Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa
File: d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa (raw, json)
Hash identifier: sj72/tEBrL2YfWPrsIgthS2/p0Z+nvOs1HK30jzKQYs=
Subject key identifier: 67:67:C7:C8:B3:CD:4D:58:C2:07:3A:9C:77:F5:0F:80:61:58:A2:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4EB3D093C669DC84A9172C734C856A9F3C3703B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa
Signing time: Fri 04 Apr 2025 00:00:12 +0000
ROA not before: Fri 04 Apr 2025 00:00:12 +0000
ROA not after: Fri 09 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 147.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b3:d0:93:c6:69:dc:84:a9:17:2c:73:4c:85:6a:9f:3c:37:03:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 4 00:00:12 2025 GMT
Not After : May 9 23:59:59 2025 GMT
Subject: serialNumber=59b03944a4da45df1f1ac7b75479c53d1fd84749e647e64ba94b1cff9063c47f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:80:88:8d:4b:07:89:6f:4b:75:0e:5c:1f:
e1:ed:13:29:9d:f6:a9:e9:58:0f:8d:9c:d3:07:11:
8c:15:11:eb:85:6f:c4:8c:bb:66:60:11:c9:fc:29:
c9:16:6a:96:71:6c:60:21:fb:b6:32:f5:8d:10:72:
13:e2:48:68:4e:f1:66:71:1a:50:be:95:7a:b8:49:
1c:f1:ac:90:e5:12:ab:9a:9b:46:f4:a6:07:93:24:
61:64:94:10:08:23:0d:b3:b0:65:31:f3:13:75:a7:
ec:81:06:66:71:0d:7c:fa:ad:d1:ed:00:66:8e:f6:
bf:22:8d:28:9e:e4:be:09:a4:b4:09:17:3c:1b:02:
ca:8d:9f:ee:58:68:a5:50:9d:4d:7a:9d:61:07:68:
b5:ab:26:4e:81:93:62:c7:5f:92:29:cb:ec:73:41:
54:69:b2:c0:bf:b5:eb:f4:d0:8d:41:34:13:3d:b5:
d1:92:1c:0f:0b:a5:8c:01:79:a5:c6:16:89:4a:42:
08:86:d0:63:b1:78:e0:0d:0f:a9:32:bc:f0:c1:db:
ee:34:2f:d8:7c:95:ab:36:5a:eb:ab:4c:2d:12:a6:
f0:7b:ea:6b:14:66:fa:37:c1:48:38:4d:70:1c:47:
8e:6c:c6:62:07:90:72:2e:44:41:60:2c:2e:0f:12:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:C7:C8:B3:CD:4D:58:C2:07:3A:9C:77:F5:0F:80:61:58:A2:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:a0:31:0a:e2:ac:cd:93:e0:ed:87:ff:26:7b:5b:f2:fd:3d:
a7:39:c4:16:7c:44:e5:0e:9c:d5:af:20:c9:f1:4c:99:bd:00:
3d:6e:4a:ba:9a:59:de:28:ac:ca:12:ea:05:de:6e:84:51:19:
d5:ff:7d:fd:03:b7:d6:0f:c1:7c:e1:d4:25:5f:9c:72:f7:d3:
18:2d:00:61:ba:c2:27:22:d1:7d:a3:9b:dd:6e:aa:67:bc:bb:
7e:d0:99:7f:24:85:06:83:01:65:0c:73:a7:c2:91:30:b3:6f:
31:85:9c:5e:c5:c4:05:59:95:5e:e4:ad:45:be:82:a9:49:7f:
59:9c:b1:74:81:ed:8e:78:c5:93:7f:8f:51:91:14:91:59:0d:
36:3b:bd:13:49:ab:b9:e1:1c:3f:2d:8e:4f:62:20:de:f6:5d:
5a:0f:4d:12:a4:af:19:12:bb:b7:7c:6f:6a:38:9a:60:3d:ad:
bb:48:13:b3:cf:65:23:d4:f0:f6:41:aa:5d:fa:db:3b:02:05:
85:8c:9c:2c:c9:16:35:bf:55:66:e9:51:47:c7:8d:af:ab:ed:
f7:c2:eb:4b:46:7e:20:f9:61:a2:5c:91:14:bd:0e:a0:9a:9f:
e7:90:98:64:e0:95:16:92:a4:c6:bd:d8:cc:e5:2c:ff:48:e8:
4c:da:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net