Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa
File: c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa (raw, json)
Hash identifier: Ym+yyYqWF+/h2bBZsrrf88eT710FNj5DNqDaZdeS4m4=
Subject key identifier: 92:7A:A9:D9:EA:0D:4B:52:4E:EE:8C:56:68:3E:93:CD:BC:F8:2B:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B2B836E65FC6FA35AF509996F1F749F39CD4845
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa
Signing time: Wed 09 Apr 2025 00:00:31 +0000
ROA not before: Wed 09 Apr 2025 00:00:31 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.250.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2b:83:6e:65:fc:6f:a3:5a:f5:09:99:6f:1f:74:9f:39:cd:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:00:31 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=3d432f2ee476dc4e2f320ac3887a3425bab1f4727afcf15f6c0fd5ecd660a61f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:5c:9a:01:01:f0:14:07:b5:a6:1f:3c:72:
0f:7a:af:2d:4b:fc:fa:1f:df:45:02:7e:03:ed:5b:
28:a9:a7:7d:e9:2d:df:83:21:ab:03:e1:20:33:24:
5a:7a:56:09:24:f5:ed:f1:bf:45:4e:75:88:30:6b:
8b:85:a9:dd:8b:0f:bc:e4:d8:35:05:3e:c5:48:f6:
bd:2e:13:21:c8:39:2c:cd:be:b9:58:8c:84:f4:1c:
ad:50:87:51:ad:6c:b4:fa:52:fe:cf:9a:f2:84:39:
89:2e:38:aa:e4:f5:f4:66:24:70:f7:21:22:66:45:
93:13:c8:b7:76:5a:5d:d6:f2:e1:d8:45:ca:7e:51:
3d:72:f0:07:d7:10:2a:44:ec:d5:80:79:54:c4:39:
1c:13:6e:c2:b5:41:3a:c0:9d:41:69:4b:ec:5e:cb:
39:94:cc:73:b9:96:d3:6d:64:e0:97:cd:08:5f:dd:
d9:18:b1:10:75:0e:81:97:28:40:4f:e3:35:a5:14:
91:a9:ea:5b:90:b7:3d:81:03:8b:69:4a:14:e4:6c:
ac:34:28:42:74:92:a5:f4:d8:8d:b0:75:44:d1:18:
09:93:5c:e6:72:1b:a6:3a:85:c0:c1:ae:7c:1a:f6:
e7:53:4e:a5:21:1b:e9:b4:a3:71:97:43:c7:45:0a:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7A:A9:D9:EA:0D:4B:52:4E:EE:8C:56:68:3E:93:CD:BC:F8:2B:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.250.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:0a:da:64:57:cd:7b:5b:ed:09:bc:b8:c0:d5:b0:67:bb:0d:
b9:12:b0:90:2e:76:f8:b4:c7:21:7b:92:6d:19:3a:84:02:73:
29:97:cd:51:4b:60:94:5e:40:c3:7e:ec:b0:6f:eb:87:3a:75:
8a:31:07:78:0c:ea:07:02:29:2a:61:63:fd:9c:4a:22:e8:f2:
56:c0:1d:dc:35:ca:8a:ae:0a:d8:67:86:e0:38:d3:b7:60:f8:
88:64:5e:60:cf:55:8b:9b:ef:1d:4c:e7:16:6b:3f:2b:5e:b7:
b1:e3:a8:5a:ef:ab:33:83:61:8d:48:9d:a7:bc:b7:87:9f:6e:
a4:a2:2a:76:6d:4f:2c:3c:fe:7e:5f:ff:da:f9:e8:15:d7:69:
03:37:3a:9d:1c:08:2a:8b:81:59:05:d4:43:c9:b7:f8:30:c7:
fb:73:4b:70:7e:a5:a0:68:7f:c8:25:4c:89:11:5f:4d:47:4c:
66:67:a5:75:dd:ae:6e:7d:61:aa:e7:59:64:a4:5d:9b:9c:11:
de:10:6e:79:64:a1:0d:43:7a:09:c3:cb:0f:5f:38:98:0a:12:
b8:56:b1:4c:ef:e1:04:fa:d0:f8:3b:d5:80:24:52:db:7c:3a:
81:5a:e3:49:10:37:bf:de:56:4c:6c:92:2b:bc:e3:cb:c3:e9:
71:12:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:20 2025 by rpki-client on console.sobornost.net