Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa
File: 81e78d06-eac0-4f0b-9226-d243d21015c3.roa (raw, json)
Hash identifier: uiDLRofrWW30+dNSZu4xIvN5U/l80YaEG0y948xJZNQ=
Subject key identifier: 5E:F5:BD:6A:E5:E6:F9:A8:D0:2B:B4:D9:5D:3E:FF:78:14:D5:21:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A08F4D756F96CE8FFFD1DCC3154BB59CFD95D38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa
Signing time: Tue 15 Apr 2025 00:40:42 +0000
ROA not before: Tue 15 Apr 2025 00:40:42 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:08:f4:d7:56:f9:6c:e8:ff:fd:1d:cc:31:54:bb:59:cf:d9:5d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:40:42 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=a009d77c8d85fa461808d06eec4f7faee60f515a6998bd48d2cd7b8516ab8fda, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:61:78:38:93:4f:f5:ce:df:81:d3:4c:5e:
84:05:6b:4b:fa:a6:d7:64:c5:94:d6:7e:7c:a1:0c:
da:d1:6d:8b:b7:dd:f1:37:93:15:61:52:80:cb:2e:
f5:03:f3:51:ab:ff:32:25:20:ac:6a:47:ce:56:5a:
16:fa:2e:7f:96:ca:c7:01:ab:43:d6:0b:35:8e:de:
4a:03:13:e9:6e:25:30:56:1f:51:45:e2:cd:ef:2d:
30:88:f0:af:98:06:41:ff:91:44:47:09:52:23:6f:
51:a2:d6:ea:c8:32:ff:2f:9b:c8:8e:4b:bb:f2:a5:
14:13:d1:0b:85:8e:6c:c0:d5:90:6d:83:5f:d0:22:
62:59:66:e6:40:cb:58:5b:51:ff:33:2e:66:e4:66:
d9:79:04:e9:b1:f9:18:f7:2f:71:f3:9a:59:d3:ea:
93:1a:1f:3f:b3:6a:10:13:0d:20:76:83:0c:8f:df:
5a:84:90:b7:06:9f:8d:3a:86:13:a2:e4:5f:54:5c:
b4:72:a6:09:45:30:a3:5a:90:66:5f:b2:77:ab:58:
24:f5:4e:22:bb:9b:12:5f:e3:84:bf:53:a2:49:cb:
a1:3a:a3:7e:e5:3e:24:90:3d:42:b0:3c:d3:97:7f:
c3:e2:88:03:73:85:0c:d0:fd:c4:8e:85:98:a3:91:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:BD:6A:E5:E6:F9:A8:D0:2B:B4:D9:5D:3E:FF:78:14:D5:21:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.96.0/23
Signature Algorithm: sha256WithRSAEncryption
af:ba:df:c1:c3:cd:be:35:dd:39:c4:bc:02:58:90:c5:85:65:
b7:e0:44:80:08:b7:53:ef:5a:ff:c7:b2:ac:bf:53:ec:e2:39:
58:cf:ac:49:9a:9a:8f:c0:ee:99:a9:16:25:f8:09:31:79:21:
52:c8:87:cd:1c:02:e3:29:58:da:ae:ac:db:ee:5b:06:c6:36:
b1:ac:98:eb:3f:c8:e2:9f:ca:ae:e0:ed:6f:06:aa:45:b4:be:
dd:c8:43:85:78:9c:05:04:cc:d8:1a:03:bc:20:d9:f3:90:a7:
07:55:42:d2:f8:07:9b:ec:7f:7c:00:aa:f4:44:ef:2e:bc:cb:
30:6c:70:d6:02:e4:99:1a:31:47:fe:47:2f:b2:1e:aa:33:7b:
2f:1e:33:b8:81:df:ba:db:ec:88:e6:fa:25:47:e9:8e:be:73:
47:a1:a9:65:2b:1f:55:dd:3a:94:be:b1:49:e2:e3:98:24:63:
0b:82:cb:e2:71:f8:cc:2b:4c:ff:39:43:27:fe:72:c6:64:1f:
ab:7c:ca:f1:56:eb:9b:f6:41:e2:95:fb:89:dd:be:d8:0c:4a:
7c:cc:8d:8e:c2:d9:03:17:64:89:7f:98:8a:1a:a6:16:b7:aa:
23:5c:87:a4:70:38:95:45:70:bd:c7:7a:6c:cb:7b:01:70:dc:
7d:a6:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net