Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa
File: 7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa (raw, json)
Hash identifier: RLL8yfpcnzJM5uacyllpvb6r1pfMAxWSFDqSSiHcw1c=
Subject key identifier: BF:86:70:63:8F:F3:5F:3A:14:F9:A4:CB:97:15:14:B6:B6:1D:D8:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0ED5B1B54D86E842A3BDCEDE1DFCD938CD4C0A0C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa
Signing time: Tue 15 Apr 2025 00:11:46 +0000
ROA not before: Tue 15 Apr 2025 00:11:46 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.24.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d5:b1:b5:4d:86:e8:42:a3:bd:ce:de:1d:fc:d9:38:cd:4c:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:11:46 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=b6dbc8969e398c259297d1c84efa32c2a6e872c39e4f9f22690b475ddb2002da, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:e9:ff:55:43:f2:b8:9a:26:69:02:55:95:
fc:f6:ea:d2:3e:c1:c3:6d:4d:a5:24:9c:50:ea:5c:
4e:c0:9f:15:11:7e:26:b0:46:ec:ef:8e:53:3b:e2:
a4:8c:78:20:c1:43:4c:0c:96:03:95:b0:d2:79:e5:
7b:cf:e3:e8:8d:28:f3:aa:68:98:54:0c:dd:7a:54:
db:e5:3b:35:c7:65:8a:da:5d:51:ea:d6:a2:e3:37:
06:aa:5e:f4:b8:36:d3:07:6d:1e:0c:8f:53:89:c7:
1b:c3:9b:d6:5c:06:0e:74:c8:e3:e5:2c:50:01:e5:
3d:94:13:ca:ba:a4:5b:28:93:ca:ea:be:9e:f3:4b:
a7:69:ec:8c:a8:0b:a4:49:6f:96:9b:82:41:ac:0f:
60:ad:8f:fc:a8:20:92:ea:a0:89:ab:b3:94:e8:7c:
25:c9:b3:e7:bf:9f:aa:1e:a6:52:a2:03:f8:68:47:
7e:b0:fe:fe:8a:3b:d3:70:13:d8:78:de:78:cf:b4:
a3:e7:dc:dd:28:a6:13:d2:75:8a:4d:bf:a8:20:61:
5d:42:bd:c1:47:d7:79:33:9d:e9:8a:b7:97:c8:c0:
8b:cb:4e:b8:10:19:02:18:70:08:18:5d:43:3b:45:
16:bd:cf:6f:b2:74:6a:d9:92:e4:b5:04:af:a0:b5:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:70:63:8F:F3:5F:3A:14:F9:A4:CB:97:15:14:B6:B6:1D:D8:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.24.192.0/20
Signature Algorithm: sha256WithRSAEncryption
92:36:b6:cb:78:ec:6b:c7:db:0f:17:60:38:73:ca:3c:c3:cd:
0a:4c:c2:b0:79:15:d9:5b:62:4b:ca:17:58:50:53:a1:28:35:
35:46:4a:37:f1:45:e7:1f:c7:34:db:f2:67:60:96:a3:cd:f2:
49:4d:1d:49:82:2b:41:b7:6a:b3:d4:03:39:4f:de:57:23:db:
4c:3c:69:56:9b:9f:8a:40:94:2f:65:9b:63:2d:64:e2:08:bb:
be:12:a9:c1:e9:12:29:c1:96:fe:94:21:35:90:fe:47:88:70:
4c:25:8c:97:53:a0:36:88:90:bc:d1:9d:c3:03:98:52:92:4b:
c3:60:5a:c3:b6:41:0e:f7:5c:f3:17:06:d7:66:ee:23:10:d7:
96:7b:a8:ea:39:40:cb:f7:a4:8a:4e:ce:32:aa:19:87:5b:04:
8d:df:fb:ef:91:fb:09:92:0c:f4:f4:1c:ed:73:b5:53:c3:e0:
89:fe:fa:de:ba:ef:fc:fd:5e:4a:84:7d:77:aa:e7:be:7f:09:
9d:f7:6f:10:da:c3:b6:8b:54:8e:ee:1c:ea:8c:5a:b4:4e:06:
42:33:1f:ee:19:e4:cd:f3:a5:1e:42:8f:57:ae:4a:a6:ff:15:
00:d6:82:3b:9a:f7:eb:bb:27:11:93:01:67:f4:4a:bb:5a:99:
2f:e3:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:10 2025 by rpki-client on console.sobornost.net