Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
File: 9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa (raw, json)
Hash identifier: kHtDeeIbUMvVXpL3ydxkyuhnaxQ/hXwF8fh+UF564n4=
Subject key identifier: 36:46:21:95:2C:CA:CA:3A:E6:5A:5B:88:49:CA:CC:CB:5B:A1:3F:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C165B60A58432B6DB4D9314E64AD1B7FD21F523
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
Signing time: Tue 01 Apr 2025 00:01:00 +0000
ROA not before: Tue 01 Apr 2025 00:01:00 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 26982
IP address blocks: 192.31.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:16:5b:60:a5:84:32:b6:db:4d:93:14:e6:4a:d1:b7:fd:21:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:01:00 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=043d6429a6a1c5366a4412c02b7a7a7060af0f4d510178c1248717e227a2d6e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:11:2c:51:bb:eb:06:24:5b:c4:94:0c:0f:
cc:e5:c8:80:b5:aa:f9:7b:a9:c6:e0:ef:29:40:16:
b7:eb:ba:49:e2:ee:05:47:39:20:e8:b0:69:52:a2:
25:be:0e:7f:5a:a7:e5:74:61:56:da:91:3f:f4:f3:
bd:4d:98:c0:94:ea:66:33:27:00:dd:b8:69:ff:d7:
37:5e:0b:9b:dd:2a:ff:c7:9c:9b:a0:09:b5:dd:b7:
47:0e:af:7b:2c:25:55:43:d7:a6:4c:61:06:ef:da:
70:d1:62:36:65:58:5a:d4:99:93:52:f2:76:50:5c:
ff:1a:b0:2b:ff:66:9f:ba:b9:cd:05:82:93:77:83:
ce:86:53:e7:21:ab:b4:44:94:6b:06:86:b2:0f:cd:
6f:1d:d0:6d:ca:d9:92:18:29:98:04:49:b1:6b:af:
38:24:b8:6a:e8:86:02:e9:af:96:fc:47:19:88:86:
80:4f:81:f0:4e:58:a6:82:55:d6:4e:71:82:ea:be:
c0:e4:49:38:7a:58:fa:18:7f:80:c2:54:13:36:9c:
7d:47:83:a3:89:19:05:bb:23:57:53:f2:91:e0:79:
1c:ee:2e:b0:27:26:89:97:ea:c9:f4:e7:ff:ed:de:
89:e0:e0:50:7c:70:b4:3a:b9:db:95:8f:fc:51:41:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:46:21:95:2C:CA:CA:3A:E6:5A:5B:88:49:CA:CC:CB:5B:A1:3F:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.31.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f0:ab:1b:50:4d:3b:b4:cf:9c:9c:fa:91:6b:56:10:5e:06:
6c:f9:78:7e:37:ae:be:2b:16:bd:cf:1f:da:34:62:86:b8:52:
ab:8c:90:8b:b6:c2:1e:e0:d3:0b:41:88:36:fd:6d:7e:05:8e:
58:78:fd:2c:12:6b:4e:5e:23:f9:98:e4:60:68:25:87:95:89:
a7:98:0a:ec:2a:e3:4c:fd:16:70:8d:3d:5c:a3:bc:15:66:2f:
39:13:c0:36:82:c2:c1:fb:b7:73:a1:e0:24:17:90:1d:fe:ce:
03:3a:1a:ee:b3:28:ae:1f:e0:06:8d:3e:18:30:f2:ec:30:8f:
98:4a:f2:b4:01:8c:06:e4:0b:2e:fa:53:66:c9:a5:51:e4:da:
6b:e6:18:3e:9b:51:a6:f1:4d:05:8f:2f:ce:6d:0b:16:9a:aa:
31:e1:7f:d8:a7:92:ed:c4:28:6b:c4:04:75:0b:e1:c4:ff:b2:
1e:26:f7:d3:3c:30:fd:d8:99:b2:a6:e4:73:51:d0:37:e2:f6:
f5:6f:7c:4c:09:5e:fc:91:f0:60:5f:54:b2:73:38:85:ef:55:
24:2f:8a:07:dc:33:f0:96:97:7f:18:a5:c2:aa:2b:1c:76:c3:
37:1b:1d:e5:ef:13:d0:c8:39:49:e0:7a:dd:fe:cc:89:8b:0f:
bd:a0:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:15 2025 by rpki-client on console.sobornost.net