Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa
File: b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa (raw, json)
Hash identifier: tmOl8hj5MxxO4j7RCUwYogqCkZ6okcCzNhmsrlUh6lE=
Subject key identifier: 79:15:2A:D7:8E:55:45:14:61:22:08:7F:01:E0:95:69:EA:0B:FE:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1743580EC77E48D20B4EF64D6BF3C1CECD4715BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa
Signing time: Tue 08 Apr 2025 00:31:19 +0000
ROA not before: Tue 08 Apr 2025 00:31:19 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:43:58:0e:c7:7e:48:d2:0b:4e:f6:4d:6b:f3:c1:ce:cd:47:15:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:31:19 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=82706bda1d64bd2d505ec4db9c4897e248f74632e640d5e10ea2951e4c1b531a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:62:39:b4:6e:92:2c:3e:91:7b:43:53:1c:
7c:6b:fb:07:39:fe:e6:89:3e:84:b6:13:fa:b9:27:
86:e9:3c:26:bc:8a:90:80:89:b3:80:36:54:fe:ad:
e8:1e:96:9b:d9:25:e2:ca:07:b6:80:ea:bc:1a:d2:
02:d8:c5:17:cf:46:ad:1a:06:c8:ce:c4:5f:19:ee:
60:90:74:84:61:60:df:a6:88:83:77:11:df:50:2e:
77:93:4e:10:83:19:c2:61:a6:d4:34:57:5f:0e:de:
83:c0:d3:ca:c4:32:88:b4:11:b6:de:16:dc:2d:75:
2a:f7:ac:cc:d7:0f:06:18:80:34:b4:60:d3:92:a5:
f8:64:6b:b4:37:37:f2:c4:ec:ef:3c:ba:4a:0d:cf:
2c:2c:5f:6a:2f:b7:27:48:d2:8e:a3:68:5d:df:fb:
b3:30:cb:53:e7:dd:35:e6:4f:f1:34:0f:b8:4a:bd:
be:be:f8:b7:65:cc:fb:78:0c:e5:b3:49:87:65:a3:
aa:7a:ac:a4:7c:12:a8:01:a6:24:29:c4:11:ca:1e:
07:aa:6d:1a:cb:66:d0:ea:57:51:4e:31:05:39:a7:
de:91:e1:9b:d4:cf:b5:40:b3:f5:0e:f8:32:d3:dd:
e3:44:fb:b6:56:17:47:ba:58:0d:db:9c:99:e3:c4:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:2A:D7:8E:55:45:14:61:22:08:7F:01:E0:95:69:EA:0B:FE:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.69.0/24
Signature Algorithm: sha256WithRSAEncryption
88:10:3d:22:cc:d9:0f:93:2d:c9:b5:c2:f8:4b:50:03:e7:74:
4b:46:21:d9:75:7a:99:ea:70:7c:50:52:07:59:0a:8f:9e:ad:
92:89:e9:34:eb:8a:ef:e7:53:c5:f2:74:85:02:ac:c8:8f:d4:
56:29:da:cb:bf:15:73:93:21:12:38:af:ff:74:15:f0:69:f8:
c6:d7:b7:cc:59:3c:57:73:cd:81:b5:2a:ff:34:8e:6c:ff:04:
5c:5a:6c:b0:76:a8:04:c0:d4:61:2c:da:29:62:43:c3:df:77:
1a:b3:c3:3d:b4:ef:e2:82:6f:d0:54:29:30:67:22:b7:8c:e6:
a7:41:f8:99:f2:df:db:21:29:56:a6:36:b2:2d:f9:68:d1:21:
8f:e2:c1:5b:45:d7:3e:2c:e4:36:1a:1e:6c:cf:06:24:36:bf:
54:60:8d:90:3c:78:a6:ff:b9:91:70:02:8d:91:58:5c:2d:eb:
52:48:16:5c:24:83:e6:e6:f6:ef:21:31:49:4e:79:aa:ec:a8:
0b:21:fa:0e:5e:05:83:15:f8:c8:19:25:48:50:c3:2c:5a:de:
a6:86:d6:93:d1:1e:45:35:80:fb:0c:e6:18:a5:9d:2f:68:fd:
4b:40:12:43:80:97:83:ab:5e:73:4d:9f:f9:68:65:71:dc:c3:
0e:11:e7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:19 2025 by rpki-client on console.sobornost.net