Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa
File: 528b6591-3aae-49d5-aecd-8320249f6d0e.roa (raw, json)
Hash identifier: jRDDp+wBR0BKz8j2kyTzgb/l+thOFeW2qYhbSlIMKjs=
Subject key identifier: 7D:6C:13:CF:2C:EA:54:7D:81:C5:97:CE:02:E1:2D:23:A7:23:75:2E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61E8988B5B78ACDC64475F60F50CC540B051E4D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa
Signing time: Mon 07 Apr 2025 15:10:25 +0000
ROA not before: Mon 07 Apr 2025 15:10:25 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e8:98:8b:5b:78:ac:dc:64:47:5f:60:f5:0c:c5:40:b0:51:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:10:25 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=3c765f9692332b6dd952b42034844e5c955b7149e176d1d84a2091f76c147386, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:de:f1:2b:3e:f9:ba:78:d9:f7:a0:e9:15:
2b:f7:66:59:7d:3c:3a:5c:46:58:5f:61:35:b4:c9:
b6:5f:c6:50:60:5e:46:d0:b6:1d:79:7e:f0:78:2a:
74:64:19:c8:de:63:c9:18:a0:fa:64:18:2d:c8:3b:
93:a8:30:1a:50:cb:57:16:6b:c1:d1:9e:95:72:7a:
71:1a:40:9d:fe:fa:e3:77:f0:40:05:10:89:6e:be:
6d:13:13:2b:f2:7b:b4:dd:cc:e7:c2:7a:4a:a6:7b:
0d:89:97:8b:99:52:e3:80:a9:69:6c:64:d5:c4:7f:
84:64:52:c6:58:04:70:78:24:a4:89:6d:41:ec:f2:
2e:47:b8:84:aa:fb:65:ce:ee:f8:2d:ea:f0:7c:a5:
39:87:72:da:96:c3:97:17:67:0c:31:4b:8e:0c:07:
4e:dd:83:2f:63:03:fd:9a:36:3c:18:b9:1f:af:ff:
3d:d0:50:29:8f:a5:9c:b8:e1:fd:92:2e:48:bc:cb:
04:14:59:f2:ff:77:e8:d1:15:bc:02:d6:99:75:0c:
01:2e:3b:5a:d8:b5:e2:22:5b:86:c7:79:f4:f6:f3:
85:36:ee:37:ef:8d:29:9e:37:57:a4:83:74:9d:ba:
02:01:af:0c:2f:ce:05:c4:13:80:87:7c:b8:03:3b:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:13:CF:2C:EA:54:7D:81:C5:97:CE:02:E1:2D:23:A7:23:75:2E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:ef:9e:c2:d5:cc:82:24:a6:8b:95:49:57:81:1b:ba:1d:4a:
eb:7f:93:83:04:26:0e:50:b5:a7:a7:95:b7:0c:33:e2:fd:57:
a0:3e:aa:93:fc:ac:b6:f3:27:d2:6f:54:2f:9a:a5:b6:89:56:
2a:a2:b0:7c:e2:d3:5d:de:99:cd:e4:5e:5c:03:d7:64:a9:a0:
65:72:17:d5:d4:fa:6c:6a:be:5a:a4:9d:b0:ee:55:8f:a4:20:
53:b5:c9:a2:a9:ae:1b:55:1f:6e:7a:d2:38:fc:b7:99:15:62:
51:20:6a:ef:7f:b1:db:60:1a:e3:10:ac:94:05:b5:3f:ca:1e:
c7:2c:a6:5e:7e:b5:63:e9:bb:7e:e1:10:c6:6c:07:f5:a2:37:
a5:47:f5:49:73:e1:56:50:28:ee:a5:1b:4d:11:16:e1:c9:29:
ac:65:fe:28:c8:ef:c6:7d:cb:20:c9:23:af:61:17:5a:11:47:
ce:e5:62:70:74:6e:a9:96:bb:74:1b:f1:2e:d2:22:1c:3d:8d:
3f:71:ba:09:5a:03:5b:f6:e7:1e:41:28:ff:98:bc:ac:57:f2:
17:d4:0d:3a:e5:fe:3f:0d:80:4d:e7:a4:03:f9:f5:87:88:bd:
f8:11:d9:ac:bb:16:a4:c6:11:88:d5:1c:80:28:b7:04:08:1d:
e9:82:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:05 2025 by rpki-client on console.sobornost.net