Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa
File: eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa (raw, json)
Hash identifier: fTRFcZrcCwJBZYbxvXxUnXm60PqGvpDGU5nUToAVyE8=
Subject key identifier: 36:53:0D:34:F3:E0:43:50:BC:A8:75:21:E7:FC:D8:71:15:F5:AE:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AB42F6C46E6E133FCCB47A30841236F335A68E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa
Signing time: Wed 09 Apr 2025 00:42:02 +0000
ROA not before: Wed 09 Apr 2025 00:42:02 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.77.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b4:2f:6c:46:e6:e1:33:fc:cb:47:a3:08:41:23:6f:33:5a:68:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:42:02 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=679dc5e1defe1badd32e12a3718c485a4aed2139be18d6b63029345daefd1ca8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:06:d6:d6:29:04:b5:bc:b9:74:0b:ec:1a:
17:0b:31:ec:af:e6:d0:de:46:a5:f8:99:07:74:b9:
5f:08:f2:b1:a2:b0:64:05:8d:b2:bc:09:68:f4:6b:
5a:c5:c2:2b:95:59:c2:a1:76:bc:df:04:d2:2d:dc:
e2:cc:ab:bb:3a:02:a8:96:88:00:c4:a1:43:ab:8e:
7a:9b:d2:68:ff:37:6e:4b:6b:7f:09:0b:98:bd:f8:
b6:98:11:bc:80:9d:4a:7b:1b:b9:06:18:75:59:49:
34:22:e6:98:74:38:05:af:fa:9b:aa:5c:a6:08:65:
e6:02:84:7a:4b:80:0f:c8:3a:52:97:7b:f0:6e:d6:
77:5d:cd:dd:80:d9:b9:4b:3f:29:fa:fb:52:a5:e7:
e7:aa:22:c0:db:88:d9:f7:3c:d2:15:dc:0d:d9:81:
6b:8a:2c:83:c3:1a:3e:17:2c:82:b2:e8:03:52:a6:
91:fe:10:86:4f:10:eb:b1:7b:31:00:82:2d:0c:f4:
f4:10:36:e0:ea:f7:0c:0d:ec:d7:9c:39:82:7b:04:
75:97:78:80:51:55:0e:58:89:c9:43:c3:df:50:8b:
94:69:f4:75:5c:db:e0:71:74:b7:b2:07:68:e5:44:
ff:45:1e:df:ad:73:bf:38:8d:26:39:75:cf:f6:d5:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:53:0D:34:F3:E0:43:50:BC:A8:75:21:E7:FC:D8:71:15:F5:AE:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1c:2d:ad:18:01:a4:e7:70:24:21:36:00:b5:8b:70:c0:5a:
8f:ef:43:b2:0a:90:28:27:9b:d8:fe:ec:a0:be:1d:ec:2a:6f:
4b:51:2b:7b:b9:91:76:f4:d2:e4:67:d6:aa:3f:e7:12:5a:88:
ec:47:bf:f9:0d:2f:7a:07:2c:e2:f7:01:30:e1:24:bf:ac:89:
33:76:1f:91:34:77:20:87:18:48:92:19:21:1d:1b:6f:d8:80:
e4:8a:40:a5:84:ee:3d:30:de:d8:9d:99:e3:44:63:22:26:46:
5a:69:a4:eb:1e:8a:53:f5:8f:65:3b:c1:44:e0:83:9c:a6:9e:
35:97:c9:05:b7:ff:b5:77:72:f5:78:37:5e:cf:a7:79:dd:2c:
56:cf:48:be:68:47:6b:53:16:a7:b4:f4:3f:5c:6b:54:83:93:
8c:f2:fc:3c:fd:5f:b8:9b:d1:23:c5:d2:8c:6e:23:6a:97:a1:
5d:10:26:b1:b1:47:75:70:b2:77:c9:46:a8:5c:d5:11:2d:dc:
56:b4:a4:4d:a9:64:82:bd:27:a4:58:13:e2:75:a4:96:ec:a7:
0d:90:b8:ed:6d:8b:2a:bb:e5:3d:ff:35:bc:dc:96:1f:7b:90:
35:45:f6:24:c5:21:b2:8e:cc:2c:2d:78:90:cc:74:4b:92:a4:
9c:9c:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:24 2025 by rpki-client on console.sobornost.net