Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa
File: 9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa (raw, json)
Hash identifier: gAMbml8TM8YQEZiF+QDVJcMJcUa9FUW3mZz85TFoRvA=
Subject key identifier: 17:DD:20:81:58:D5:FD:BE:D2:40:5E:50:5D:C3:60:12:8A:F4:47:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AD1F72832FC9307C55CB7D445665CA005680CC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa
Signing time: Mon 31 Mar 2025 16:00:16 +0000
ROA not before: Mon 31 Mar 2025 16:00:16 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 75.101.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d1:f7:28:32:fc:93:07:c5:5c:b7:d4:45:66:5c:a0:05:68:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 16:00:16 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=85cfa3d44ae449c0c9c7be20de64b208970f93503baf9bfc79bd2481b329d550, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:2f:06:26:b6:31:42:fe:24:b6:cd:f2:5f:
d3:a8:44:94:68:79:cd:14:5f:c6:d6:27:1f:6e:16:
c9:11:a2:10:2b:53:b2:bd:b2:57:a2:53:8b:87:d4:
f1:c2:9d:dd:81:23:3b:05:29:d0:9b:e7:8b:0b:d0:
4c:1a:1c:04:81:7c:ea:0f:96:02:91:30:25:cb:35:
c8:d3:5f:1b:4a:6f:4a:f5:f0:db:b8:06:82:6c:16:
69:e1:e5:5f:2d:20:be:51:43:08:1d:2f:0b:99:db:
f0:91:c7:40:47:95:64:41:e9:c4:0d:7f:54:89:ca:
17:7d:32:76:85:78:df:f2:27:09:1c:31:81:e0:bf:
e9:e7:2b:fe:93:64:43:eb:06:55:aa:2f:2c:b4:c1:
4d:00:65:52:84:e9:2f:63:9f:94:a7:05:0d:60:98:
ab:c0:36:94:0e:e2:35:0e:7b:59:94:be:fd:28:82:
b6:93:1e:e1:d9:24:29:a5:6a:fa:3d:ce:36:03:d7:
f5:b8:33:60:7d:fe:e7:66:2e:61:93:d5:42:86:2c:
a1:64:71:5a:f9:6c:1f:ac:00:bf:0b:85:95:1f:0a:
8a:22:46:fa:e6:46:ec:78:be:b2:82:65:90:ef:97:
38:fb:72:e3:2b:99:f9:52:e8:b3:73:0f:4a:ef:f4:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DD:20:81:58:D5:FD:BE:D2:40:5E:50:5D:C3:60:12:8A:F4:47:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.101.176.0/20
Signature Algorithm: sha256WithRSAEncryption
38:39:c5:b1:a9:50:8a:25:54:c2:07:71:9c:65:4d:8c:6e:74:
0e:f0:ed:4d:79:05:8d:94:28:d5:44:c2:7e:4b:5e:2e:79:01:
cb:e6:19:f1:8b:f1:34:2e:03:11:61:6e:e1:ca:3f:7b:4a:aa:
98:86:ee:a0:f7:a6:90:23:16:68:db:db:65:3e:b4:ba:e2:d0:
6a:c0:b1:f4:b3:c0:7a:16:69:54:af:f5:0d:2b:b3:67:7c:a3:
d0:ef:9e:1a:12:09:f7:01:64:28:af:7d:7b:7e:f3:78:f9:7e:
48:69:53:3c:e5:5a:47:c4:c7:53:bc:0b:6d:9d:85:38:ac:ac:
0a:d6:d8:98:58:a6:45:44:e8:33:ae:8a:54:9c:a6:ab:52:c8:
cc:6f:5d:ae:48:62:97:f4:db:64:7d:d3:b8:bf:65:ac:b7:6a:
43:fa:30:02:28:09:14:8b:11:6f:ef:26:56:74:d0:5f:ac:6b:
04:f9:0d:1c:01:09:51:51:40:61:81:2c:50:54:c7:57:e3:d1:
c9:a2:fd:70:86:ac:e2:24:63:3a:5b:4e:e1:10:18:ce:f1:2b:
ad:19:e0:79:05:dd:ea:8b:ad:86:2e:20:f2:87:c0:d6:54:ec:
6f:cb:71:4b:ab:bd:6a:90:51:58:40:45:41:e2:1e:2c:4b:a7:
d6:d0:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:15 2025 by rpki-client on console.sobornost.net