Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
File: f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa (raw, json)
Hash identifier: ChtanSQExsVheczPC20j9BzN4EG9ABg8Cg2Thwfkyo0=
Subject key identifier: 03:D5:AB:FB:3A:08:00:FE:08:54:F4:4E:1D:13:E6:B2:BA:41:12:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 152429A7886F31E246CACC745DB3BBDE758C76C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
Signing time: Mon 31 Mar 2025 15:10:13 +0000
ROA not before: Mon 31 Mar 2025 15:10:13 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.39.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:24:29:a7:88:6f:31:e2:46:ca:cc:74:5d:b3:bb:de:75:8c:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:10:13 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=2e5ccd1c2866b3a4ad1c339020acf2da6e97e4eaedcd58b1cda82c865bfe29b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:4a:c0:d0:1d:2c:da:e0:ec:20:c0:12:a4:
6f:73:d9:56:ab:0c:6d:a6:13:9e:32:70:72:d3:9f:
68:77:f6:ad:f3:72:61:c6:b1:5b:37:ec:7a:74:bb:
b1:f6:69:4f:73:5c:0e:ca:5a:c8:ae:06:93:41:26:
6b:2e:76:50:1e:22:9c:61:08:26:a1:2f:b8:90:a8:
4e:b0:2f:b5:0f:bc:32:58:ad:1f:3c:23:34:ab:07:
8f:fb:7e:3e:80:b6:c4:ca:5e:d0:8a:a0:3c:c6:83:
ac:02:3c:57:78:09:62:84:f2:dd:54:8c:2b:33:fb:
1f:33:2b:cc:9b:33:ac:6c:c1:6f:39:31:55:31:36:
76:b6:62:40:37:45:86:58:45:7b:40:f4:5d:f6:28:
b7:a4:70:e9:46:90:87:73:c6:95:91:1c:df:c2:a6:
6c:0d:dd:0a:91:50:7b:d7:dc:7d:12:0a:fd:ad:42:
ed:21:75:c5:92:fc:51:bf:b2:8d:f9:ff:7d:20:cb:
8d:d5:1b:eb:a9:48:ca:ce:46:0e:7c:72:ed:16:fa:
17:c0:e6:a4:ea:a8:6b:3e:93:e3:ed:17:54:06:21:
d3:7b:09:be:ef:db:8e:58:49:a8:4d:68:a3:49:12:
a6:21:db:f3:12:89:60:2a:8d:a4:d8:b2:ba:15:24:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:AB:FB:3A:08:00:FE:08:54:F4:4E:1D:13:E6:B2:BA:41:12:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.39.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:61:54:ae:b9:e9:29:cf:dd:dc:10:2f:f1:1d:04:a5:45:1f:
7e:77:44:d5:bb:c2:fd:de:34:e2:c2:08:50:09:1c:b1:1a:7d:
1c:6e:02:d9:19:a9:cc:0d:62:14:5f:85:7a:a0:69:72:33:fe:
5b:74:8e:9e:1c:66:4b:5d:10:e6:fd:7d:8c:ce:0e:a2:0c:23:
67:f4:cb:8e:f2:ff:76:b0:21:95:b4:98:c1:33:72:b8:65:fc:
4f:59:01:96:1a:aa:bc:a7:f8:1b:b1:da:15:05:1e:7e:d0:0a:
41:51:2a:20:b0:5a:f4:a2:7e:75:00:d8:aa:8f:fb:ef:e6:7b:
de:5c:98:2e:bc:56:32:60:62:58:b8:d4:a8:b3:61:4f:f5:46:
6a:2c:1d:f6:92:be:5c:1f:29:06:36:00:40:2f:2f:21:3c:21:
9d:d6:26:18:58:6f:00:ff:05:f4:7f:ba:5d:79:d9:ea:d7:c4:
8f:48:f1:6a:f2:47:06:19:02:e5:12:45:49:01:7d:c0:ce:47:
73:6b:49:29:ff:38:66:9d:df:d8:ed:d3:7e:3d:06:b0:16:f1:
92:e1:c7:64:cc:ea:d2:0f:da:88:ac:4f:0d:69:1c:1e:fc:a2:
d9:d9:83:06:99:fa:c5:8b:2f:27:d4:d7:a1:69:2b:ea:14:2b:
4c:37:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:25 2025 by rpki-client on console.sobornost.net