Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa
File: d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa (raw, json)
Hash identifier: 1fzw8tv9y6Z3W5AiNyfxKqkXXoZOhXIuQESGuxJexpM=
Subject key identifier: 0D:19:87:B0:0B:A4:EC:59:3D:14:B3:58:30:C2:6C:65:26:B7:BF:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C9500F9E588D0D8C24E704F2A1BAF22355E3E67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa
Signing time: Sat 29 Mar 2025 00:31:30 +0000
ROA not before: Sat 29 Mar 2025 00:31:30 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.107.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:95:00:f9:e5:88:d0:d8:c2:4e:70:4f:2a:1b:af:22:35:5e:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:31:30 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: serialNumber=c68acc9d011a6ac133e2bd72bd010078a4d3ec0a731594f572cff52f6f9b4998, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:77:b0:70:30:1b:4f:3b:da:2a:c3:5a:81:
90:77:3f:93:a4:ae:dc:2f:43:87:cf:26:67:32:db:
21:c4:29:42:ab:61:13:b0:a7:88:a5:84:14:c2:99:
3b:fe:b9:45:c8:f5:f1:ae:65:13:1a:71:6e:54:b5:
1e:9f:b4:50:ee:1f:31:5a:ff:2a:2f:07:ea:87:e5:
65:cc:9b:05:c5:15:64:63:be:3c:d6:17:85:f1:e7:
78:24:31:f8:72:36:a8:1d:05:90:61:b8:73:40:62:
84:77:8c:38:36:cc:be:8d:1f:22:0f:2e:e6:5b:44:
87:f8:f9:d6:9e:1b:36:9a:ea:40:fe:10:d8:fe:a4:
7f:eb:53:bf:79:a6:de:3b:3b:16:b5:d0:4d:34:da:
51:40:5e:41:a5:a8:3c:79:28:a2:ed:1b:9c:42:bc:
78:a9:a1:c6:d9:27:b0:81:cc:45:19:cf:4b:8e:d6:
52:91:de:b1:d3:80:ab:e3:2e:b0:08:07:cd:66:26:
c7:b3:de:d4:39:8b:47:cf:d3:e2:f7:d0:ec:85:5b:
84:e3:74:0c:52:34:57:47:52:53:8e:10:13:8f:23:
e6:8b:ce:20:c6:ce:da:ec:c7:0c:a3:2c:3b:b2:fa:
44:1e:11:a9:9a:7f:f9:b2:49:27:5f:d6:ad:da:2d:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:87:B0:0B:A4:EC:59:3D:14:B3:58:30:C2:6C:65:26:B7:BF:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:29:e5:8d:75:c1:79:d0:b7:dd:c6:ea:69:0c:85:9b:4e:26:
21:ae:c2:63:24:e6:c1:eb:ac:49:a6:8b:68:06:81:1a:c3:fa:
a6:a2:bf:a7:26:b6:0c:c7:2d:41:1c:de:60:fd:45:0f:d3:d4:
71:c7:dd:ea:4e:7e:56:aa:2a:c4:1e:0b:33:67:4b:e0:7f:be:
ef:61:f8:60:97:78:ac:08:5f:72:1a:ea:36:fd:25:4e:05:9d:
6e:ad:aa:49:f2:8e:0d:88:74:53:ef:a9:01:44:b1:43:c7:e0:
f6:c1:f6:f1:8e:32:15:38:f1:9b:df:ad:49:56:4a:46:cc:f9:
cf:7a:f6:21:c3:3d:1a:a3:69:b0:a7:3d:15:90:1f:7f:62:8e:
0c:7c:30:49:f1:48:0a:c9:04:40:dd:d4:20:e1:f9:b4:0d:0d:
45:e8:d3:f9:e8:f4:68:98:6d:ee:fd:69:e4:7c:72:9c:b0:9f:
45:e5:9c:ac:84:5e:00:28:47:bf:bc:d5:52:a4:6d:31:c8:f9:
22:24:5f:ec:24:d1:09:17:5f:b4:b3:73:1a:b7:98:b4:6f:1a:
4b:dc:4a:56:f3:4c:d8:02:25:e6:03:49:22:3e:2b:65:1c:82:
f8:ce:55:6b:be:7f:ff:8b:7d:a9:2e:3b:f9:c8:6d:c7:1c:59:
bd:59:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net