Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28338aab-a7c5-4702-8149-23ccb69f8d03.roa
File: 28338aab-a7c5-4702-8149-23ccb69f8d03.roa (raw, json)
Hash identifier: MM/RDiZ7VyjUlzoo5PBpYG7a4jne8MT6FSGw/9+NznY=
Subject key identifier: F9:FF:C1:0B:39:05:F2:D2:BA:36:DE:88:7E:0B:D6:0B:FD:F2:87:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7AE79E4F91DD6D38E9A75E13E267C3D0F9FB573C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28338aab-a7c5-4702-8149-23ccb69f8d03.roa
Signing time: Fri 04 Apr 2025 00:11:11 +0000
ROA not before: Fri 04 Apr 2025 00:11:11 +0000
ROA not after: Fri 09 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.27.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e7:9e:4f:91:dd:6d:38:e9:a7:5e:13:e2:67:c3:d0:f9:fb:57:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 4 00:11:11 2025 GMT
Not After : May 9 23:59:59 2025 GMT
Subject: serialNumber=30acbdff92e9427efa09f20742e3d1520b1a3da42311c1ce5289e6c09d328db5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:06:5e:68:5f:af:2b:ed:79:80:b5:84:53:
b8:f3:33:2a:71:04:30:ba:77:62:e9:20:d6:91:26:
48:e4:ee:96:70:0a:20:da:98:ce:22:18:59:62:ad:
78:74:f7:4b:21:f5:41:b7:3e:46:92:c8:3f:9a:62:
2c:7d:72:7a:99:04:76:86:f4:bc:10:05:e3:df:b7:
f5:19:ab:9e:10:48:9c:b2:ae:f5:1f:5c:7d:43:51:
50:fb:3a:37:05:5e:68:73:40:6f:ba:de:05:d5:a3:
45:ae:5f:f6:4c:8e:8b:fd:d1:62:f2:65:bf:dc:80:
a7:14:c7:42:64:5f:27:8b:8e:19:e9:34:91:1a:82:
42:b4:bb:1e:53:8d:97:32:f3:32:48:a7:74:4e:1b:
b6:9e:76:ae:89:f7:55:6d:a6:e2:80:df:88:75:12:
ab:88:73:d0:35:75:1b:04:fc:98:fe:21:65:d8:6d:
6d:65:57:bb:1b:a7:f3:e6:c5:32:b6:4e:fe:a8:0c:
60:4c:c3:f8:de:30:e3:b3:ca:23:52:65:b8:e2:ef:
5b:e4:f2:87:3b:06:f7:65:c7:f5:ed:26:5d:fe:f1:
fc:10:18:5b:fc:cf:7e:f7:59:6a:d0:a4:be:44:3d:
a2:2b:b6:77:05:b8:a6:cf:11:b9:97:49:b0:90:80:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FF:C1:0B:39:05:F2:D2:BA:36:DE:88:7E:0B:D6:0B:FD:F2:87:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28338aab-a7c5-4702-8149-23ccb69f8d03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.27.0.0/19
Signature Algorithm: sha256WithRSAEncryption
34:80:bb:74:5c:aa:46:bd:6d:9b:a4:65:01:31:c8:68:6a:1e:
63:36:7e:9b:bd:44:3c:33:56:70:04:7a:3d:6b:f9:77:50:93:
83:c9:3a:26:a7:d0:c4:fc:d2:38:fc:c9:fb:c5:14:1e:5d:2c:
20:77:c7:97:c4:e0:d2:c1:d1:6e:59:a8:d1:4f:04:43:e5:bf:
7c:61:33:2a:41:63:fb:21:59:98:f1:c6:35:21:59:ac:b6:b1:
cf:0f:06:f1:f7:9a:84:90:ac:7e:92:16:0a:bc:26:4c:4f:24:
76:05:8d:91:e2:39:70:75:12:5b:7a:82:b7:01:ce:fc:dd:d0:
a6:26:47:38:2f:77:4c:af:27:33:0f:a8:7a:2b:a8:b3:bc:02:
c6:78:31:ee:6f:95:a0:6a:e1:10:de:99:a9:23:48:0d:7d:0b:
d4:4b:69:81:da:9f:35:16:33:12:86:4d:d5:11:8a:85:88:15:
ac:ca:6a:97:1d:a0:ba:a1:75:98:1b:09:1e:35:79:45:d6:d0:
43:22:dd:9e:0e:4f:6b:f8:df:d3:a6:bb:90:3f:b7:94:0c:a9:
c5:bb:d0:fe:0d:de:da:a1:23:97:2c:6e:55:c2:71:db:25:85:
cb:fc:82:ca:42:7a:fc:d4:63:b0:37:4f:94:f1:52:7e:71:03:
68:3a:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:00 2025 by rpki-client on console.sobornost.net