Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa
File: c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa (raw, json)
Hash identifier: o2J7NO6BM04WGeLVmVoQzjaNdQO1X99Qj6b4gvxxHg4=
Subject key identifier: 2C:83:07:2B:A5:5F:E9:D2:75:33:0C:F4:42:70:C4:73:66:51:0C:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12E3AACDBB59A65A7E36B313380A50388DF15665
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa
Signing time: Sat 29 Mar 2025 00:30:17 +0000
ROA not before: Sat 29 Mar 2025 00:30:17 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.21.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e3:aa:cd:bb:59:a6:5a:7e:36:b3:13:38:0a:50:38:8d:f1:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:30:17 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: serialNumber=9d020e30ee25e92dceef06b24270f92c47e30a8d465d86ff2d4d89356c4e9b12, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:d3:5b:99:10:82:45:9a:aa:05:6d:ab:8d:
05:58:7c:6c:1e:9a:01:ad:7a:eb:75:0d:22:86:52:
a2:61:10:f6:49:94:48:7c:f9:7b:b5:0d:a7:27:d2:
6b:d7:ab:37:e3:c2:1c:66:1a:c2:c1:1c:76:1b:96:
62:37:9e:73:a5:8b:82:86:c2:09:c8:b1:43:34:07:
ff:52:4d:30:fc:f1:6e:d9:97:2b:98:ab:79:19:17:
fd:df:16:6b:d6:d5:98:f7:85:90:70:de:f4:bd:f9:
58:17:46:a1:d2:cd:83:29:cd:e7:7e:f0:aa:16:39:
52:2b:76:31:90:58:11:96:85:53:7d:b9:6d:df:21:
82:a5:0e:50:57:67:5a:bd:f4:ff:1f:5a:45:ef:26:
c6:4f:cc:1f:e8:0a:d1:b4:ea:60:2d:f6:fb:9a:89:
89:ec:03:8c:79:0c:87:10:83:7b:f3:7f:70:80:ba:
05:a4:75:7a:f1:6f:03:24:01:b2:31:2c:18:bb:58:
43:5a:3a:57:62:22:60:a0:1a:99:92:f0:1c:33:fb:
c6:96:16:f7:7d:de:a5:81:ab:bb:09:eb:31:8e:9c:
50:32:17:a6:c5:97:80:fe:5e:c8:40:10:6f:b1:7f:
4b:7d:8e:b4:58:a9:75:22:b9:c9:70:77:54:da:1e:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:83:07:2B:A5:5F:E9:D2:75:33:0C:F4:42:70:C4:73:66:51:0C:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.21.88.0/22
Signature Algorithm: sha256WithRSAEncryption
97:f7:c3:fd:a7:fa:fd:d0:71:39:3c:b6:88:2c:a8:ac:8e:81:
1c:d3:19:dc:94:7b:2b:2d:3c:e9:f2:ef:96:87:97:71:95:13:
7a:5d:71:96:8d:9f:79:6d:32:83:9f:ac:e2:95:3e:ae:d5:d8:
71:4b:c7:5a:3a:89:f2:63:22:6a:e7:45:92:19:b9:22:95:af:
27:9f:76:8b:c1:30:57:3a:d7:fa:14:ab:3d:62:2d:47:ed:5d:
c1:60:6f:d2:1c:56:11:c6:9c:12:bb:13:1c:5e:f8:e8:cf:dc:
e1:a1:5f:f3:f2:05:40:25:15:09:60:ac:97:1d:a5:4e:06:6f:
0a:81:81:03:7c:31:fb:e5:36:f0:8b:17:cc:b8:ca:4e:0f:34:
51:15:ed:2c:be:00:14:35:16:cb:77:36:80:21:3c:f2:f7:30:
37:e1:69:37:59:3a:c2:06:dd:50:c1:f4:7a:24:2b:c1:9c:75:
7f:e8:2d:1c:8c:a8:54:a0:ac:06:98:e4:4f:62:9f:28:85:0c:
f1:40:dd:8f:9b:8c:a3:c8:a6:cc:76:83:05:9d:5f:60:0f:7e:
94:7f:3a:e0:19:54:ae:d9:3b:19:b1:a4:8e:fc:2f:85:21:43:
81:78:4b:0f:c4:0f:16:84:6f:1a:49:80:a9:96:25:06:e8:e8:
04:c4:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:20 2025 by rpki-client on console.sobornost.net