Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa
File: 88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa (raw, json)
Hash identifier: 2CQV9sWT3RTQ1mxMGzvd35XLpb45EDx6hYDE5oA1f48=
Subject key identifier: 5A:14:FC:94:22:01:8B:E3:33:54:BF:05:3B:4F:82:52:DC:7B:83:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B5BFEC6F9C8C07673E52B0D1127F07BA514A308
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa
Signing time: Sat 05 Apr 2025 00:01:18 +0000
ROA not before: Sat 05 Apr 2025 00:01:18 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 151.148.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5b:fe:c6:f9:c8:c0:76:73:e5:2b:0d:11:27:f0:7b:a5:14:a3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 5 00:01:18 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=ae4f45420eb9daf98570675c20c09c97b085a011366d53882c3d2e1a9cc7dc1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a3:d6:f8:9a:66:df:f6:12:7f:db:58:2a:18:
0e:8c:9c:34:b2:43:5f:a8:36:70:a4:32:93:62:dd:
e0:56:9d:cd:1e:1f:7f:8d:f4:6b:98:99:05:2a:1e:
1d:8b:4d:5b:43:09:0d:fc:06:31:08:83:0e:f6:d3:
30:52:6d:46:b1:05:46:01:02:02:02:35:7a:85:80:
1f:03:d9:69:84:4e:4c:54:59:89:f6:4f:da:cb:a4:
57:6f:71:d8:39:c8:d1:3b:90:9d:d4:ea:7a:2d:14:
3f:14:26:1f:71:07:a6:18:2b:10:c7:f9:43:a9:d2:
9f:e1:b0:b5:c9:7d:2f:e4:6d:3e:ce:19:cc:e5:90:
fb:0a:aa:34:76:d8:d4:1b:bb:a4:86:4b:2d:75:d2:
5e:ae:39:1c:7b:1d:97:b8:25:16:27:ff:b9:20:e0:
42:65:3d:01:58:ee:89:7a:ff:d3:02:8b:57:5e:cf:
d6:88:bf:d4:06:2c:a5:8a:9c:7f:1d:d0:9f:e1:1f:
08:2d:e8:36:84:f4:32:a9:b9:4c:78:7a:ef:eb:3d:
a8:8e:91:60:40:57:09:1e:a8:de:ad:83:d2:9f:61:
98:20:ed:3f:3c:6d:1b:26:b4:d1:69:2b:bc:57:f3:
7c:0f:6b:24:bd:72:9f:b6:77:56:08:18:bc:e8:de:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:FC:94:22:01:8B:E3:33:54:BF:05:3B:4F:82:52:DC:7B:83:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.148.128.0/17
Signature Algorithm: sha256WithRSAEncryption
93:3e:16:d0:72:01:38:53:fc:5e:cb:66:b8:51:34:5b:c1:5b:
35:74:9a:59:d1:d2:e2:0b:82:05:48:93:e3:39:6e:36:a2:2a:
ba:f9:39:dd:54:ff:7b:5c:5c:89:0b:13:b7:ed:c0:ba:f8:81:
7c:77:7a:6f:d3:74:a3:ca:5c:9e:0d:e1:78:0f:43:2d:9d:ba:
af:a7:db:19:df:dd:22:07:77:0d:11:fd:b8:84:3a:22:28:53:
f1:78:b8:63:81:ff:34:5a:33:99:c4:5c:84:96:9f:dd:b6:59:
bc:f4:34:e9:74:25:db:21:b6:a1:22:d2:d1:11:d9:55:ff:ed:
de:5d:39:29:43:0c:bf:72:48:57:ce:32:95:72:b1:dc:9a:79:
5d:51:fc:8c:f1:0d:1f:9c:ad:ab:7a:aa:ad:54:f4:38:ef:92:
d5:2a:0e:2d:82:7c:62:12:43:7d:e7:05:e8:d9:f9:6a:46:82:
e8:93:31:cb:83:59:6e:21:80:c6:fc:58:ee:ee:d5:e0:fa:37:
fb:65:23:d9:53:bb:8d:c2:a3:3e:0c:82:34:0c:db:2f:ee:14:
59:22:9c:dd:67:92:eb:af:bb:bf:c5:43:54:0f:f3:72:e4:d4:
f5:35:17:00:66:a0:42:f7:99:b7:0f:f7:ce:c6:f4:ed:62:4b:
17:89:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:12 2025 by rpki-client on console.sobornost.net