Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa
File: f82c1957-9091-4d53-8075-edcb55104e57.roa (raw, json)
Hash identifier: Pg1ExswwdXPWGEW9BsG6J+ArEBzhUdovpjOfNuucIHY=
Subject key identifier: 13:DF:BB:D4:EB:F6:D4:05:D3:D0:98:A7:A7:A5:DF:6E:E4:B2:02:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20FB017262F8C91019E968E81F06D3FC94F3ED66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa
Signing time: Wed 02 Apr 2025 00:21:08 +0000
ROA not before: Wed 02 Apr 2025 00:21:08 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.141.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fb:01:72:62:f8:c9:10:19:e9:68:e8:1f:06:d3:fc:94:f3:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 2 00:21:08 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: serialNumber=86819673c7210579bc23bd36072caa8b7329aa634b51a3403350e18e0a5f971e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:74:7e:0f:4e:24:be:b6:21:af:22:db:5c:
d3:bd:f8:52:d4:2e:21:7e:09:84:6e:d9:64:5f:fd:
8e:fb:b2:48:e9:9b:13:81:f0:d0:c1:b8:56:89:05:
75:6e:b7:5f:6c:52:71:81:1a:b7:8f:12:e5:13:bf:
48:a8:fb:4b:88:3f:6c:01:1d:72:66:16:52:46:73:
0b:a3:fa:96:0b:57:3f:67:46:00:53:50:84:25:0d:
db:e1:02:e4:46:8a:86:6e:90:93:40:2c:dc:6a:16:
63:85:b2:2f:46:58:97:07:89:fe:74:d4:d4:20:d2:
0a:4f:67:a1:4d:5c:26:0c:2a:7e:e5:9c:80:c3:cd:
fe:ae:22:95:cc:0a:c0:d2:a3:c9:2c:3f:86:ca:20:
e3:5a:ce:cb:96:04:8b:d6:8f:ff:d4:cb:cb:c7:27:
ce:c3:4f:d2:86:68:0d:f8:3d:f8:48:3c:25:d0:0f:
e7:fc:6f:18:3f:f9:5c:dd:3f:39:18:a9:ca:a2:ce:
ff:51:fc:e5:cb:c1:21:c4:0e:e4:bf:56:35:35:8c:
40:2f:a9:a4:4a:a5:f1:c3:92:67:22:30:93:b6:a8:
3e:a6:76:9d:ac:a4:59:f9:81:bd:dc:49:eb:02:39:
0a:40:a6:3d:21:8b:43:6f:52:d6:ac:23:cd:b7:cd:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:BB:D4:EB:F6:D4:05:D3:D0:98:A7:A7:A5:DF:6E:E4:B2:02:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.141.0.0/17
Signature Algorithm: sha256WithRSAEncryption
92:55:e0:04:0a:28:c5:d6:5c:d2:3b:73:22:63:09:4b:60:44:
8f:af:fe:8b:98:d3:49:e5:34:d4:81:b4:15:8b:e1:b9:43:2b:
40:cd:f4:38:a7:60:7a:32:f5:f2:b8:89:1b:8e:23:45:19:7c:
62:4e:76:ea:8f:02:60:9a:06:74:f1:42:d6:5b:20:e7:d0:fc:
db:80:6d:bd:1f:36:fb:b6:dc:b5:54:a8:8b:a8:15:cb:37:88:
e6:9c:25:8c:87:dc:27:d6:e1:24:0b:4c:7b:b0:fa:d2:bc:3e:
b5:a9:a4:44:66:a5:67:35:d9:4e:bb:b5:fc:23:b9:be:fd:85:
3c:9e:f3:51:d6:f2:d3:55:6b:ee:a6:db:e6:7e:3f:7a:f2:fd:
83:6a:fa:f3:e1:c7:f1:da:83:65:6f:a0:0d:98:9d:c0:66:91:
95:76:a5:e8:6e:75:76:54:1b:1e:70:1e:19:16:45:e1:72:67:
dd:ed:5a:bf:4d:8d:56:f1:1c:63:59:79:e8:0c:b2:b8:89:32:
bf:f5:22:bd:b3:c1:52:a4:41:23:a3:bc:f5:58:8c:3b:0c:23:
6b:a9:48:2d:14:53:7c:c3:ff:e9:1b:8f:d3:fd:e1:da:36:06:
5a:3d:73:8c:cf:f2:74:e8:90:91:1b:cf:a6:f2:ff:78:5d:19:
95:99:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:26 2025 by rpki-client on console.sobornost.net