Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
File: 705d8477-e54a-4267-815f-2296f4a9554d.roa (raw, json)
Hash identifier: xM87jseJ2zKoXvodrU8hLo55SQMN1i/bKbYxH8TQcfc=
Subject key identifier: BC:A8:BE:7D:9A:19:BC:05:70:7B:93:96:3B:60:D0:31:94:46:B3:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04845770DA6628FE670CF7D7AB60AB176C4D90FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
Signing time: Wed 09 Apr 2025 00:21:25 +0000
ROA not before: Wed 09 Apr 2025 00:21:25 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:84:57:70:da:66:28:fe:67:0c:f7:d7:ab:60:ab:17:6c:4d:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:21:25 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=954ecf40572911dbe0e720771e4a7200b5ed4e97e27450f171e551851e1a3588, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:85:05:86:01:8b:b2:5d:af:05:51:44:ec:
b0:38:52:0e:bd:48:ed:87:70:11:a8:f9:ee:11:ef:
66:37:14:5b:25:b8:bf:48:65:ad:06:e5:21:13:2e:
c2:32:88:d1:38:e1:f0:5a:32:a9:0f:2d:83:35:f4:
f1:d1:20:10:d6:5d:16:26:a2:f1:6c:75:de:b8:a1:
05:ac:6c:a6:2b:f3:8e:16:7a:45:e7:66:a4:80:31:
0d:1f:67:7c:af:7b:62:a1:24:b1:09:1b:a3:39:76:
3a:aa:5a:e8:0b:55:b7:0e:d8:37:bb:05:23:bf:5b:
f5:40:39:0e:2f:2e:70:04:13:f5:36:39:1e:7d:89:
82:8d:0b:c4:e7:a6:17:02:7d:33:a2:09:d7:82:27:
65:18:8f:79:b0:08:0e:9a:76:a5:85:29:03:c7:b6:
63:fb:36:f5:76:52:4c:2c:6a:40:e3:ac:86:13:e8:
27:0a:0b:e4:e8:dd:a8:78:04:0c:fb:50:7b:9a:ef:
c6:71:cc:fc:5f:d4:47:bb:92:2b:34:47:37:f1:6b:
db:a4:c9:4d:bc:60:a8:56:b4:5c:6e:a2:1e:2e:74:
b2:4c:e1:8b:84:65:61:39:9c:d8:8a:b5:43:6e:92:
4c:3c:f3:79:eb:e9:b0:45:a6:f7:6f:ab:0b:e7:48:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:BE:7D:9A:19:BC:05:70:7B:93:96:3B:60:D0:31:94:46:B3:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.119.0/24
Signature Algorithm: sha256WithRSAEncryption
19:94:ae:65:c0:3f:81:cc:e9:6e:ee:e9:1f:57:3f:f9:a3:c4:
4a:e4:8e:9e:84:67:cc:2c:64:50:13:15:7e:49:07:bb:0b:c8:
c7:54:86:f8:46:46:06:0b:6d:f4:fa:af:85:58:9d:54:9a:0a:
b2:87:d4:a0:3f:43:d8:10:2a:22:61:a3:38:be:eb:34:e8:79:
1a:47:85:ae:a3:0c:3b:ea:6c:73:0d:a4:3f:32:11:60:3b:07:
98:34:78:77:f2:bb:b4:7e:dd:4b:7b:80:2b:ee:18:2c:e2:96:
c1:43:29:2c:79:10:f8:cb:17:da:ea:37:8c:0a:9b:71:36:98:
73:4d:07:76:c5:75:ed:e2:31:c1:e7:2b:a7:f9:ee:10:3f:02:
21:a7:8a:41:41:7c:f4:46:c8:26:7b:9d:ab:96:e5:da:a5:23:
79:99:04:82:86:4d:02:7e:f9:25:ed:8d:4c:cb:be:e9:c0:f8:
c3:18:3e:35:f5:e3:01:03:e7:4d:1a:5f:ca:55:93:20:8b:a9:
87:fb:fa:f3:fa:73:ec:6b:3e:41:e8:63:eb:08:c9:de:56:6f:
25:7f:c6:b3:79:66:08:cf:20:ee:7a:ca:7d:f7:d4:dc:7c:9a:
f7:96:ab:8a:22:cc:15:7d:7a:db:87:61:96:ff:48:02:8b:81:
4d:1c:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:09 2025 by rpki-client on console.sobornost.net