Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d45680f-6785-471f-931a-167f976fcaa3.roa
File: 3d45680f-6785-471f-931a-167f976fcaa3.roa (raw, json)
Hash identifier: jPd+tRCCRD1OBPIlKQul3zEqGOBt47ym2KMIzzMHNZ4=
Subject key identifier: 5A:D3:56:98:B8:F2:4E:14:EA:41:8A:CA:9D:80:3D:8B:2E:51:90:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A788DD47F246CA5478BD45D201C26ABECFF22D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d45680f-6785-471f-931a-167f976fcaa3.roa
Signing time: Tue 01 Apr 2025 00:00:18 +0000
ROA not before: Tue 01 Apr 2025 00:00:18 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 129.220.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:78:8d:d4:7f:24:6c:a5:47:8b:d4:5d:20:1c:26:ab:ec:ff:22:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:00:18 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=647db40da06ada65e1cfb93d9c403effd81f710d41fcf8125c49d36d86295b48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:5b:80:65:62:b6:98:2d:a7:78:2d:8d:5b:
0a:00:08:d7:d5:e8:a8:3b:96:50:89:2d:4a:ea:79:
26:ae:ab:17:14:be:18:d2:34:e6:98:06:f7:28:91:
1b:36:2a:67:14:de:e6:58:1b:6d:48:b9:1e:bd:5e:
da:52:cb:0a:ee:8b:b7:3f:1a:b5:37:0d:b6:89:f7:
d1:73:c0:35:b9:28:67:da:86:65:ef:81:af:95:8f:
2a:0a:75:7f:c5:cc:11:24:f2:18:f9:c9:f3:5d:f7:
55:65:a9:10:26:1a:dd:59:51:e4:c9:55:06:33:3e:
79:b6:5d:c2:4d:57:b4:33:62:c3:fa:4d:b4:c7:35:
f8:3a:03:b5:ba:7b:fa:e3:4f:6a:35:3d:e1:e5:0f:
4d:24:37:a2:a7:0c:1a:22:0d:28:c9:c3:db:63:3a:
54:b8:d0:97:ec:e7:e9:46:7d:e6:dc:17:27:43:b4:
4f:8a:26:f1:b4:da:b8:54:56:78:a6:e8:9e:a8:84:
d0:ec:77:3d:31:98:a9:53:90:59:47:9f:af:16:0d:
8e:e3:5c:a3:8b:0e:cc:40:96:0a:fb:11:6f:85:64:
98:75:40:13:2a:fe:1a:02:c4:0e:3a:74:2f:da:1d:
dc:05:6b:a9:36:9f:af:68:19:25:4f:d9:f5:fa:56:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:56:98:B8:F2:4E:14:EA:41:8A:CA:9D:80:3D:8B:2E:51:90:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d45680f-6785-471f-931a-167f976fcaa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.220.96.0/19
Signature Algorithm: sha256WithRSAEncryption
29:83:24:f8:42:3d:b1:70:de:68:bb:27:e0:c3:0f:67:cb:b7:
e3:b0:76:36:83:27:6f:a3:7c:12:6d:cd:a7:d9:6a:89:eb:98:
2a:6d:8a:36:d2:12:fa:a6:b1:e7:fc:a0:fb:36:cf:50:fe:3a:
d7:25:26:44:b5:35:eb:61:e6:11:04:a7:9c:3e:8e:36:c4:d0:
65:e3:e1:25:fb:77:6c:55:ae:93:c3:1b:69:1a:ba:43:f4:9a:
b3:02:13:32:ff:1f:d0:b4:fc:0c:0b:b4:ad:41:40:ce:f6:14:
05:67:6a:5d:59:83:71:fb:b3:b6:8d:ff:5a:64:6f:3b:6c:1c:
b5:99:b2:40:3b:03:f5:7f:c0:b6:e4:48:be:66:32:83:11:dd:
3a:47:69:33:78:3e:7f:f3:9f:eb:8b:78:18:3f:a4:14:fd:b0:
65:58:9b:6a:8d:7d:42:ce:90:9a:13:09:2c:d8:da:32:43:57:
33:4b:6b:2a:2c:dc:15:78:dc:94:67:e1:7b:76:bf:1a:69:72:
94:9f:d3:d6:d0:30:2c:11:8b:a9:00:08:13:3f:e1:a5:9f:16:
30:74:e3:14:b3:69:5e:6b:76:3c:c1:32:e1:75:8f:0c:ef:c5:
c3:6f:75:17:a9:c2:4d:00:c5:e6:25:3a:da:77:dd:a9:bf:6b:
51:cb:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:03 2025 by rpki-client on console.sobornost.net