Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30a99871-ae35-4d50-8e6a-d2849f20a0bd.roa
File: 30a99871-ae35-4d50-8e6a-d2849f20a0bd.roa (raw, json)
Hash identifier: YVG69CmCKg4eYNypcSZXqHM8duIifc3dqV8nKyXtl2Q=
Subject key identifier: 4C:0F:60:E2:11:97:43:5E:7F:AB:A5:83:DD:07:F8:31:94:94:61:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 791035696905B2876DE218B9FA1CEED180CBCDEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30a99871-ae35-4d50-8e6a-d2849f20a0bd.roa
Signing time: Tue 15 Apr 2025 00:20:32 +0000
ROA not before: Tue 15 Apr 2025 00:20:32 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 68.67.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:10:35:69:69:05:b2:87:6d:e2:18:b9:fa:1c:ee:d1:80:cb:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:20:32 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=626cb32bc2a7de0c785a0c2a40fb451ce3e9a3e6fb4bd49f2bac2a9c05ec17b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:c7:15:7c:f0:87:a5:da:f4:fa:b7:b5:4a:
68:8d:ba:9e:b1:46:54:c3:6f:cd:b2:50:d9:bf:8d:
2d:c9:3f:ea:f7:04:2a:61:41:b7:87:be:33:cd:a7:
b6:ce:c3:ca:0b:83:c4:3d:00:9a:d0:d1:36:c2:ee:
ae:9f:35:b7:ed:0d:39:58:bd:86:5c:25:f0:49:5f:
74:de:b1:b9:b1:24:d6:54:13:da:c8:57:93:d3:8f:
a2:ae:24:4e:59:75:59:10:4b:1c:3f:f9:e9:42:64:
5d:e7:16:e1:d1:7b:c4:2f:6e:06:96:f0:01:ec:71:
b1:b8:5b:b3:9c:52:cd:09:87:89:1b:1b:67:c8:94:
3d:8f:d1:af:7f:df:da:96:01:94:b9:46:c9:5d:65:
51:65:3d:8a:5a:01:7a:be:01:84:2f:30:9b:c5:2d:
64:76:c1:80:91:25:35:98:78:8d:f1:cf:b8:74:2a:
3f:de:ae:0c:0c:41:3a:f6:a3:18:89:e5:27:17:44:
c2:42:11:1c:2e:a3:fa:2a:ec:ce:84:46:27:41:32:
ff:7c:2f:71:8a:5a:cf:f4:e9:d9:1d:c4:1c:5b:8b:
08:66:e5:e5:8e:89:c5:34:fc:e1:25:9f:07:0b:03:
34:53:50:67:79:a8:fb:d6:0c:7f:dd:f3:ab:4c:fd:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:60:E2:11:97:43:5E:7F:AB:A5:83:DD:07:F8:31:94:94:61:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30a99871-ae35-4d50-8e6a-d2849f20a0bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
68.67.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:47:c7:e1:be:77:87:02:46:bd:6e:60:82:3c:f6:c1:bc:82:
72:a6:44:fb:38:60:85:93:27:7e:e6:28:90:5e:f7:66:89:89:
a0:00:ed:7e:ee:74:8d:ff:f9:72:1c:5e:f0:43:40:02:d1:8b:
8c:05:2d:53:94:e9:b3:6f:d1:2a:e4:cc:6b:d6:69:46:ff:08:
ed:e5:12:57:ff:d5:64:6f:3b:55:17:be:d0:f1:14:c1:2a:b4:
4a:0e:2b:7d:08:ed:4a:40:b3:da:8f:92:73:28:10:e1:bc:dd:
b5:6f:28:40:f2:78:df:27:85:64:0a:81:d7:9e:5f:8f:af:bb:
3d:7f:bb:d4:bb:ab:26:0c:fd:c7:e0:7d:d6:f7:fa:63:7c:9b:
90:3b:a7:15:4a:28:57:2e:79:d2:bc:59:c1:64:17:e8:03:12:
4f:43:f9:e2:f9:2a:33:a9:fe:29:b4:6e:36:6e:93:f0:f7:88:
48:7a:61:62:4d:a8:a8:ff:77:e0:1b:b8:70:76:03:3b:58:16:
cf:35:ca:90:96:09:8e:18:68:6d:a6:48:8d:75:2f:21:10:21:
33:ec:03:ff:b6:a2:c7:1a:45:38:77:cb:20:54:58:8c:89:33:
cd:5e:68:a0:3b:df:3b:6a:63:95:44:6b:4a:38:e7:1a:68:3b:
85:63:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:01 2025 by rpki-client on console.sobornost.net