Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa
File: 67b9adc9-cd45-4063-bd3b-110c018322fe.roa (raw, json)
Hash identifier: 7urVh5FElpozPyUnxLXWUuwzqKp3b0189JOJWVWB7/U=
Subject key identifier: 45:C0:EF:02:9F:C1:83:20:26:29:BA:14:C8:AA:7A:10:99:40:27:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72ABD0956A19A7B0E5CB09DA8F843FD13D61E1E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa
Signing time: Mon 31 Mar 2025 15:10:31 +0000
ROA not before: Mon 31 Mar 2025 15:10:31 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.21.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ab:d0:95:6a:19:a7:b0:e5:cb:09:da:8f:84:3f:d1:3d:61:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:10:31 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=0957d613c4b05ad5015a3a970b99229e481d89349d076747a7a4755fc489def9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:9f:5a:2f:5a:5e:08:7c:4b:5a:75:09:58:
f8:8e:7d:e0:f0:fa:b2:64:aa:e7:4e:1e:e5:68:0b:
22:67:64:7d:12:82:a4:44:12:32:61:ba:fc:10:b8:
7b:ee:51:f1:0a:66:c4:88:34:77:e1:f0:86:cd:de:
6e:34:a2:bb:df:94:5b:36:1f:ea:57:68:56:2e:71:
c3:a1:54:a2:16:57:dd:9e:e9:ae:83:da:73:d8:d8:
76:2d:4a:d5:6f:77:ac:56:65:45:5a:46:6a:29:b0:
4f:00:55:d7:47:59:aa:94:15:11:cf:b5:af:af:11:
56:c9:56:d1:73:14:da:c1:41:7e:56:84:08:9e:b3:
62:e6:00:4f:8a:4d:3b:5d:22:72:65:fa:28:a2:ec:
11:fe:dc:0d:26:a6:57:39:99:a0:47:9c:6b:e8:b2:
bf:aa:19:a2:9e:03:d9:99:e3:5c:cc:c1:62:12:ee:
71:da:f2:2b:33:54:6f:bc:55:9d:8e:9d:89:a3:c4:
ae:e6:d3:22:38:a3:49:e9:ea:e4:44:30:f7:e2:84:
1f:5d:b6:2d:45:de:fe:a0:70:4a:ec:7d:f9:0a:0f:
a6:11:3c:89:6e:9e:5c:51:a0:33:65:cc:7e:6c:0c:
ed:1c:bf:15:de:2e:fb:ee:1f:d4:0a:1a:3f:a3:8c:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:EF:02:9F:C1:83:20:26:29:BA:14:C8:AA:7A:10:99:40:27:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.21.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:22:e1:82:23:99:61:f0:17:9d:a6:64:98:19:14:08:8a:f9:
b6:b6:8d:23:d1:aa:37:b9:e2:6d:e4:34:2e:85:35:15:16:bc:
39:75:a1:1f:21:dc:21:df:45:0b:20:1a:99:5b:f0:4e:8b:c0:
1f:01:05:6b:ac:a6:f3:7c:46:2c:18:9b:b3:32:27:43:ac:6c:
57:4b:71:98:d7:e0:2f:ee:5a:cd:d1:90:10:13:67:f0:19:9a:
bf:70:6c:57:6f:f2:e2:8b:5d:3e:4d:97:8a:32:d6:de:fe:5c:
44:ec:2e:0a:f7:2f:39:bb:7c:6f:f0:f0:b8:5d:fe:1e:a6:8c:
5d:aa:b1:11:af:9f:85:60:cd:30:7c:27:d4:9b:47:cf:33:89:
57:ee:ea:de:ec:39:ab:07:6d:50:dc:82:1c:b7:a2:6a:8b:48:
9e:05:25:b7:d2:dd:22:d1:8f:f8:47:96:84:9b:6a:cc:26:1b:
9e:a2:47:da:1a:70:db:ec:5a:59:bd:e2:29:3e:63:72:99:f2:
ef:c2:ce:2a:d7:0a:6f:12:c7:2c:9f:0c:47:b6:f7:19:cc:51:
a1:93:8b:cc:ce:0d:03:ec:22:34:79:01:e7:26:27:15:0a:0b:
7b:e0:56:1a:0e:ea:43:06:df:2e:7a:6e:6a:82:5a:0c:e9:60:
39:35:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:08 2025 by rpki-client on console.sobornost.net