Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa
File: 7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa (raw, json)
Hash identifier: rrMynLRx/BuC61lYng3XTGbrm0B6bg3OYZMBxyWsK20=
Subject key identifier: 9F:E7:F5:CC:C1:13:83:AF:EE:15:D6:D1:A7:14:97:17:7E:96:9C:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 474596EE77DA6D6D610F880D103D72FB4DDC719F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa
Signing time: Mon 31 Mar 2025 15:40:29 +0000
ROA not before: Mon 31 Mar 2025 15:40:29 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.124.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:45:96:ee:77:da:6d:6d:61:0f:88:0d:10:3d:72:fb:4d:dc:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:40:29 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=14917ee21e8f96e9fe68fb4db265b679907bf0121fd6d51dfacbbec3896ea833, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:6a:78:d0:44:b5:5e:4f:3d:25:1a:ae:96:
27:40:ee:3c:78:13:e3:35:bd:b8:05:c5:3b:78:db:
3f:fc:7d:ec:ba:de:28:3f:5f:5b:5d:bd:4c:99:39:
03:86:0d:39:28:ae:d6:f2:9e:dd:aa:37:fd:42:dd:
bd:f1:41:0e:1f:3f:5c:7e:11:62:e0:b9:a6:1d:10:
67:97:5b:e4:35:6f:3f:9d:36:eb:e7:c4:29:83:6b:
c7:36:78:2b:92:e0:65:ed:07:82:00:64:f5:61:e7:
2b:50:7e:ad:4d:67:9f:14:ca:57:00:e5:4d:aa:d6:
3c:6e:34:eb:3c:ab:87:ca:15:88:84:e9:27:c5:d1:
c7:35:51:e3:37:2b:49:21:4d:f0:84:7a:92:95:68:
97:d7:63:e9:e2:18:fb:22:64:75:a1:d1:fe:83:c8:
7b:0b:57:7d:fb:62:ac:51:76:b9:c2:1e:e0:d1:6d:
8d:98:18:7a:da:06:e3:24:03:a0:66:1f:63:3d:87:
59:46:e8:41:b0:30:a5:cb:ed:bf:47:ac:3b:01:86:
2c:44:1b:89:ec:3c:36:71:ea:fc:81:c1:e4:5a:6e:
b7:fe:8b:65:46:4c:15:f3:d1:fc:7f:2d:9e:7e:97:
71:12:c9:2f:e8:c9:2f:c7:62:bc:bf:2c:35:a7:b3:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E7:F5:CC:C1:13:83:AF:EE:15:D6:D1:A7:14:97:17:7E:96:9C:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e45022c-9767-4a5d-bdc6-35f61fec7bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
52:3a:da:a8:9f:9a:68:cf:19:25:96:27:fb:d6:db:fb:76:1d:
ae:dc:f3:08:9b:24:56:a1:cf:78:87:73:65:7f:d8:6d:ac:22:
34:6f:1e:f9:55:fe:ed:9f:44:53:43:d1:dd:ab:12:41:3d:b6:
0e:89:d0:82:d4:b7:1b:93:95:9b:07:83:e9:c5:ad:aa:3d:97:
8f:be:59:0f:70:3d:a5:60:28:37:31:a8:6f:98:ce:4c:43:26:
93:ef:a5:b1:89:0b:c9:91:4c:5e:0a:5e:3c:bd:26:e2:c3:65:
87:49:a0:27:5f:0f:98:bd:68:53:ee:ab:58:43:66:d4:2a:61:
15:52:cd:94:88:72:dd:fb:9a:b3:7b:7c:67:2c:60:68:c1:37:
0d:39:fa:57:d5:2d:47:e2:7a:b3:fc:0e:c5:84:19:38:50:2b:
70:34:e8:a2:e8:e8:ff:30:87:aa:20:b1:67:13:00:29:18:81:
03:0b:ab:ca:d4:00:ed:4b:19:c5:52:d3:f1:bd:82:b1:d4:4a:
b6:2d:27:2e:d5:96:a0:6e:6e:b5:75:d3:f1:59:56:d0:f1:fb:
01:a5:b3:33:b1:1a:df:4b:84:bd:68:ad:57:55:38:a8:a7:42:
d2:2b:9e:bc:79:0a:61:1d:0e:34:87:e6:ec:b3:b5:30:b4:8b:
d6:cd:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net