Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478a8350-b442-4017-97f0-f31faf638a8d.roa
File: 478a8350-b442-4017-97f0-f31faf638a8d.roa (raw, json)
Hash identifier: n0CPNM0ldT4/qTMdpDmdiKz7rQnQpjYBXfozYSmkExk=
Subject key identifier: 0E:FD:1E:84:4E:E4:9E:FE:7D:C0:27:B6:AD:D6:31:2A:AB:97:E9:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DE7FFF310F53A7A61E541C7A93CB71F73138381
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478a8350-b442-4017-97f0-f31faf638a8d.roa
Signing time: Tue 01 Apr 2025 00:01:31 +0000
ROA not before: Tue 01 Apr 2025 00:01:31 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 155.193.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e7:ff:f3:10:f5:3a:7a:61:e5:41:c7:a9:3c:b7:1f:73:13:83:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:01:31 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=4eac6598378afbae621c7b5528f2bf138d9f9112bf57cb4ba77636801b7a9987, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:cf:9a:9e:13:6e:6c:81:c4:7d:34:c8:95:
98:91:3e:ac:36:ba:ae:d8:34:d4:cd:0e:9f:2b:91:
33:9c:e5:38:40:92:ba:9e:9b:ef:73:ef:3c:cd:48:
8f:da:54:cb:cf:a5:0f:1b:ff:79:57:a6:19:82:be:
fb:2b:5b:b1:95:c3:47:94:0e:db:07:58:25:96:2a:
1a:6e:ab:41:32:00:2f:4f:9a:cd:9d:3f:d3:00:0c:
77:83:52:c2:27:e3:b8:b9:3a:84:1b:eb:3a:40:40:
ed:3e:04:b5:73:24:65:63:63:4d:22:79:84:e4:7e:
5a:f1:d2:72:fe:02:52:ad:2b:bc:b1:bc:85:d8:9b:
67:d8:b7:ff:8b:7e:72:4a:d2:09:c0:38:11:5a:39:
04:88:ab:ef:52:71:8d:36:5b:e8:3e:23:a5:54:1b:
e9:52:40:82:e8:af:c6:a5:73:5b:af:83:d1:40:34:
42:8c:17:60:71:77:17:fd:40:7f:82:f6:56:65:47:
f4:b3:05:36:b2:18:40:48:63:d6:54:33:e0:18:5a:
77:b4:00:b3:66:f9:fb:11:d4:47:2c:d0:c3:9a:06:
57:46:20:ab:bf:ca:39:99:28:3d:61:a1:05:fc:23:
64:07:ab:e8:e3:c8:9e:24:02:c6:68:46:d7:54:2f:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:1E:84:4E:E4:9E:FE:7D:C0:27:B6:AD:D6:31:2A:AB:97:E9:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478a8350-b442-4017-97f0-f31faf638a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:e3:fd:66:f0:09:a1:e3:0b:df:f1:b2:fc:60:cb:12:69:a7:
12:2f:53:e9:6c:68:80:e1:32:3c:32:f0:fb:65:72:66:1d:d5:
c7:b7:2d:38:6c:a0:f8:71:3e:c8:de:52:34:3e:f3:58:28:95:
4e:85:98:22:55:34:cc:ce:fe:ef:56:f0:1e:1f:3b:ac:df:51:
1b:0a:66:26:bc:1b:e3:ae:e9:88:e6:c0:be:19:20:ca:71:3a:
ea:a1:43:f0:3a:39:65:e0:11:96:94:88:e9:a0:61:d8:ae:6d:
c5:ef:60:dc:63:20:86:86:21:e3:d1:5d:4a:cd:1d:1e:56:22:
1c:6d:46:1b:8e:52:2b:aa:56:a7:a7:9a:11:79:09:e5:fe:11:
c5:e4:19:93:c3:f9:33:ce:5e:a4:0b:02:d2:ae:d3:db:29:90:
55:c7:56:d6:05:1e:0b:1f:86:1f:30:be:66:a4:37:fd:1e:e6:
72:52:be:95:b1:aa:1e:ff:d1:db:6c:97:8e:72:b0:d5:e0:9f:
5f:49:23:2b:8f:99:1c:a8:f5:f5:b8:c9:45:e1:b8:d2:4e:3a:
46:78:79:61:c8:69:1e:66:4b:ed:3d:90:7b:ac:35:ff:a1:0d:
0d:b7:fb:cc:a0:ed:05:43:86:79:a7:7a:4c:be:a7:fc:bc:73:
f4:a3:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:04 2025 by rpki-client on console.sobornost.net