Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa
File: 8118a06a-b99e-4bfa-810e-228874f352d3.roa (raw, json)
Hash identifier: tDL0XHVVL6nqN+uo4jqzD4+4FKXiOle/wp8CzGU5Yn8=
Subject key identifier: 8C:57:3A:29:F8:50:8D:F4:7A:BB:33:03:A9:4D:DA:7A:B9:91:FA:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EA44415CDB41DF90B9BF1D5E6C9A7CFE393B759
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa
Signing time: Tue 15 Apr 2025 00:21:03 +0000
ROA not before: Tue 15 Apr 2025 00:21:03 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a4:44:15:cd:b4:1d:f9:0b:9b:f1:d5:e6:c9:a7:cf:e3:93:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:21:03 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=dca51f2069075aa08b1731e0df77b37ff8a2d612a4fb36c1d5046f2cf33c7d7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:30:49:47:b4:79:28:43:2c:da:df:d8:18:
30:ce:fa:1e:f3:09:65:71:de:8b:c6:a0:9c:e9:d9:
6f:9c:2b:53:3b:bd:d2:46:18:a6:fc:43:cd:c5:c3:
bd:49:4f:da:30:b1:01:6f:a9:5e:22:9d:fa:be:4d:
91:86:c8:28:07:18:36:18:88:0e:fc:36:6f:3a:ee:
df:a9:ff:42:51:15:76:c2:39:aa:f7:7b:4b:36:69:
f0:1c:b8:80:3e:f7:72:84:20:ed:e8:b6:4a:a7:59:
18:d3:85:17:d8:23:37:38:bc:84:61:31:49:d4:35:
d2:60:93:37:4f:00:57:41:c8:43:d9:c3:9a:ef:52:
68:91:a5:76:df:8e:ae:96:d3:67:47:4b:da:02:a9:
4c:9b:da:cb:aa:95:2a:27:62:a8:fb:99:38:9a:77:
c7:ff:86:1a:b1:44:9d:49:56:6e:58:d4:af:16:87:
10:29:45:ee:5c:7b:d8:7d:5f:df:e3:be:39:e1:af:
99:65:01:3e:dd:fd:2d:4d:0b:8e:dc:10:86:ee:23:
75:5c:dd:38:ca:43:4a:98:eb:98:81:e4:02:17:a5:
a0:e4:48:37:85:f5:7c:76:0b:7f:0c:f0:e5:b5:f3:
ac:f5:c7:c2:4c:d7:3a:b2:73:68:b8:df:f5:3f:30:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:3A:29:F8:50:8D:F4:7A:BB:33:03:A9:4D:DA:7A:B9:91:FA:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:87:66:aa:aa:16:74:fe:ff:cf:72:53:74:bd:8c:5f:02:28:
1a:e5:a5:8f:d9:04:d7:53:7d:31:e7:62:4a:40:d9:74:2f:16:
16:25:50:04:16:7f:9c:41:4b:8e:2c:ca:99:c1:e3:3e:82:fa:
95:6e:aa:25:9e:30:ee:06:c3:f4:c7:9e:20:b5:51:9d:cf:e9:
63:65:c1:8f:e5:dc:e1:45:67:d5:48:de:f8:c2:46:18:aa:56:
fd:fa:68:b7:77:a9:e9:39:f7:ca:6e:02:e0:60:12:df:1a:52:
44:85:17:a5:52:1a:63:e6:d1:de:eb:7d:f9:66:77:37:80:7a:
b9:88:23:ae:ba:a6:6b:04:ca:38:7b:f7:10:69:70:1f:13:3b:
8c:d7:43:f2:4e:f2:08:ef:9b:01:2e:3e:4e:0a:45:90:4f:54:
7d:dd:85:9b:d4:00:84:e7:8c:ce:6d:d2:3c:a3:10:e4:01:37:
e7:34:59:cc:bb:14:6f:ab:aa:3f:8a:4a:0a:29:0f:7b:2b:07:
13:3b:73:86:7f:80:6f:a1:1b:d7:d7:8a:c4:71:7b:7e:44:a1:
46:c0:6c:57:cf:27:c5:42:55:ab:41:40:47:fe:a7:d3:0a:df:
80:fd:bc:4a:23:89:08:95:f1:96:89:a8:11:ff:18:75:65:51:
89:36:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net