Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd040691-6f04-4613-a81f-f5417500cc0b.roa
File: cd040691-6f04-4613-a81f-f5417500cc0b.roa (raw, json)
Hash identifier: EhV8mx6vWGzqgcTq13H0SNReSfYQvPrN/zTx4APzB/Q=
Subject key identifier: FB:77:46:D4:BA:4F:EC:C4:07:D3:4B:40:6B:6D:EB:0A:89:D6:C7:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76B3CFF75A66C4A6198171610985FA7C422920A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd040691-6f04-4613-a81f-f5417500cc0b.roa
Signing time: Mon 31 Mar 2025 15:40:33 +0000
ROA not before: Mon 31 Mar 2025 15:40:33 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b3:cf:f7:5a:66:c4:a6:19:81:71:61:09:85:fa:7c:42:29:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:40:33 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=9e095eff9b81d3d97463d658505fdaa904f9a46cf0d6d68fef77ecace8455d3d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:b4:06:c9:e2:dc:00:e4:c3:8c:dd:32:15:
90:76:10:88:29:a0:e7:cb:cc:2d:4c:ab:0b:de:f1:
40:7e:c0:21:af:e4:84:fc:26:77:70:8f:15:e7:39:
30:52:4a:af:83:70:54:08:ee:8b:6d:0d:f2:42:2f:
31:fc:e2:05:cf:f9:6a:b9:d9:1e:a6:62:27:20:6b:
d5:1a:26:97:cb:19:16:c9:fd:02:ed:62:ef:cd:b8:
e9:6b:2e:a4:f2:3e:fa:cc:22:23:b4:c0:5b:d7:75:
ed:59:ae:97:3a:7f:47:b5:8f:53:a1:90:c0:c9:8a:
1f:00:e8:65:81:15:56:06:91:a9:f5:92:a9:e3:d4:
bc:12:c3:79:3a:9f:61:a9:05:7c:03:de:3d:05:a1:
33:c1:5c:2f:72:0c:b8:81:10:e5:f5:96:3c:b6:37:
60:1e:24:54:13:16:03:48:96:14:2e:09:ce:99:73:
0a:5a:7e:58:c9:00:99:3b:1c:05:79:13:d4:74:3c:
98:da:3d:2a:12:ee:50:32:26:7e:d9:63:75:d3:d5:
9b:73:db:eb:57:83:4b:cb:fb:ec:bd:e1:0c:af:18:
6e:44:c0:ef:b1:45:98:92:7f:1f:82:fc:c9:a6:ba:
47:91:16:e2:c3:f1:18:61:27:ee:e9:6b:1b:56:cf:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:46:D4:BA:4F:EC:C4:07:D3:4B:40:6B:6D:EB:0A:89:D6:C7:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd040691-6f04-4613-a81f-f5417500cc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:c4:de:ec:e0:95:ce:e2:c8:34:f4:62:87:41:d1:ad:dc:0e:
05:c7:04:ba:4f:8f:d9:0f:5c:59:a0:16:86:e2:3d:e1:ff:a1:
90:d3:c2:a3:89:ec:83:b8:8e:4a:c0:64:b4:78:14:c6:1a:5e:
c3:1b:f5:76:27:0a:16:51:18:97:90:1f:3e:42:6c:ce:32:53:
33:21:51:63:8f:54:8e:75:58:1d:97:64:d0:08:b6:61:11:dd:
a0:aa:59:8c:67:e1:93:f7:03:af:d6:2d:fd:4f:73:f5:a9:48:
98:71:c0:bb:26:b6:38:80:e1:4c:fe:18:1a:d0:da:ed:ef:53:
67:9d:de:e8:d1:ab:a1:23:f4:9a:98:1a:70:9f:5c:3b:67:67:
49:b1:44:2d:67:1c:96:46:81:ea:81:b6:cd:cb:60:f9:e3:4f:
88:30:fa:04:a5:ea:24:a0:75:b6:45:7e:ed:31:3d:ca:1e:12:
d8:60:a2:6b:52:a4:0d:1f:c9:5d:ff:de:c3:67:dc:9f:17:e5:
34:9d:1f:3d:5c:81:01:68:de:5c:9b:47:d2:b2:2a:38:eb:97:
2a:88:55:c0:11:07:ce:56:a9:64:3a:4f:00:35:bb:1e:18:da:
b9:b6:04:db:9a:3a:75:a8:56:a4:65:0f:86:a6:7e:e8:c3:00:
f4:a8:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:22 2025 by rpki-client on console.sobornost.net