Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
File: 293c2826-82f4-42e2-82d9-04501c4668dd.roa (raw, json)
Hash identifier: XW+kfc57X1PsXxAshbujeHlzWJzOVpljZ+swSfSm9Bw=
Subject key identifier: F1:A4:65:8A:16:E2:F8:EF:CC:F0:CF:F9:9F:6A:F7:4E:B0:BC:71:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6244957C71572F1ACF26858027E9E1200C7A1535
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
Signing time: Mon 31 Mar 2025 16:10:13 +0000
ROA not before: Mon 31 Mar 2025 16:10:13 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:44:95:7c:71:57:2f:1a:cf:26:85:80:27:e9:e1:20:0c:7a:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 16:10:13 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=7bc2f8a13697cf43ab9192565ba70fd97540f2aec053ebc9dbcbbe7310812446, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:2b:0e:50:e1:b0:79:1b:43:5d:f2:13:94:
fd:59:70:c1:0e:2b:87:2d:f4:df:5a:e5:ca:72:4f:
4c:12:72:87:96:17:5b:e3:ff:d0:29:8d:a4:7e:a5:
03:67:3a:55:d9:5f:5e:af:be:65:d5:72:ec:f2:09:
a6:ce:18:96:62:f2:53:0e:e3:d6:02:1d:31:93:81:
ee:98:fd:79:33:c2:9e:fd:92:fe:fc:71:f5:8a:bb:
49:0f:01:36:6d:43:9c:d3:b6:65:46:36:ba:7f:1a:
ad:3c:35:79:8e:0c:df:b4:21:31:ad:77:ad:f9:6b:
a5:04:6f:3d:c3:d7:3c:b1:bb:9b:31:3b:34:24:cf:
69:ac:46:ac:e7:25:1a:89:9d:48:5d:d1:22:f8:d2:
62:9a:6c:1a:b9:d7:4f:7a:42:16:15:b4:d2:1b:c5:
10:07:cd:d6:83:b4:55:ab:49:30:c4:c0:79:32:85:
6e:1e:f3:d6:16:19:41:6b:23:a1:1b:f7:b1:ac:d2:
1f:af:cb:ad:36:e4:a9:5d:27:80:50:87:62:2c:a7:
bd:09:cc:c3:9b:cb:ae:8b:03:fd:63:fa:f9:74:c4:
58:a4:c5:c0:cc:ca:a3:93:28:c5:9b:ee:4d:ad:a3:
5a:50:a2:73:23:ea:00:73:86:e8:0f:51:5f:e1:90:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:65:8A:16:E2:F8:EF:CC:F0:CF:F9:9F:6A:F7:4E:B0:BC:71:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:6e:f0:70:7c:e3:c4:f7:22:ae:9e:9a:9c:b6:63:05:8a:0f:
b1:fc:78:b3:da:85:25:d7:22:48:af:3f:cb:ac:25:ff:a2:c1:
04:ec:b9:c6:9b:85:55:d0:be:7c:87:4d:b6:c7:4e:fa:51:06:
57:7d:05:e8:c0:90:e2:86:30:d4:15:47:ee:f4:72:6d:03:16:
46:f1:e0:aa:ce:ef:46:a6:95:75:99:65:d7:33:ca:43:2c:93:
26:99:c5:c3:06:48:06:d5:82:5c:fc:67:da:2e:fc:68:31:1f:
79:52:dc:2d:69:2b:59:77:76:a1:33:cc:26:e3:30:3f:c9:01:
fa:7e:69:c3:0d:5a:b3:fa:e4:21:c8:8c:66:06:4e:1f:7c:3f:
e4:f6:63:28:68:36:dc:1b:67:9f:34:a7:78:02:17:37:60:46:
19:dc:33:b0:e6:41:b4:46:54:76:28:a6:08:87:13:e1:9a:52:
b1:87:68:72:29:02:05:65:85:2e:95:69:d8:04:15:38:cc:60:
68:4e:c0:63:2b:3d:3d:44:6e:02:8b:08:23:0f:bd:53:1d:40:
f7:51:7d:a8:05:44:fd:c3:ea:86:d4:52:8a:4b:df:30:11:c0:
99:47:45:c6:ff:b3:f1:dc:e3:0e:77:56:51:fd:41:2a:21:78:
6b:cd:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:00 2025 by rpki-client on console.sobornost.net