:88:a1:db:13:cc:c3:
69:f7:cc:b7:d6:5c:30:7f:47:ad:32:fc:f9:9c:95:69:a8:8c:
5f:86:ac:1f:c6:4b:fc:6e:87:6d:ee:f0:7c:1a:b1:6f:4f:f4:
b5:7c:56:54:df:88:6f:73:da:4e:80:df:65:3b:fd:50:2e:04:
fa:f2:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:58 2025 by rpki-client on console.sobornost.net