Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53b9504e-a82e-4bf9-be01-2560b7b49d15.roa
File: 53b9504e-a82e-4bf9-be01-2560b7b49d15.roa (raw, json)
Hash identifier: 3kxqlgocylXuCKjASWskgbudN9nSR5VWPWnUVEPr9is=
Subject key identifier: 6D:74:0C:43:CD:F6:09:8C:FB:82:5A:5A:5D:10:84:23:EE:B9:D9:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E14C2E8E13898C403DAFBF98E9C3EDFB0D0BF98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53b9504e-a82e-4bf9-be01-2560b7b49d15.roa
Signing time: Tue 15 Apr 2025 00:21:49 +0000
ROA not before: Tue 15 Apr 2025 00:21:49 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:14:c2:e8:e1:38:98:c4:03:da:fb:f9:8e:9c:3e:df:b0:d0:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:21:49 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=4aed55e0a4161477e38fd89c149602f6eb01b81596777258f154300cfd0c09b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:bd:af:0c:c4:05:4e:2f:4b:ee:f8:59:67:
5d:41:63:e8:65:cb:7e:40:62:01:5d:9d:bf:54:d1:
f3:c7:a8:7f:b4:74:57:95:94:18:22:c1:73:92:4b:
b8:10:69:2b:8c:ba:c1:f0:2e:bb:ef:43:b4:d9:b4:
0e:69:91:a1:07:1e:2d:a3:8c:9e:ee:91:f1:6f:f3:
1a:7f:8e:79:ea:42:f7:ed:4d:4a:ad:d8:c8:fd:f9:
55:a6:c1:26:5b:ed:20:c2:34:bc:56:11:70:9c:72:
b4:4c:17:2b:51:f0:e1:2a:5b:0d:2a:b4:ec:ec:be:
76:09:0b:c9:b0:53:cb:10:0f:df:cc:bd:15:a9:d1:
98:ab:85:52:63:4f:e9:1e:f4:38:42:da:b9:88:29:
2c:1f:96:30:e6:68:29:90:35:12:a2:f3:90:72:9a:
7a:1b:a7:a0:10:9a:4a:41:c8:19:7b:f0:6a:5a:e8:
1d:3b:90:29:4d:a7:c5:96:f3:bb:23:b2:0c:84:fd:
f1:a4:1a:2e:d0:e3:2f:dc:4f:77:5b:6f:d2:6b:71:
44:fe:de:70:57:89:56:20:cb:eb:85:59:59:fe:58:
7e:4c:f7:d0:ab:ff:6e:36:ef:2d:58:e2:b4:df:36:
2a:74:40:5f:c6:5f:84:6d:de:34:a2:5f:fd:ce:de:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:0C:43:CD:F6:09:8C:FB:82:5A:5A:5D:10:84:23:EE:B9:D9:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53b9504e-a82e-4bf9-be01-2560b7b49d15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:98:1e:6c:95:aa:62:5f:92:ac:0b:e0:37:71:01:9b:d6:d8:
3b:44:28:1c:4f:4e:cb:0d:9a:7d:48:7a:ff:20:a2:20:b7:25:
10:9b:e5:57:71:33:84:50:71:83:5c:ea:0f:bf:aa:2a:df:a8:
00:37:9f:78:76:86:93:8f:84:ca:62:44:15:35:21:8c:59:a7:
1e:78:8a:4c:df:d9:bd:7e:6a:3f:2d:94:b4:3d:92:81:f7:f4:
ab:9d:18:7c:d7:22:ff:c3:0e:cf:d5:50:79:4e:51:72:8c:63:
d9:39:6b:a4:70:65:35:2b:7e:da:64:09:b1:6d:7f:ee:d9:ae:
ae:cc:c5:b3:cc:74:69:3c:9d:53:9e:73:a5:14:c6:d1:82:14:
c2:89:a1:0c:5e:ec:4f:be:89:30:17:6a:41:8f:65:a7:4e:15:
6c:d8:36:a9:36:96:87:d8:3b:31:a0:27:14:fa:54:8a:d5:3a:
cd:e3:5f:48:3c:ff:7f:21:89:f5:a9:0d:09:dc:0e:1b:a8:1d:
47:28:56:eb:b0:2e:db:be:24:b1:3c:80:80:e4:e5:dd:34:6a:
39:78:1a:bb:aa:b8:fa:6f:50:f3:9e:ec:ae:7f:82:ce:04:b0:
9a:2e:cb:4d:d6:45:06:e3:8e:fc:16:66:24:d0:fc:94:a3:d9:
10:a4:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:05 2025 by rpki-client on console.sobornost.net