Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa
File: d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa (raw, json)
Hash identifier: LhxE97H/Fkv10+OrRnqiaLJkcInG41yMByiAxA7elwA=
Subject key identifier: 44:64:D0:A2:3E:42:E6:75:D4:3C:FE:95:43:68:7F:98:A5:9F:27:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 540AE506B3A1C3D530829885EAC1B56960461F8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa
Signing time: Mon 07 Apr 2025 17:07:05 +0000
ROA not before: Mon 07 Apr 2025 17:07:05 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.254.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0a:e5:06:b3:a1:c3:d5:30:82:98:85:ea:c1:b5:69:60:46:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 17:07:05 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=89b015595e80f57de2f59b4cdd67afc6cb6ca3342a9cef6e7a3cbfb6d439b643, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:90:0f:81:04:a3:00:c7:dc:04:64:e1:6d:
e4:e7:a4:5d:57:74:9e:10:97:36:0a:bd:f6:ff:77:
3a:54:ed:dc:30:98:8c:11:b4:e7:7c:bb:b7:fa:01:
4a:6e:6a:94:9b:ef:51:e8:bb:41:d1:ad:99:7f:45:
f4:47:bf:08:39:0a:3b:03:d6:0d:c9:ef:03:65:c7:
7f:f8:94:ea:03:db:58:14:4f:26:cc:46:66:25:11:
65:e8:32:77:08:ce:ba:7b:2b:b6:b3:be:88:7a:65:
18:cf:84:d6:e1:8d:d5:8d:d7:1f:9d:f2:e0:b2:08:
5e:f0:b4:f9:b0:22:82:0a:39:b6:27:3f:48:1c:31:
36:eb:3d:f8:25:56:bd:3d:9a:af:5f:f7:c2:59:52:
85:4a:ad:0f:66:84:c3:db:66:e5:7a:38:5c:12:16:
e1:23:fe:10:cd:9d:6c:9d:61:4c:d8:d3:35:95:de:
1b:2a:12:6c:24:71:fa:6a:7f:73:f3:2e:2f:e2:0a:
d9:0f:fe:5c:2f:9a:dd:6f:8c:31:2c:1b:f9:da:7e:
0e:80:25:01:a7:07:c8:c7:30:da:10:fb:f7:89:af:
ec:1e:40:37:00:f1:3f:52:e1:34:9b:56:af:0e:58:
a0:e6:d3:50:37:aa:fc:ff:04:d7:c5:34:20:c1:be:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:D0:A2:3E:42:E6:75:D4:3C:FE:95:43:68:7F:98:A5:9F:27:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.254.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c0:c9:5c:c3:bc:4c:46:4f:90:55:73:4e:51:fd:76:a9:14:
11:6f:49:c4:08:12:0c:04:df:22:08:2c:59:9b:61:6a:e7:d6:
8a:f1:53:ec:64:5d:2b:dd:1a:c4:f2:28:63:a5:4a:f0:5c:7e:
94:a8:e7:74:38:dc:28:48:ee:85:a8:4a:0f:7e:27:1b:8e:9c:
ef:4e:cb:6c:0e:18:41:7c:7e:ff:39:ac:8d:ee:cd:35:ed:fc:
62:bf:05:d7:1d:56:12:67:63:c9:b6:62:37:42:85:e1:05:eb:
41:14:8c:9c:11:08:ba:38:5a:b5:7a:27:75:a1:fd:47:4b:7e:
2a:5a:cb:00:7a:61:5a:b8:b6:37:01:e9:43:ee:5e:da:59:cc:
1a:59:fb:52:b2:0b:f4:4c:44:7d:a2:a4:33:26:f5:45:48:ef:
c6:2a:5a:a2:ac:1d:bd:5c:f7:b6:5f:1e:b9:de:70:d1:f2:32:
31:42:2f:99:25:71:c0:0d:7a:89:ce:1a:2b:43:7a:8d:6b:f1:
9b:a0:17:15:71:30:47:31:34:de:b0:62:8c:d2:3f:a8:0b:85:
57:4f:6b:97:0e:55:29:23:d0:ef:d4:4b:ce:24:fd:21:97:2b:
88:4e:ec:d9:db:7b:57:68:54:31:10:2a:64:08:81:27:c8:4d:
da:fa:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net