Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa
File: 2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa (raw, json)
Hash identifier: zEbHdWt88yYiRydrkpU12z0llNQ7Jl+/ZVjyKLvhx+A=
Subject key identifier: A5:5C:3E:3E:D8:AB:92:75:04:BD:49:1D:71:F0:E3:03:1E:DD:3D:91
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36AB6D53DEE71D403AD69E293DD7E8A385E2D63B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa
Signing time: Mon 07 Apr 2025 15:00:21 +0000
ROA not before: Mon 07 Apr 2025 15:00:21 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 128.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ab:6d:53:de:e7:1d:40:3a:d6:9e:29:3d:d7:e8:a3:85:e2:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:00:21 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=1b81e24662d69e7012f09a5b230321e7260ed8351f17d716e39a75120f8e2de5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:94:d1:84:5c:2f:01:d9:78:90:17:f9:09:88:
e8:5d:09:e6:90:c0:73:ed:8b:0e:76:fa:bd:b8:32:
65:ff:6a:ef:1c:91:e4:57:dd:63:ec:cd:de:d8:61:
ec:2e:03:a1:c9:54:5f:70:43:2a:72:57:20:be:f8:
04:b6:59:89:42:45:03:64:b6:56:c7:e4:6f:e1:8f:
a1:93:35:f3:94:e5:8b:70:24:e5:96:7a:49:6a:b0:
27:75:3a:45:48:cb:51:ea:a5:3d:e8:87:2f:d3:50:
7a:a8:41:eb:a2:3e:48:6a:94:d5:88:86:a1:c3:a0:
ff:56:b1:c4:8c:20:4b:75:29:aa:44:8c:ad:95:45:
e4:56:5b:b6:5b:3a:5d:e9:a7:ba:d7:40:82:62:d2:
5a:06:82:a2:7b:43:e4:92:a8:55:4c:fa:f3:e3:9b:
5d:18:7b:51:84:d7:4c:4b:70:30:c8:cd:92:18:8b:
cc:7a:20:4a:85:cb:b2:0b:64:27:a0:04:69:ec:03:
77:07:4a:02:47:dd:57:d7:67:8d:37:28:f6:4e:bc:
4a:80:fe:03:60:5a:56:01:3a:c9:2b:91:f8:94:2c:
76:93:ef:28:fa:f0:73:85:92:44:ad:91:b4:fb:41:
24:7a:0d:a8:cf:0e:3d:dc:c3:82:e8:e2:63:76:87:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:3E:3E:D8:AB:92:75:04:BD:49:1D:71:F0:E3:03:1E:DD:3D:91
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:af:7b:c8:48:f3:0b:d8:3c:a6:fc:35:a6:54:f7:f5:2b:5b:
c0:54:31:16:a7:2b:5a:c9:5a:55:52:47:cb:fe:5d:3d:ea:46:
9b:b0:ae:02:48:ec:4d:2f:cc:0e:64:3a:f7:c9:11:49:c1:d3:
51:82:ed:73:1d:dc:f7:9c:ac:1b:65:8f:72:5a:9c:c6:21:4c:
5c:8c:6f:35:7a:0d:04:68:de:80:fd:31:05:90:e7:61:ad:27:
e3:d3:53:65:91:2e:17:75:ed:5e:26:c4:60:6f:4a:4d:23:c2:
d5:33:88:da:a7:13:d1:22:cc:16:1a:f6:a1:17:28:08:da:1c:
19:7d:df:69:e2:fa:1c:bb:9a:bf:72:fb:d3:9a:01:c5:f0:dd:
7d:ec:59:f3:28:c9:11:a2:61:d5:5a:98:a2:17:a2:71:8f:a5:
e5:26:05:3b:1d:37:8d:6c:4f:09:c0:45:53:72:bc:b3:67:ea:
e7:84:21:8a:ee:01:d4:8f:4b:ed:07:3e:8f:b7:4a:eb:1b:39:
3d:ee:58:44:e6:08:00:cb:cd:11:4f:68:e0:09:8d:af:38:74:
30:4b:9e:19:77:37:c9:50:02:e9:fb:5d:23:6b:24:27:a5:99:
5c:15:00:f2:1c:af:26:a4:9d:3a:1f:21:70:3e:89:75:25:40:
32:a5:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:00 2025 by rpki-client on console.sobornost.net