Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa
File: 58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa (raw, json)
Hash identifier: GErrlrdh1Fy5tqC3PSJ+igqrOdyR4sSzOGpMIy400Kg=
Subject key identifier: 6C:38:31:74:25:45:F6:FF:88:35:BE:78:68:F3:32:EC:BC:63:6C:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21C1A0BED6C78158E155FA30CF1297CA123217A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa
Signing time: Mon 31 Mar 2025 15:50:27 +0000
ROA not before: Mon 31 Mar 2025 15:50:27 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 75.101.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c1:a0:be:d6:c7:81:58:e1:55:fa:30:cf:12:97:ca:12:32:17:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:50:27 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=1eb9c5477792f5ac8b59de0719564219ddd67d1229cc09d467afaccd758c802d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:e8:07:bd:41:7b:7d:ee:70:7b:47:cf:66:
9f:e3:5d:f2:5a:15:b0:b0:ee:3c:b7:b3:f4:54:a0:
ef:a0:2a:f3:3e:78:b4:16:f2:1c:38:c6:77:60:ff:
d3:11:41:c2:12:dc:31:db:14:83:8b:e2:06:ae:0f:
3d:16:da:53:a1:8c:47:88:ed:00:d3:2e:64:11:d1:
68:71:ea:84:bd:a3:60:0b:94:d2:ac:99:f2:07:22:
9a:04:9c:61:c9:26:84:3a:77:cb:44:2e:e9:3b:cb:
eb:2f:30:f8:be:0e:83:0d:ef:c5:58:33:f2:9c:72:
93:95:4a:34:7a:b5:9f:a0:d0:a5:73:f1:97:2a:d8:
e4:c8:e1:9a:fa:77:08:66:01:cc:21:0c:c1:1e:a5:
43:83:89:e0:f2:c5:6a:ad:3d:4f:cb:75:d6:12:ae:
33:93:6d:e3:63:e5:7e:c1:fa:1b:fa:16:f1:b1:93:
35:60:21:43:c6:1a:89:0c:55:9f:8d:d0:1e:7d:1f:
18:2d:a7:c0:ef:dc:2f:16:62:51:ff:63:e6:09:20:
99:92:c7:34:f8:6d:54:e3:bc:e6:1a:ea:c3:04:92:
1d:36:4a:3c:83:46:72:7d:ba:c0:89:9f:1b:0d:33:
87:01:bf:32:e8:13:fb:6f:6b:66:61:d8:f0:18:5d:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:31:74:25:45:F6:FF:88:35:BE:78:68:F3:32:EC:BC:63:6C:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.101.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:84:c1:9e:2f:28:e4:5d:53:39:eb:6d:10:c5:8a:3a:23:67:
8e:40:cf:63:db:c4:ac:3e:1c:f9:55:c6:92:8b:e9:f4:d7:3e:
d2:ac:d0:6e:05:e7:78:4a:16:f3:0b:18:f5:eb:a3:bb:6d:8f:
5b:de:6f:b4:40:56:73:56:e8:02:61:44:41:b7:e8:50:a6:57:
1c:f4:9e:89:dc:81:88:6e:a1:b0:68:74:01:cd:0e:c9:0a:b9:
27:98:20:63:2a:85:bc:27:c4:0f:c9:21:31:a8:64:02:bc:6b:
cc:3a:db:99:f7:6d:6e:7b:ad:8c:a9:df:45:c7:41:80:a0:0f:
ca:10:80:57:d5:27:4e:0f:51:0e:24:81:44:4f:8a:28:06:de:
6e:f4:f5:5f:f7:29:23:1e:fe:db:15:be:64:29:86:b2:2e:49:
b0:18:7d:5e:ec:7f:a5:40:05:6e:6e:61:8b:17:fa:ff:cd:9b:
5b:33:37:46:5c:85:5f:82:6e:03:d6:4a:90:d1:39:a7:66:17:
19:48:85:0c:a9:5d:5c:8f:45:7e:d7:b4:4f:8b:48:26:39:60:
2d:b8:68:f4:c2:34:87:bd:e4:a9:18:72:0d:c4:b3:12:e1:7d:
00:ae:8e:77:04:62:3f:c1:36:93:69:20:cf:b8:a9:df:67:b2:
02:20:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:06 2025 by rpki-client on console.sobornost.net