Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa
File: d69d305c-a658-4c39-8075-c28e2b201286.roa (raw, json)
Hash identifier: cBe9ZRWexeLDIxdX3IJKDP6PJeDwnANgIm+jpR5fTps=
Subject key identifier: E5:97:2F:45:FF:E2:47:83:07:1A:BA:FB:39:09:2F:57:FF:4C:AE:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 640B670C105DC69AD436E19F78BDCD5CE5DB2DAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa
Signing time: Tue 08 Apr 2025 00:00:27 +0000
ROA not before: Tue 08 Apr 2025 00:00:27 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.115.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0b:67:0c:10:5d:c6:9a:d4:36:e1:9f:78:bd:cd:5c:e5:db:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:00:27 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=9286672eac3847f3d6d41c7768e66017b5a80f80bbd83546788d1922448f4ef0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:11:c9:26:23:47:c3:bc:5a:a1:54:2f:d7:
49:8f:f3:ca:1c:5d:54:81:a8:60:c2:76:c7:b0:e1:
94:06:f5:3b:66:d2:57:92:42:d0:14:d4:ec:91:66:
1c:12:04:43:07:06:96:05:e0:83:b8:39:63:26:cc:
b2:83:0e:64:66:45:2e:67:99:43:20:81:b0:3d:5f:
ac:c7:84:2c:04:01:9d:53:d1:55:56:cc:e3:a7:ba:
01:50:bb:07:01:cc:2c:5e:d4:af:4f:89:1e:8f:6a:
5f:c4:88:9b:08:23:c5:03:90:a0:d1:a9:da:b6:98:
7e:09:6d:25:8d:fd:01:51:ae:e1:62:c2:7d:04:58:
97:ab:33:87:ff:be:c4:5b:a9:da:66:4c:6d:e9:d8:
fc:5c:6a:34:a4:bc:a7:aa:26:26:01:13:36:65:88:
0c:bc:c1:ea:f9:d9:dd:db:0f:38:0c:ed:8d:1c:bb:
71:42:9e:0a:ff:0b:a8:10:c8:ef:3c:a7:4e:62:9c:
18:5a:03:d6:62:58:8b:c8:d0:29:59:38:63:c3:39:
2e:86:79:c7:0c:1e:f8:00:34:e7:55:25:a0:3b:34:
27:26:02:54:27:5f:c7:da:d7:b4:22:46:4a:d5:c2:
79:c3:ea:e4:b7:07:44:b1:12:d1:d9:7e:d6:70:ac:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:2F:45:FF:E2:47:83:07:1A:BA:FB:39:09:2F:57:FF:4C:AE:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.115.0.0/19
Signature Algorithm: sha256WithRSAEncryption
37:98:38:4e:09:ba:91:f4:a0:8d:89:81:0b:46:18:03:92:0f:
4e:35:73:23:90:15:47:93:9b:ed:59:e7:4b:8a:5a:bf:cd:12:
20:87:2c:3d:35:07:96:1f:76:47:4f:5e:1e:40:87:61:70:e4:
0d:bf:60:ad:2f:9f:06:28:ae:74:11:2b:b5:01:06:3e:2a:c8:
7a:f7:33:e3:7e:9e:76:0a:79:5a:e4:dc:74:dd:85:55:96:ce:
50:00:af:f0:84:07:c2:a6:dd:a0:05:6b:fa:4a:8c:e4:3e:48:
ae:b2:ef:b2:09:e9:34:18:bb:dc:81:22:e9:7f:f2:c4:d8:3c:
2c:fc:5f:b1:36:0e:06:da:e8:fd:fd:ee:b5:1a:6b:9c:5a:8d:
fa:14:13:03:1f:ef:49:c6:7d:1a:25:68:c5:dd:03:ee:f4:05:
a4:12:22:63:fe:5b:6e:11:31:d3:f9:c9:81:5f:87:01:54:3c:
f2:12:7c:7d:e4:d1:97:50:f7:43:47:05:1b:a8:82:07:c7:4b:
b4:60:aa:c0:84:0b:e7:b1:7a:f7:8a:2c:f2:2a:f6:a4:29:67:
25:34:0f:67:eb:52:0b:fe:b0:3f:c4:6c:27:17:cf:e9:5d:a6:
41:af:73:72:88:58:b5:f2:df:33:08:be:09:d9:ef:4f:a7:d5:
a1:68:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net