Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa
File: a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa (raw, json)
Hash identifier: yfnMU3U8XHIUWmKqyvogy5hGAfr9G1TmxmL/cVY3GsY=
Subject key identifier: 16:7A:5E:AB:9E:D1:DA:ED:4C:DE:87:C0:57:20:32:2A:B3:A1:0D:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 373D46E08CC43836A54AF524CF0D5F2DB6BA9538
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa
Signing time: Mon 14 Apr 2025 15:11:09 +0000
ROA not before: Mon 14 Apr 2025 15:11:09 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 149.98.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3d:46:e0:8c:c4:38:36:a5:4a:f5:24:cf:0d:5f:2d:b6:ba:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 14 15:11:09 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=961725571b8302496dcf513e146a2e13c71cfd52aa2ab0a9afd14fc5d6136742, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:24:cf:52:da:94:5c:a2:f4:40:67:97:6a:
db:0d:48:94:8b:9c:30:8d:d3:e5:12:4c:4e:1b:94:
da:0f:11:b0:ec:09:c3:c2:d6:76:d2:66:db:60:1e:
2f:a2:1c:48:c0:f3:6d:43:ac:76:56:dd:14:a4:e5:
7b:5d:f8:de:fa:d7:bb:cc:10:ff:ba:57:eb:ea:93:
7a:15:6d:1c:89:c6:39:61:76:f4:c0:cc:a8:aa:e3:
ea:73:27:4a:76:a8:89:89:ee:01:32:71:11:51:56:
be:ec:00:39:24:53:a4:24:e7:7b:b6:b3:70:2e:1b:
0b:4a:af:4c:c5:0f:6c:1f:9f:9b:58:60:b1:c9:c9:
15:32:29:2d:2c:df:5d:67:4c:df:15:23:10:8a:76:
af:b7:c0:aa:cd:e7:07:ac:54:ca:0e:7f:57:45:c4:
3f:79:02:e0:52:2c:db:29:cd:9f:0e:e7:83:78:8d:
97:dd:a4:6a:09:66:28:8b:79:c6:52:e1:ba:2a:1c:
d1:98:bb:58:bb:72:ab:c4:ac:24:04:b7:f8:ce:15:
70:a3:1b:d9:0a:eb:e3:4f:1d:9a:f5:89:30:1d:e7:
e6:9e:9a:4b:9f:b3:af:e2:c8:83:a9:4d:00:3c:f0:
7e:b9:ad:72:4e:94:46:dd:f1:b0:53:b6:9f:02:c7:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7A:5E:AB:9E:D1:DA:ED:4C:DE:87:C0:57:20:32:2A:B3:A1:0D:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:e3:54:1d:6c:ad:02:6a:4f:9b:d8:26:12:d9:e0:43:c1:6d:
7c:13:53:f2:79:99:7f:16:32:ac:5f:54:03:73:7c:b5:de:19:
33:4a:4b:c1:d2:d7:34:d9:f3:64:dd:0f:ce:1a:37:bd:6c:40:
a9:3b:cb:ce:14:ec:0e:ac:0b:75:b7:cf:f0:59:cb:a2:2e:f6:
fd:4a:43:00:33:b2:e8:54:0c:25:fc:3a:e8:dd:05:c1:43:fa:
e4:c0:8d:84:b5:13:77:4e:22:e4:f0:25:bf:43:65:97:11:6c:
c4:f6:c9:03:56:a3:d1:09:1a:cf:6f:c4:02:99:92:2e:b3:da:
23:dc:e5:57:a4:5c:30:95:db:83:be:af:d2:5e:c5:c7:d2:58:
a7:44:c8:ad:dc:63:ae:e6:77:4a:3d:b3:98:9f:10:b3:03:ce:
06:79:28:ea:c8:5f:67:0d:d3:bd:a2:5a:c1:47:c8:b2:cf:0e:
f3:07:5b:53:73:0d:01:90:b2:7c:bf:c1:40:4f:44:f8:ae:b0:
12:c7:19:b6:8b:98:d9:e3:3b:d4:82:3d:e3:93:a0:6b:f9:93:
ad:ab:24:47:94:2a:a2:b8:bf:37:32:b8:e5:36:24:97:53:96:
3e:13:0e:ee:9c:0a:84:27:f8:3c:d4:20:c4:40:ab:47:d4:2a:
4b:80:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:16 2025 by rpki-client on console.sobornost.net