Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
File: 3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa (raw, json)
Hash identifier: v1tpHqZ+Ywm3TBXtiSOJxGorekWQY+x30Uokif6xb74=
Subject key identifier: 28:B7:79:72:34:A1:77:A7:B6:42:CC:86:35:2E:5D:60:F7:FA:9D:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4205608FE9C58A902C3DA36C021E3A49D4012CA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
Signing time: Tue 08 Apr 2025 00:00:25 +0000
ROA not before: Tue 08 Apr 2025 00:00:25 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.223.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:05:60:8f:e9:c5:8a:90:2c:3d:a3:6c:02:1e:3a:49:d4:01:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:00:25 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=30c510b884ba71cdc6d6c68889ec91ebba712c844bf37f2b1f2c46e0c7d059ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:e2:62:1e:01:6c:23:d4:3d:e0:34:d8:cd:
45:4c:71:40:c7:46:d2:3b:00:28:98:6a:cb:76:a7:
5c:b7:5c:3d:99:f7:52:94:1d:7d:3d:d9:c1:f9:a1:
74:6b:25:6e:dd:a5:83:66:19:16:81:60:9c:1d:b2:
53:6b:48:db:21:e3:82:d2:89:c1:ca:5a:37:1d:3a:
e6:91:d3:84:ed:82:55:3c:53:9b:7c:d2:34:45:14:
5f:61:44:9e:6e:be:02:3a:c5:59:d1:fc:d1:c8:d7:
16:91:82:da:e8:90:75:a6:f2:49:64:4d:5e:e2:21:
77:ab:89:47:4f:ef:66:76:ff:a4:37:4b:d6:92:5b:
0c:44:76:31:f9:a9:49:88:b9:9a:b5:35:8a:2b:9c:
a4:cd:a2:61:06:73:81:31:e0:ae:39:06:8e:c0:d9:
19:0c:0b:4d:a0:6c:df:54:b9:54:67:fc:7d:94:e6:
e6:63:9c:97:de:f6:74:b8:97:dd:5c:17:d5:55:56:
c6:78:b4:dd:a1:41:f8:35:03:d2:7e:1c:e6:69:67:
bf:38:ff:32:3a:b3:89:0f:cf:3f:b9:a8:73:c8:66:
a8:1a:16:48:39:64:fa:24:cd:fd:34:92:f3:ec:62:
77:cf:46:11:11:e6:ca:c7:45:99:61:3d:88:56:cc:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:79:72:34:A1:77:A7:B6:42:CC:86:35:2E:5D:60:F7:FA:9D:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.223.224.0/20
Signature Algorithm: sha256WithRSAEncryption
81:b3:2c:c1:b3:dc:6f:15:9f:ac:40:08:6b:fa:ff:7c:12:9c:
59:dd:a3:5c:56:e5:7f:95:89:8b:36:61:0c:41:a6:41:50:c4:
c6:1a:c4:42:3b:ea:e0:67:e5:72:c1:c3:1f:1f:0a:29:a7:ad:
08:75:23:a1:32:b8:a3:1d:b3:97:f7:72:43:07:ed:66:08:19:
2d:3d:6b:91:a7:9c:3f:03:7f:36:3c:e9:a2:ac:0c:8c:34:e4:
76:a6:fc:e4:0d:38:e7:bd:98:3d:fe:40:2a:cf:8c:31:3e:30:
9e:9f:d0:e1:77:c2:2f:e3:12:be:1c:6d:88:1c:d4:e6:4b:1b:
d7:85:fb:f0:03:97:87:86:48:ea:8e:46:95:51:0f:57:77:42:
c5:f9:ae:c2:b2:af:9b:b0:cd:bb:9b:fe:f8:25:e7:72:e7:ed:
cc:a1:02:1c:69:7e:c2:29:22:49:3d:ca:37:38:41:ce:11:0f:
2f:d3:ef:51:65:0e:79:4b:46:4b:31:2d:46:d7:8b:fc:da:03:
67:67:87:c7:e0:61:94:73:41:c7:e6:f8:02:ea:77:c0:a0:0f:
3f:08:61:a9:7c:bb:b2:19:2d:e2:c5:87:a5:42:ba:56:ea:fd:
7e:f5:b8:a0:d3:8f:06:9a:df:63:87:76:5b:c5:e5:48:39:91:
3f:e9:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:03 2025 by rpki-client on console.sobornost.net