Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
File: 9016d464-470c-4275-ad72-fec6b76b99c4.roa (raw, json)
Hash identifier: 3NVfLD6v4PRx5kOqIYAUlV8te9eEMKSpmGNabNlkDsM=
Subject key identifier: 68:02:A1:59:D9:A9:6E:13:4D:20:1C:1E:95:9D:CE:CA:41:20:53:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61D68BF9D3C4747295679C5F7075B5D3AEBF16E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
Signing time: Tue 01 Apr 2025 00:00:28 +0000
ROA not before: Tue 01 Apr 2025 00:00:28 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 143.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d6:8b:f9:d3:c4:74:72:95:67:9c:5f:70:75:b5:d3:ae:bf:16:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:00:28 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=942a6cc08cae59f1ea21db282d4f2b52054b97be7f151608e0ffdfc05f4ca244, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:5b:02:fb:28:63:9b:c7:97:fd:28:ae:7a:
1e:ef:02:6b:2c:aa:9e:3c:81:5b:99:02:f3:57:ea:
92:05:22:97:28:66:bd:6e:d0:a2:14:77:82:2b:c0:
59:df:e1:8f:13:29:71:dd:50:35:ce:84:99:e8:ac:
36:5c:d5:05:2c:8a:ec:e1:13:e2:0c:c6:7b:e6:e3:
ef:88:dd:25:12:c3:8e:f7:ac:25:ef:5a:36:42:de:
70:27:c4:01:92:5c:fb:73:e6:2b:a6:2e:e4:b1:14:
e2:82:0a:53:ed:ad:27:ac:05:f4:d4:c4:7d:35:cd:
88:7c:e8:76:eb:2a:f1:78:02:81:9b:7b:f2:12:4d:
18:14:0b:ff:35:e3:62:95:a2:80:bf:ee:80:89:59:
4b:07:5e:8b:80:9a:2b:e4:62:03:c8:6f:25:77:11:
4f:63:8e:89:6c:a3:45:7a:c6:f0:29:e1:6d:de:67:
32:18:b6:52:16:cc:47:ec:02:b9:a7:70:a3:b6:85:
61:53:02:cc:a6:a8:54:45:6a:38:59:bb:a7:ea:59:
b7:e5:75:70:0f:23:ea:b1:1f:8e:65:11:bf:1e:08:
59:e2:89:50:e6:87:fc:b4:18:7b:c9:f5:e5:8e:8b:
61:ad:b7:d8:27:8b:7a:f8:d8:1a:d7:0c:f8:53:00:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:A1:59:D9:A9:6E:13:4D:20:1C:1E:95:9D:CE:CA:41:20:53:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:07:54:b2:81:31:a7:49:7d:85:8a:6a:07:fe:b8:cb:8f:47:
56:35:54:64:38:ae:47:f1:2a:54:a2:7e:b6:12:02:fa:fb:ca:
bb:cf:13:43:f5:5f:ba:24:e1:c4:bd:88:b5:28:94:e9:34:fb:
be:0f:7f:64:73:c7:ba:cd:11:6b:0d:95:f4:48:f4:a8:2d:20:
ab:43:d1:5d:3d:bf:ee:9b:d9:56:04:a7:24:8b:16:72:7d:95:
70:76:f9:44:1c:45:20:cc:6b:42:66:94:60:6b:b5:c0:aa:ca:
d9:6e:26:48:98:01:bc:5e:8b:e0:9d:11:92:7c:31:c1:5f:33:
1e:9d:b9:36:61:c3:b1:b9:a1:7d:68:c2:cf:98:ee:83:a4:8e:
d6:cc:5b:d9:ff:68:98:e9:b8:75:23:b0:83:21:fd:74:cf:e6:
86:86:0a:09:df:64:b9:2f:55:03:df:0e:61:3f:f6:b0:20:a1:
2f:8e:84:ce:1d:97:80:4e:34:4a:e7:16:52:98:08:89:c8:c1:
b4:f0:70:86:ee:f3:73:4f:78:f0:bd:23:6a:b3:90:13:88:d7:
57:b1:2b:9d:21:b8:90:b3:49:8a:4e:61:1f:46:8c:e2:e6:4b:
b8:f9:60:df:85:40:b8:35:38:d6:79:cb:fd:56:59:b0:22:8c:
75:4d:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:13 2025 by rpki-client on console.sobornost.net