Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
File: 2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa (raw, json)
Hash identifier: sO8SMf9sdWRGzerixP2noHXgeYSFq+JKzr3Y71EF0W4=
Subject key identifier: CA:95:D1:6A:62:05:39:B9:9B:F4:7B:64:9C:CE:CB:DA:22:C8:24:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AC079BEF71C9A89F5E5A60FD6EA95F642EB2C82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
Signing time: Tue 15 Apr 2025 00:20:12 +0000
ROA not before: Tue 15 Apr 2025 00:20:12 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.113.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c0:79:be:f7:1c:9a:89:f5:e5:a6:0f:d6:ea:95:f6:42:eb:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:20:12 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=2a60e02ed08d5209d0e56bdcb222311cdc819eb49f364d19c24faa6474d441ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:27:7b:c0:5d:91:53:8f:82:4c:e9:90:ec:
7a:63:b9:4f:ad:b6:65:f4:65:e1:f6:63:c1:b0:28:
73:ee:34:2a:48:03:86:f2:95:6a:c5:51:bd:a4:c5:
b3:f3:da:92:75:5d:ff:2d:75:28:75:f0:51:e3:6f:
02:72:73:c0:22:db:b4:ce:d9:44:39:48:9a:d4:d2:
db:e9:dd:df:8d:8e:eb:61:d8:2f:c5:80:9d:54:32:
26:62:5c:95:63:5a:a1:2c:cd:8f:dd:45:2c:e7:3b:
48:90:64:70:0e:21:95:03:e3:9e:db:2c:91:e0:e1:
6e:94:d6:25:97:17:29:73:a1:fc:d3:0e:fe:7b:29:
d2:5e:25:a0:ff:3a:66:2b:86:b4:cb:52:72:6e:6e:
70:8c:81:a0:b0:a8:9d:97:9b:08:a0:8a:00:b4:36:
dc:c9:1f:3e:59:49:95:b6:04:e9:18:4a:b6:ef:e0:
c8:88:fc:75:0a:7e:1c:29:43:99:36:eb:6d:09:21:
18:3c:07:15:c5:bc:86:6d:11:bb:b2:c9:68:d3:09:
69:01:df:fa:91:9a:e8:85:8a:91:c5:b4:49:89:00:
2f:57:9e:65:0c:f5:fd:0a:60:42:6b:e9:1e:ab:65:
4e:b7:d6:68:cb:5e:49:e5:2d:05:b3:cb:17:09:e6:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:D1:6A:62:05:39:B9:9B:F4:7B:64:9C:CE:CB:DA:22:C8:24:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.113.192.0/19
Signature Algorithm: sha256WithRSAEncryption
d1:a1:9d:b2:67:5c:41:7a:b0:90:ff:56:7c:9e:9c:e6:dd:69:
d7:9c:5f:59:96:1c:f3:6e:c6:87:13:a7:e1:4d:bf:f0:77:35:
5d:40:b1:6a:84:a2:6e:16:37:12:ba:a9:3a:f6:e6:d9:28:5d:
20:a5:7c:5f:18:10:8a:99:96:b8:82:a9:13:17:70:3d:46:f9:
04:d5:6a:bc:6b:3d:31:1d:7e:7b:f6:af:93:77:80:8f:f7:c0:
0f:7f:62:ce:13:44:69:2b:21:52:77:b3:16:92:2b:13:ff:56:
b1:49:95:8a:6a:03:1b:52:a7:be:a8:97:7d:9a:cc:4d:ec:13:
7d:a2:a2:67:7d:89:99:25:90:d6:28:6e:f6:a4:90:b2:70:9a:
82:f8:b3:7f:c1:6b:55:da:bf:38:bf:35:61:a9:7e:52:ba:44:
68:bf:76:f4:98:7f:86:f6:86:8e:18:41:67:f7:49:0a:46:e3:
d7:ab:5f:fc:63:a4:3d:65:5a:40:2b:13:cc:d1:d4:f1:6a:d2:
61:e5:0b:e7:52:cd:4f:0c:9c:a0:f4:41:be:48:00:70:7d:49:
95:22:6b:33:68:92:cd:6d:5f:7c:f3:a7:e4:2b:ef:ed:2f:89:
56:9d:62:c6:9d:d3:8d:5e:7e:39:2f:4a:43:b9:ab:f1:e4:56:
59:b7:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:01 2025 by rpki-client on console.sobornost.net