Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc9f0e1-f459-488b-91a4-d783253227a4.roa
File: 7dc9f0e1-f459-488b-91a4-d783253227a4.roa (raw, json)
Hash identifier: PoXgUh8EYTpmM/QLnp4he3xh/ojGiaWF5Y4RNbqJ8LI=
Subject key identifier: 93:D1:CE:75:96:5B:A9:9D:E2:D3:23:A0:BC:C8:B0:76:C6:C6:94:91
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B3CE7BB00D788BF81770A55066310FFD2BAADE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc9f0e1-f459-488b-91a4-d783253227a4.roa
Signing time: Mon 07 Apr 2025 15:01:12 +0000
ROA not before: Mon 07 Apr 2025 15:01:12 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3c:e7:bb:00:d7:88:bf:81:77:0a:55:06:63:10:ff:d2:ba:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:01:12 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=983622c8a790bd8abb71d541a88c593fb4629e2f4814ec490f6a5f36d307c0bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:0b:24:0d:43:79:9f:fd:03:1b:87:06:b0:
c3:03:32:5d:7b:c2:f7:08:fe:21:3d:4f:ae:c4:b2:
82:b4:99:34:01:f5:90:a5:04:ff:a0:4a:17:e1:da:
d8:91:62:07:77:c1:ce:d8:6e:61:63:76:b7:90:b1:
f7:72:59:1c:6b:a7:e0:9d:c3:e8:ed:eb:c9:86:65:
8e:93:eb:f8:82:34:4a:13:2f:62:05:fb:8d:53:ba:
5d:87:5e:7c:e0:6d:09:3b:05:23:7e:e4:c9:5e:ed:
b6:70:76:6e:3e:89:31:8e:3b:58:d9:c6:39:8d:98:
94:4e:f7:b0:70:c5:94:95:a6:89:f6:2e:c6:19:42:
d4:34:66:e9:36:ed:ef:88:00:f2:25:4a:aa:52:26:
86:2a:83:19:8a:e4:56:b9:b8:01:bf:18:a3:40:a4:
76:0f:8b:cb:7c:dc:0b:d9:04:f4:9e:b4:66:ee:77:
4e:23:86:20:e9:62:31:21:a8:17:fb:a0:80:df:89:
51:cc:47:f2:7a:d7:ab:4d:b3:e8:a0:4d:66:a3:d0:
ce:87:3b:43:59:d6:d6:7d:d5:56:55:65:b7:97:4d:
dc:d7:f8:6a:60:77:8f:f5:4e:47:43:5e:b7:17:40:
3c:50:7a:79:46:69:8a:f8:03:13:25:9f:3a:9c:e9:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:CE:75:96:5B:A9:9D:E2:D3:23:A0:BC:C8:B0:76:C6:C6:94:91
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc9f0e1-f459-488b-91a4-d783253227a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:1e:5e:5d:84:32:c3:51:f5:31:32:14:10:17:48:20:c7:1c:
60:54:b2:d4:0b:89:fc:36:9c:8b:a4:f8:fa:2f:83:dc:37:d6:
66:f1:d5:1a:7e:40:bd:e5:21:32:c8:40:c5:32:b0:0a:2a:69:
41:d5:00:86:4e:5c:7c:13:f5:eb:9f:2e:08:2f:9f:a7:a6:9e:
8b:9a:da:40:c0:ee:77:c6:f4:64:4b:9a:90:d4:c1:78:9a:a9:
99:e1:d1:ad:f5:75:b3:1d:7c:d5:77:32:5d:ea:7a:2e:8f:39:
c2:94:29:c7:72:e6:0a:a8:38:95:33:43:ad:9d:7d:37:c0:1f:
d7:5c:ae:d0:94:18:45:9f:d4:c1:1c:e5:44:bc:c3:6a:63:5f:
2b:fb:54:95:84:a7:92:41:37:8c:e6:39:01:32:7c:3f:72:5f:
81:38:1f:eb:6d:f4:82:78:58:82:ec:cf:2c:ac:60:25:aa:58:
0d:77:c5:3b:6b:d7:a6:eb:b0:87:69:cb:86:89:fc:e4:56:42:
02:51:f9:9e:c8:05:80:90:90:b8:41:9d:58:9e:55:e0:ee:d8:
13:74:e2:43:0d:b2:7c:3d:fb:d6:5e:66:20:86:b2:a7:ed:a3:
08:b9:bf:a8:d0:c0:3d:77:75:7e:0f:2b:90:bb:7a:1c:8a:6c:
51:bc:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net