Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3ee6cd-f171-42b3-8022-cf761407c799.roa
File: 4a3ee6cd-f171-42b3-8022-cf761407c799.roa (raw, json)
Hash identifier: zcyhS+3fKKYhWhJOpaZpWnH9k+VD0qiYh32n8kXOfuU=
Subject key identifier: B0:FE:DB:24:32:99:DC:EE:0D:F7:CD:E4:6B:C5:27:1D:54:6A:C8:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 168DF8B4601AD5A5C1CA1738C9D5817D4C9FBA4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3ee6cd-f171-42b3-8022-cf761407c799.roa
Signing time: Mon 31 Mar 2025 15:40:23 +0000
ROA not before: Mon 31 Mar 2025 15:40:23 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8d:f8:b4:60:1a:d5:a5:c1:ca:17:38:c9:d5:81:7d:4c:9f:ba:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:40:23 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=a1bd775364ec7f74d9abb301272bd90aa75940684cab5c6da20ccec31a991cb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:f4:d8:d9:a8:b9:b0:fa:1c:75:7c:fc:3b:
56:51:1c:d1:61:e9:90:e1:ad:f3:53:22:38:a4:96:
00:4c:eb:21:81:1f:ff:72:9b:43:a5:26:b1:85:50:
63:30:7e:6c:86:fa:1a:64:25:e9:76:41:e6:73:72:
9f:ef:2f:c5:1c:31:1b:e2:61:df:d0:5b:b0:3b:ae:
09:99:b5:32:d8:f3:06:73:12:bf:07:e4:51:bd:7b:
11:99:c7:7e:37:a4:ae:65:1a:f6:f5:0f:c4:f3:ad:
38:27:de:de:f3:c8:eb:cd:ba:e1:42:e5:10:cd:47:
21:e2:8b:4f:14:66:62:ce:a4:5e:63:49:3f:5a:04:
18:8f:6e:2c:88:7c:eb:cf:1b:cb:38:92:fa:1a:6b:
60:d3:60:ae:59:67:3c:cd:01:5b:ad:17:99:d6:c7:
a2:b5:f3:26:b2:e3:1b:13:57:44:7c:fe:4e:ae:c5:
f9:2a:b6:83:b4:fd:50:c1:86:00:0a:ab:75:48:da:
50:80:5f:59:b3:1a:ea:67:35:17:ce:2b:d4:e3:3e:
e0:d8:28:ff:6a:65:c8:52:3c:b2:33:77:27:2d:c2:
50:e7:ff:5a:1a:45:6c:5b:ae:cd:e0:39:48:63:bc:
c7:5a:ba:53:8f:4d:60:09:6b:54:42:fa:71:76:ba:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:DB:24:32:99:DC:EE:0D:F7:CD:E4:6B:C5:27:1D:54:6A:C8:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3ee6cd-f171-42b3-8022-cf761407c799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:33:37:c6:2d:74:2f:4b:cd:81:6e:e3:72:dd:15:a9:e0:fb:
ba:b1:33:f6:8a:3e:89:de:41:b0:3b:3d:1f:6a:86:23:43:ad:
32:ff:39:9d:be:fc:56:a8:46:15:8f:3b:8e:36:da:00:27:b0:
81:37:ae:20:97:fc:9d:af:6d:e6:e4:3a:a1:3e:80:8a:ed:9b:
8f:12:32:23:4f:76:88:f3:23:ee:e9:e5:9c:00:3d:c7:31:0f:
57:b6:ea:02:79:f4:c4:e4:6c:b1:01:5b:33:ca:3c:a0:b5:32:
4d:e6:8a:b4:5f:c2:e6:87:47:17:fa:35:8a:9f:70:7d:13:13:
14:6b:01:a7:ab:25:4a:23:30:ad:78:59:2d:1d:1e:aa:6d:c0:
07:bc:ef:f4:8b:4a:95:9d:7f:ba:17:a6:21:7d:50:4b:06:7b:
d3:89:6b:67:27:fe:b4:6f:2f:fb:78:18:70:53:cd:02:2d:6c:
d9:4e:78:fb:8a:8e:67:92:df:29:21:36:b9:08:34:0f:4e:f1:
02:5d:9b:e1:d1:b2:51:43:c5:20:f3:df:cc:62:50:1b:f7:d8:
7d:c2:0e:dc:e0:7b:09:64:ca:ad:1e:97:72:1b:a1:a9:00:9e:
ea:d8:e7:15:11:92:08:a7:c6:b1:f5:f6:ea:98:d5:e5:d9:50:
57:03:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:04 2025 by rpki-client on console.sobornost.net