Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
File: 790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa (raw, json)
Hash identifier: 05vaFyJv3ROm9ihj711PdAkG5p3lMI7sC0qs9ACr2nA=
Subject key identifier: D1:35:BA:5F:53:75:5A:A3:48:24:59:0A:C8:66:46:20:46:2A:49:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 47FB95A9B10D41D6F4DCA267052CB6C9AC73065E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
Signing time: Tue 08 Apr 2025 00:41:58 +0000
ROA not before: Tue 08 Apr 2025 00:41:58 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 75.47.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fb:95:a9:b1:0d:41:d6:f4:dc:a2:67:05:2c:b6:c9:ac:73:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:41:58 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=1b13bc3c58ba891eb59ba7ed535153095a5b71f92556a5858dd0fb8dbf306402, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:49:d2:51:08:03:bb:eb:e3:5f:dc:c7:1c:
b4:0e:79:4b:0f:c7:4d:a4:f1:89:db:8d:13:cd:0c:
44:68:fa:07:65:f8:53:1f:8c:cb:94:6c:c7:71:c3:
a7:c0:aa:79:8b:87:da:a5:41:a7:5b:a8:bf:59:e1:
15:4a:4c:11:d9:99:de:76:a9:74:28:8e:14:1f:c8:
bd:e6:5d:de:ae:46:70:de:56:fc:43:9e:26:d1:c8:
50:d5:29:a2:ae:75:46:11:07:98:72:21:74:ec:ed:
ed:26:79:a5:69:65:9b:77:1c:7a:f8:73:b1:d3:24:
ff:f1:dc:f8:73:dc:fc:a9:c7:66:04:85:55:1e:12:
5b:9e:19:2b:0e:42:d3:39:1e:c5:56:58:a8:c3:da:
0d:d4:d0:98:fb:03:d0:c9:9d:ca:5f:e7:01:cd:c9:
1c:87:8c:f0:53:28:9a:19:ea:14:b4:54:eb:d7:6c:
be:2e:0b:5a:d8:1d:72:bb:1f:1b:8f:7f:ce:cb:2d:
22:93:ca:d5:10:52:52:3f:99:7a:cf:f6:95:b1:1e:
53:b5:8d:0f:7c:ab:1e:01:8f:35:8a:0d:71:9f:d8:
c3:c9:b0:60:a1:f6:1e:48:95:23:ca:fd:94:43:6e:
28:ab:7f:d8:2f:19:92:a1:83:4b:ce:9f:b2:bd:96:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:BA:5F:53:75:5A:A3:48:24:59:0A:C8:66:46:20:46:2A:49:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.47.128.0/18
Signature Algorithm: sha256WithRSAEncryption
22:34:00:6f:e9:98:89:24:60:6f:b8:b7:eb:20:f9:30:75:bf:
b7:08:33:20:15:34:07:67:55:0a:1a:74:1f:6f:29:67:db:7b:
cf:e5:48:94:b6:dd:4d:c5:23:cd:aa:b9:e8:bf:c3:b0:00:50:
28:e5:da:86:3f:34:33:99:6a:2b:84:74:58:bf:7d:6a:6f:45:
1e:fa:df:fe:d9:70:02:eb:98:1a:6e:48:ba:f9:1b:25:88:84:
7b:8a:98:62:8a:36:f7:2e:c0:3f:fe:d8:40:31:fb:11:d9:63:
fe:8f:34:d0:13:15:5b:80:b5:ca:8c:99:50:32:8c:3d:e2:f3:
cd:c7:17:05:81:c8:2d:da:0d:78:a2:d2:45:e5:c9:e8:d0:cf:
b8:82:a7:59:b1:b1:ac:68:f2:34:89:cd:1b:57:aa:ee:0e:cd:
1f:3c:69:2d:2f:8b:b5:f1:8a:df:8d:90:93:88:1a:7c:77:79:
bd:ea:04:e4:10:82:d3:b6:2d:3a:6a:01:26:d2:42:d6:49:83:
52:ab:f2:71:da:f8:8b:da:ba:85:83:a4:6f:ba:41:16:d1:69:
fa:df:69:bd:da:f9:cd:87:fe:37:10:9d:f1:d4:54:2e:b2:04:
b8:e6:c5:56:78:15:a6:40:3b:02:2c:b1:8c:f6:a1:ae:02:4a:
35:e7:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:10 2025 by rpki-client on console.sobornost.net