Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56cbb688-b79c-46f1-9338-01219b6222c0.roa
File: 56cbb688-b79c-46f1-9338-01219b6222c0.roa (raw, json)
Hash identifier: FYFmWAytfp+HbiFwN5rKIZz49qcEjzTk1ZTJRuPj9is=
Subject key identifier: 28:21:D9:A0:1E:32:63:B9:16:E5:BF:60:D1:49:96:65:6C:CE:B9:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 758B20DB4ACAF835E37FC31A20718CD965EE7EC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56cbb688-b79c-46f1-9338-01219b6222c0.roa
Signing time: Tue 15 Apr 2025 00:20:18 +0000
ROA not before: Tue 15 Apr 2025 00:20:18 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.52.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8b:20:db:4a:ca:f8:35:e3:7f:c3:1a:20:71:8c:d9:65:ee:7e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:20:18 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=5ca3d636e29d7295db4d9517ca480c7f9ff3891422a3ee3a94fb8906fa63a28b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:2c:bc:24:3f:bc:dd:81:7e:57:1b:a0:5c:
72:aa:00:b9:61:be:bc:4d:22:cf:b7:85:1a:9d:db:
f0:d9:6b:45:72:1d:fa:c0:4a:e7:40:0d:40:63:dd:
5d:24:76:de:53:71:4c:9b:d7:f8:8c:ba:03:61:a0:
9f:9e:cb:5b:b5:6e:02:26:81:83:2b:92:35:68:f6:
56:ec:c8:6a:79:53:81:55:ff:d4:67:6c:97:74:2a:
31:c5:c7:9f:cb:76:75:cb:d8:98:8b:d0:e1:55:fd:
a5:d0:ed:4a:20:56:d7:6c:48:6e:4b:fa:b2:c1:bf:
9f:d0:7b:02:30:e5:45:bf:38:b0:db:00:b9:a6:ff:
e7:22:cf:e4:0b:5c:e9:bd:16:3a:13:77:1f:d2:20:
57:84:a0:64:c6:b5:a9:5d:f1:00:c0:f4:8b:7b:fb:
35:f7:77:1e:c3:59:fe:dd:7b:a0:62:51:c6:65:22:
0a:09:fc:db:62:6f:69:a8:96:22:35:7a:f4:25:80:
0c:63:eb:9b:51:34:8d:cd:f1:e8:f0:d5:a9:d3:74:
b1:06:41:25:46:41:89:b2:88:1e:f9:29:41:d3:8a:
59:47:43:7a:5e:f1:15:57:50:e6:34:53:36:c2:31:
58:d7:29:e8:c4:c5:fa:52:a3:40:7d:c6:bb:79:9b:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:D9:A0:1E:32:63:B9:16:E5:BF:60:D1:49:96:65:6C:CE:B9:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56cbb688-b79c-46f1-9338-01219b6222c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.52.144.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:dd:9c:e8:2c:45:5e:35:08:a3:f4:3e:b2:c2:86:3d:f3:e4:
10:f0:fc:00:77:3f:64:2b:4e:e5:fb:c0:60:52:78:f2:57:9c:
aa:08:40:e5:b9:1f:c2:66:5a:61:a9:5d:28:10:33:09:95:8a:
f5:6d:55:b1:0d:c6:e6:de:b3:87:0f:2c:e3:89:e5:5a:e7:89:
a9:42:ed:4e:c7:2f:3c:ee:8f:32:41:44:80:6f:10:86:49:52:
21:da:36:ce:3d:cf:ae:71:01:63:57:ee:ab:03:9d:11:82:72:
0a:38:23:78:10:83:2c:22:81:37:ac:98:fc:bc:9f:15:54:8d:
74:da:0e:70:b8:51:29:d0:50:4f:89:46:d8:b2:c1:ed:3e:43:
b8:7e:80:7c:2b:14:00:48:e1:e8:49:f3:1e:75:12:b8:83:5f:
aa:b6:c3:ea:82:6a:1e:56:73:ea:08:81:ff:14:c7:8b:61:24:
b9:c5:2c:86:6e:46:c9:02:29:bf:ea:76:76:dd:7f:9a:56:0a:
94:d6:3e:30:52:62:55:bb:c4:5b:7f:c4:f9:ab:b8:4e:a0:fe:
a2:2a:31:75:86:bc:84:c1:b8:16:c7:cf:05:fe:6f:d2:48:46:
ac:44:b4:28:8f:9f:46:6a:4b:e3:27:f7:e4:04:8a:2f:95:27:
0d:b0:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:06 2025 by rpki-client on console.sobornost.net