Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa
File: 9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa (raw, json)
Hash identifier: s+MvEUIKDDFY2SbEDLXHr6FnFwlyJwA0XldtOniRJsg=
Subject key identifier: 50:55:80:76:C3:27:AD:54:35:28:F0:34:1F:A1:C1:16:5D:63:4F:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7391631F67B42FEF2196E0CCF4F34063E6CF22C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa
Signing time: Mon 31 Mar 2025 15:22:13 +0000
ROA not before: Mon 31 Mar 2025 15:22:13 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.254.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:91:63:1f:67:b4:2f:ef:21:96:e0:cc:f4:f3:40:63:e6:cf:22:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:22:13 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=65dcebef7d8acf80b687d2ad3a365de23526aef9c34efa4bc70e2a10dede3325, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:5c:8b:fd:e5:96:89:c6:e1:4b:bd:60:a6:
9a:f8:60:f9:60:3a:06:99:a7:ee:e9:19:26:57:c3:
27:63:b5:57:d4:f7:6f:32:4f:6d:b0:1e:e0:81:2e:
20:e6:2b:98:e3:ce:14:9d:ce:ac:37:39:64:25:50:
74:29:c2:2f:e3:66:61:27:76:78:88:a5:4b:ef:61:
10:45:06:f0:42:fd:f0:3c:ba:a1:fc:8d:0e:01:eb:
e4:4d:b0:64:f4:2a:07:ad:7c:ef:63:d1:30:fa:5e:
eb:cc:1e:89:4a:32:12:9c:c1:ca:51:4a:27:28:ff:
3c:7f:52:c4:fe:62:af:b8:0a:ae:ec:1d:29:0b:17:
6d:ca:2c:ef:0a:ec:61:2b:60:e2:85:cd:a6:75:f4:
89:69:c7:39:78:b3:6c:56:5e:7d:b8:3f:e9:01:12:
0c:b3:ad:90:10:bd:b7:c8:04:a3:fa:ca:3d:92:56:
84:20:99:6d:8d:21:8d:db:c3:67:9d:73:41:8c:6a:
36:1b:a3:bd:cc:22:63:bb:cb:80:7b:68:7e:9d:8f:
71:80:fd:d9:f6:58:62:b8:21:16:23:e0:1e:de:e5:
c1:c5:62:9a:2f:b8:f1:e4:4e:4f:d3:37:ba:73:17:
53:27:57:74:06:97:42:fa:8e:f2:25:f5:41:a8:08:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:80:76:C3:27:AD:54:35:28:F0:34:1F:A1:C1:16:5D:63:4F:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.254.0.0/21
Signature Algorithm: sha256WithRSAEncryption
96:91:e4:4f:3d:31:b4:fc:c1:68:12:e6:25:11:36:24:7e:15:
96:45:36:a1:ab:31:d8:08:66:c2:8b:44:d7:80:38:ad:e0:87:
0b:8c:0b:a3:36:21:51:32:30:4f:4b:c0:08:0a:b1:1b:f4:2d:
48:69:a1:f5:c9:a8:86:fb:2f:00:32:4b:a2:46:64:a7:97:3c:
f5:99:ed:20:3b:0e:e1:e0:cf:6e:5c:c2:3f:de:73:1b:00:01:
9c:fd:82:e4:de:71:25:65:c1:bb:0b:b5:cf:ca:73:cf:43:b2:
c0:b4:3e:de:20:2e:99:e5:a8:75:f4:5a:4e:0b:08:af:43:53:
f6:32:2d:2a:b3:6d:78:e5:62:88:3a:f3:fe:53:b3:17:22:ee:
2e:cd:11:7b:75:77:ad:62:6c:ba:0f:55:b9:46:a9:44:d6:8e:
f3:61:f7:f4:a6:84:9c:7b:58:b8:24:95:1c:fe:1e:61:74:95:
e0:b3:ea:fc:d1:0d:76:86:75:bd:2a:b7:0c:2d:66:67:a3:44:
ca:09:2d:08:2d:96:2e:30:b7:7d:c0:b4:76:4e:40:5f:f1:9a:
1a:c7:26:2c:9e:0a:ed:ab:8d:a0:08:10:f2:7f:63:36:c8:03:
93:2a:bd:c7:af:99:b2:58:dd:e0:ab:7f:5e:1a:2b:8f:f1:4b:
ad:62:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:14 2025 by rpki-client on console.sobornost.net