Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa
File: 5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa (raw, json)
Hash identifier: V1G05uND0X61Y5YsjsMiVkG1B6Rz0tUbt7UO6YkSIfM=
Subject key identifier: 60:B1:BB:A7:87:9D:CB:24:BD:74:09:AB:82:56:19:83:6E:62:53:A9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F8D0251D3FF6D4847BEEA753B614DC3EF71C6FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa
Signing time: Sat 29 Mar 2025 00:10:32 +0000
ROA not before: Sat 29 Mar 2025 00:10:32 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.20.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8d:02:51:d3:ff:6d:48:47:be:ea:75:3b:61:4d:c3:ef:71:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:10:32 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: serialNumber=9d4e148b836d1cef1eebcd22b5253898b9525259933a07599abc32b3c010a87f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:ca:91:86:d4:4f:3a:66:85:c8:1d:a2:6f:
37:de:b1:fe:f9:2a:44:66:84:6a:33:a5:18:2f:6b:
67:02:27:aa:76:c0:4b:6e:46:76:63:36:c6:25:98:
b1:74:b5:52:45:fe:73:1e:c9:d1:19:67:5d:08:3a:
16:bc:4e:27:73:7f:ba:21:a8:44:36:3f:ac:c1:e7:
54:d4:59:db:ff:b9:d2:cb:5a:6d:59:e0:48:cb:4f:
3a:13:b0:3b:61:9e:2f:ad:b0:ad:ea:4d:e9:3b:81:
24:35:35:de:da:5d:e3:49:29:13:05:cb:d0:73:ef:
6c:bf:20:14:71:2f:dd:30:67:2d:de:34:17:65:7c:
91:4b:fe:76:df:31:f8:48:dd:e8:6c:81:44:62:6d:
48:dd:ed:64:77:bd:9e:61:90:92:c7:a2:88:c8:0a:
2c:3b:93:47:dc:fa:e1:ca:d1:5c:d0:ab:db:46:04:
c3:d3:1c:8a:09:f2:03:65:c1:06:ba:bf:ae:38:c5:
fd:ce:4d:97:89:d7:48:2a:ed:dc:a9:5a:d9:37:0e:
bc:a2:85:26:05:2a:7f:4d:9e:52:83:45:67:9f:09:
7e:82:3d:a6:de:ab:25:61:29:4a:4a:b4:0d:51:46:
60:ff:24:2f:5a:4f:c7:03:cf:16:aa:6a:a6:dd:76:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:BB:A7:87:9D:CB:24:BD:74:09:AB:82:56:19:83:6E:62:53:A9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.20.136.0/21
Signature Algorithm: sha256WithRSAEncryption
29:f3:2d:3a:3e:06:bb:0e:13:8a:c3:17:04:10:59:1f:17:27:
f2:15:04:dc:0a:34:53:18:63:6d:93:38:70:3b:cc:c7:6b:fc:
2a:b7:eb:e9:70:e5:41:56:6a:61:67:f6:ee:13:fe:20:a2:d3:
88:e4:92:3c:08:e2:e8:c4:4a:78:04:3d:96:a2:9f:f6:3f:44:
13:27:9f:dc:ad:6c:3c:49:76:25:85:84:d3:e9:a3:a2:47:6e:
46:0f:52:b0:2a:8f:2f:de:2f:d6:2b:96:c1:a9:4a:70:85:47:
b3:4e:ed:ac:cd:5f:96:e1:8c:a7:6a:88:e0:36:70:93:2a:4a:
3e:83:89:45:14:4e:ef:4a:29:e2:6c:90:ed:a9:26:61:6e:84:
cb:60:db:96:88:88:e6:c8:f3:fa:1e:bc:04:09:88:19:ad:a1:
8b:17:ae:ac:7d:6d:29:2d:1b:8d:86:87:e3:98:ec:dd:dc:76:
ab:a5:56:8f:77:ad:ca:5a:3e:51:9b:73:32:2d:07:0a:98:7e:
ed:1c:b6:b8:1e:51:02:04:84:58:8f:53:62:a6:db:08:c3:31:
81:ca:eb:81:66:e8:4c:3f:5c:a0:68:c4:fd:75:56:0a:e3:9b:
ec:54:01:d7:bd:10:f1:15:cb:e8:f1:76:b9:3f:20:04:1e:0a:
17:f3:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:07 2025 by rpki-client on console.sobornost.net