Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa
File: 5238a6c5-a106-4b94-9f46-2c619db863c6.roa (raw, json)
Hash identifier: ZZxAf9mFGtnRmXNlIUpVR0gQKRTFgVTFFRKGs4YBvI4=
Subject key identifier: 48:45:C6:22:D2:2B:3C:30:45:34:BA:F3:A6:55:5C:C4:D0:49:D7:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D099CB0170415DE57D4C3CDF4995E479F067D98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa
Signing time: Mon 31 Mar 2025 15:11:28 +0000
ROA not before: Mon 31 Mar 2025 15:11:28 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 107.150.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:9c:b0:17:04:15:de:57:d4:c3:cd:f4:99:5e:47:9f:06:7d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:11:28 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=38fc89b77e66dcdc1cb5de7665f28c86f4e85808e32cc07bcf078631338d40c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:d4:dd:2b:a6:ca:df:6d:7d:47:c8:bc:32:
d3:33:1b:f4:5e:18:8a:45:c6:fb:e4:62:c5:ff:11:
9c:c3:fd:8b:a6:5d:65:e0:5f:8f:dd:5e:f4:5a:aa:
99:f3:05:e5:c4:fb:31:10:1c:88:28:51:24:88:c5:
e3:8f:e2:a6:b9:00:34:0c:b9:71:14:63:f5:ad:66:
5f:da:7e:78:f6:9f:30:0f:76:64:15:b9:2d:23:f6:
65:02:1e:d3:bd:32:95:1f:3e:c3:8c:ee:05:1e:9a:
43:7e:79:b9:30:b6:56:c1:11:7c:73:c7:0f:99:ac:
37:8b:da:75:49:25:f1:c3:be:3c:db:78:3a:c6:77:
c8:ce:f3:14:96:ae:08:b2:ab:7f:39:3c:33:ff:df:
75:2c:15:4c:b5:bb:b8:d7:b6:cf:1f:67:9c:b1:2a:
1f:e8:fc:2d:e8:c3:39:f3:a2:3d:6b:08:b2:73:60:
f3:7b:99:7f:33:b9:90:0f:4e:1b:04:57:69:bf:47:
ed:ca:16:a6:ba:1d:75:ad:e4:68:5b:20:28:87:16:
0a:68:00:39:fc:e2:bc:79:1d:70:48:d7:56:af:7e:
8d:d4:3b:ac:5f:4c:7c:e5:f3:d3:c8:ec:1a:69:9e:
56:8b:1e:38:4b:c3:e9:24:1e:86:4f:a2:8b:18:fa:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:45:C6:22:D2:2B:3C:30:45:34:BA:F3:A6:55:5C:C4:D0:49:D7:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:2b:36:98:ff:f3:5e:10:2e:95:00:a9:e8:94:51:b1:4a:e3:
1c:d5:23:5e:ee:4a:2f:35:5d:27:31:b9:2b:01:bc:0d:f0:a5:
23:11:d4:da:90:0f:dc:e3:8b:91:8d:05:84:3e:2b:2f:d7:a9:
67:93:73:b3:10:78:66:33:e8:5a:fa:d3:7b:b7:1f:ad:97:aa:
d2:fd:95:f1:bc:da:50:84:55:5b:a1:03:e5:37:3b:64:a4:9f:
f8:9c:a3:47:5b:66:22:19:6e:94:01:25:71:cf:8f:e9:4d:2d:
fd:f9:20:92:46:c8:6c:c7:55:c1:77:db:90:27:a9:91:41:7d:
e7:33:a8:0d:17:68:e7:1b:03:ab:19:9f:57:da:89:6d:16:23:
ef:9b:55:79:e0:ae:73:74:18:24:50:f8:34:2d:b4:4c:ce:bd:
3d:ac:2a:0b:8f:13:71:17:af:a3:15:70:3a:ff:93:dd:6a:b0:
12:69:fb:8d:1a:6a:78:b2:b9:fe:78:76:81:0b:7b:9c:9f:56:
9f:c9:8c:99:66:28:dc:47:d4:3d:f3:23:7d:0b:41:d0:87:73:
ea:f8:8a:34:1f:e6:62:3b:fc:f0:31:08:5b:76:6d:53:d2:01:
36:38:dd:dc:50:0a:1d:76:e9:77:24:c2:99:03:3e:c1:3a:e2:
a6:41:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:05 2025 by rpki-client on console.sobornost.net