Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa
File: ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa (raw, json)
Hash identifier: QpWfupY3RZoSJHlp2pfcUL8y2qyuyCBCdawiODtKDPQ=
Subject key identifier: 07:61:72:F3:2E:CD:FA:43:73:89:FD:61:7D:CB:88:6B:E6:67:D6:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55A52C2F656F6AA76678C344F8BDF464F3062627
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa
Signing time: Mon 07 Apr 2025 15:11:34 +0000
ROA not before: Mon 07 Apr 2025 15:11:34 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.14.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a5:2c:2f:65:6f:6a:a7:66:78:c3:44:f8:bd:f4:64:f3:06:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:11:34 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=a3550d1889807b9b62c23ebb265f7f93135100adaaf9bb2936adff4b2e59b0a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:3e:14:c6:1f:61:ad:cd:1b:6e:69:ae:e3:
71:3f:3e:f2:14:94:d2:cf:f5:44:32:cb:41:ed:4e:
3d:d4:a5:89:52:e7:a3:1a:2a:8a:0d:0e:7c:dc:05:
54:18:cf:ef:ab:5a:43:9e:a1:fc:1b:d3:20:fb:97:
8c:0a:c1:17:96:ed:01:72:c5:e0:c0:37:4d:3f:6e:
3e:0d:81:be:f9:e6:9e:92:20:4e:fc:16:ec:9b:66:
ce:65:71:04:4d:ee:ec:f3:f2:7f:9b:4a:40:99:76:
38:27:ba:16:d0:2e:5a:7b:68:89:1d:39:27:90:c0:
d6:a0:93:1d:7d:be:be:19:dc:0b:90:f8:6e:f3:30:
67:b5:08:49:b4:0f:f6:57:40:88:b2:ef:57:d9:ae:
55:69:65:08:72:a3:59:f1:6e:b2:84:54:e2:23:36:
b7:a3:e5:f1:2c:63:cb:b2:b5:95:54:5d:ac:c6:d1:
3a:45:84:ed:d8:43:b2:78:42:ab:03:51:68:19:4f:
e5:4c:1c:a0:e2:a3:22:02:10:e1:44:55:9d:8c:17:
73:ca:24:a1:fc:49:7c:eb:8a:0f:5f:00:63:b5:14:
2a:8d:2c:8b:a3:ff:66:09:a4:b0:54:29:80:dc:de:
89:ca:27:e0:c0:bb:6b:a6:d0:ca:25:d8:52:08:8d:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:72:F3:2E:CD:FA:43:73:89:FD:61:7D:CB:88:6B:E6:67:D6:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:42:d4:cc:96:b0:74:9c:3d:30:ed:c7:71:87:9f:53:4d:ac:
ae:27:a0:cc:a1:50:de:c0:94:81:eb:6c:09:c6:c9:86:ab:74:
82:63:89:d2:4a:b0:99:d0:70:c9:bb:32:e6:2b:f4:93:eb:31:
ec:8b:7c:18:37:fa:15:85:45:3f:b7:44:fa:1b:05:39:a0:98:
55:f5:1d:04:14:e6:18:8d:05:e5:2a:e6:96:26:d2:34:8e:74:
58:74:2f:dc:d1:d1:29:ba:06:a3:09:8b:06:16:cb:b4:66:71:
e7:3e:dd:aa:14:50:ed:6b:1f:c9:b1:1c:81:35:4c:92:22:ff:
93:24:ef:9b:f8:ab:29:43:13:e7:b0:45:ea:eb:14:ad:91:4f:
8d:cc:c8:68:81:0d:10:fd:b2:40:53:6f:5d:dd:2e:57:e6:e8:
43:ba:7f:15:cc:d3:be:02:d3:1d:60:0c:44:80:da:a9:75:fd:
69:7c:a8:a9:32:74:6f:9f:8d:4f:08:07:46:d7:b3:4b:df:e9:
e3:ad:31:94:6b:a8:10:b6:61:ed:5a:fc:40:45:45:da:5e:aa:
6b:59:3d:1b:8e:8e:54:34:65:23:3f:2f:80:15:fe:5a:6c:5f:
8c:84:21:49:4e:a9:a2:60:45:7a:bd:28:5f:72:ed:e7:6c:ce:
75:2c:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:21 2025 by rpki-client on console.sobornost.net