Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa
File: f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa (raw, json)
Hash identifier: lT8lU/QS1yYhk8yUl5PtSRYiy9OfO1Xbk2ie6DgFMNM=
Subject key identifier: E9:7A:2A:10:8D:AF:67:72:D8:36:70:01:A6:C5:50:0C:DA:A2:A8:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1254A9426BCA8D74C0F0FD57BEE39C141E686772
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa
Signing time: Fri 28 Mar 2025 15:53:31 +0000
ROA not before: Fri 28 Mar 2025 15:53:31 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 1.178.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:54:a9:42:6b:ca:8d:74:c0:f0:fd:57:be:e3:9c:14:1e:68:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:53:31 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=551523ce7cc86e1d47bb8bb5414b1697bde4bb0d816cc5e2e0ab054822a38d7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:2a:75:ab:0a:c7:cb:f5:18:03:ee:d5:2d:
95:1e:1e:82:d8:63:e9:2d:a7:44:01:a5:c1:66:e0:
da:06:a9:8f:2c:77:5f:d3:ee:2e:52:b3:f8:b4:d3:
3d:2b:6f:8b:33:56:7b:ae:63:33:a9:ec:2d:ef:23:
ec:09:20:b2:b7:5f:ce:11:3d:8e:f8:c8:8f:12:82:
2b:42:ce:dd:83:c8:0b:17:41:73:98:e3:45:04:fb:
7f:31:f3:bc:23:f8:bc:97:68:9d:28:ef:c4:8e:5e:
9d:18:a5:c5:92:c2:19:0c:09:70:98:b3:05:4b:f9:
9f:7f:f6:bc:af:47:6c:b3:04:c7:59:a2:40:95:3a:
5e:d9:ea:cc:31:c7:d9:7c:fa:95:37:0d:4e:f8:62:
8c:76:02:a8:1d:b1:ee:07:31:c6:f5:4b:c5:76:cf:
fe:56:ec:3c:59:28:7a:61:37:a4:7d:eb:e3:7e:0b:
aa:c6:50:5b:3d:52:84:bc:fe:62:0f:a7:d5:cf:cc:
2a:5f:27:39:89:4d:98:34:14:3a:d0:73:68:0a:74:
9d:d1:03:89:9c:07:80:9b:ef:3f:72:df:54:c0:13:
a8:11:b6:3e:c0:32:dc:56:df:ed:57:2d:5e:6c:a9:
57:8b:dc:c7:ce:bd:5a:cc:3c:8a:59:5c:6d:1a:16:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:2A:10:8D:AF:67:72:D8:36:70:01:A6:C5:50:0C:DA:A2:A8:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:0d:11:31:09:a5:13:c7:da:ac:bc:f4:35:a8:17:13:ac:78:
7f:a6:47:e5:fc:8d:9d:35:61:db:a2:42:67:85:9c:25:b1:b0:
d2:16:c1:c2:8a:15:3b:3f:77:5f:21:d7:39:91:53:a3:5f:32:
33:b5:bf:25:cd:53:dd:4d:0a:f8:94:a2:62:8b:cd:ec:62:6a:
85:a6:75:ef:0b:f7:11:fa:4c:bc:9a:41:8a:9a:2a:1a:89:bc:
43:66:38:6f:90:a8:ba:c7:af:85:b9:82:b7:58:51:fd:83:64:
ef:36:0d:f5:c7:df:32:3c:a9:77:f6:17:a6:d3:39:48:f5:fc:
bb:81:e6:6d:2d:7d:2a:93:72:42:8a:7d:53:5c:64:1a:c8:51:
9f:6c:f3:a2:66:34:17:d7:62:8c:34:02:2e:f1:e1:c9:b4:82:
f2:84:9d:bc:97:5d:02:f2:5a:38:fe:70:3b:5d:81:9f:98:c8:
c2:3c:f4:cd:ca:4c:c1:c2:6d:8a:8c:8f:bf:52:7d:dc:1e:ab:
4d:c3:a0:e0:f7:9c:d8:5a:86:6d:c8:9d:e2:b6:e6:42:e1:64:
dd:f8:e1:9b:ec:2c:99:99:45:a5:05:59:8b:ec:0b:a2:b0:69:
68:fc:8e:d1:f7:76:f5:58:c9:87:ce:f3:15:5a:d3:b9:05:3b:
3d:0d:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:25 2025 by rpki-client on console.sobornost.net