Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b734e30-ac3c-49be-aa50-ed7a692648c4.roa
File: 7b734e30-ac3c-49be-aa50-ed7a692648c4.roa (raw, json)
Hash identifier: LMSoPN/1bF8IuF7uEdSsHBhARO52JAIAQnuueeZs3r4=
Subject key identifier: B5:DF:1C:E2:22:51:5B:3A:70:90:E6:2A:30:54:13:E3:B8:12:D3:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06A55972C5C3A056EF131C96FD5F30BC209BF773
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b734e30-ac3c-49be-aa50-ed7a692648c4.roa
Signing time: Sat 12 Apr 2025 00:20:54 +0000
ROA not before: Sat 12 Apr 2025 00:20:54 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.192.0.0/10 maxlen: 10
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a5:59:72:c5:c3:a0:56:ef:13:1c:96:fd:5f:30:bc:20:9b:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 12 00:20:54 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=0c2c84ae5437a70ca434796778ef4c40e75b902db1f63fdd6031eaf554832096, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:9c:74:c4:1e:1d:6f:dd:6b:61:9e:d0:82:
d4:14:81:54:f2:c6:1e:db:13:88:11:43:01:39:1f:
81:54:dd:e0:1b:f9:24:3b:c0:60:91:46:23:28:7c:
ab:0f:a5:04:7d:c9:a2:b0:23:9d:dc:91:e5:1c:c1:
c9:7d:9f:08:c9:13:5e:86:3f:a7:61:c4:16:a2:a6:
00:6f:6f:cd:6d:b4:44:7d:1e:d4:35:92:79:37:95:
71:23:be:80:2d:3c:ff:73:2f:41:b5:6e:f6:7a:c0:
65:64:8e:1f:77:04:f5:37:bb:81:e0:89:c4:41:2e:
d2:e8:31:fe:75:d6:45:c8:4b:75:f9:28:ca:c0:87:
30:97:28:90:d6:42:09:9b:af:7e:d1:08:ba:83:b4:
e5:25:88:d3:c8:54:be:53:84:40:22:df:bb:d6:6a:
21:4c:94:4a:f0:68:ec:0e:cf:0a:80:94:34:0a:56:
05:19:c2:60:b0:33:ef:c0:45:bf:55:e7:0b:92:9d:
cc:cc:bd:a0:df:42:72:f7:85:79:3e:38:a4:e1:dd:
4f:53:39:30:99:0a:be:dd:90:3b:82:d2:e4:c4:5f:
b4:da:fb:58:0a:36:0f:4c:33:76:6d:69:d4:0f:f4:
48:c9:ed:04:f9:ff:23:5a:7b:b7:52:c6:10:d7:86:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:1C:E2:22:51:5B:3A:70:90:E6:2A:30:54:13:E3:B8:12:D3:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b734e30-ac3c-49be-aa50-ed7a692648c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.192.0.0/10
Signature Algorithm: sha256WithRSAEncryption
6e:05:d4:b1:3c:d8:11:09:51:09:af:6f:3c:97:a2:70:af:f2:
c2:b9:d1:20:89:53:72:46:a3:ea:f4:ce:e5:7c:d3:ea:67:cc:
d4:87:79:e3:73:a9:45:e7:0d:d5:56:d9:8d:64:77:41:cf:a9:
d1:09:9b:e0:3b:cb:bd:c2:07:f5:cb:a2:a5:31:e4:69:59:d5:
c2:db:2a:0a:82:6a:e6:45:1e:ee:90:01:f7:97:77:02:85:1c:
ee:15:ea:cf:75:82:71:a4:31:4f:48:d7:f5:ed:89:06:41:d6:
86:ba:12:28:28:43:2e:09:ad:c0:5a:c7:e4:85:b3:d1:4f:27:
7f:82:6d:db:f8:13:08:d4:9a:98:08:ad:ca:30:16:a6:af:b9:
82:e1:3b:1c:2f:9f:43:8d:ba:e3:51:f9:f1:44:4e:5d:f0:2d:
e8:89:50:ea:e3:3b:e7:9d:d9:7a:54:0a:f9:e7:ff:48:1f:ae:
f0:6c:ab:b5:24:52:60:55:6c:e0:2e:67:7c:d6:93:0c:3a:00:
07:1e:e2:f8:a0:5c:10:df:cc:15:6d:71:55:d5:78:72:1c:df:
08:8c:3c:eb:9b:6e:d7:42:1a:3d:f8:3f:54:d0:cd:07:75:79:
04:8c:7b:ca:c3:5d:91:ff:6c:b0:80:b1:1a:55:77:1b:1e:0f:
ec:58:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:10 2025 by rpki-client on console.sobornost.net