Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa
File: cd3025ff-3653-4276-a530-1fa2eed87e53.roa (raw, json)
Hash identifier: a3eTzpL0Of8gyp024N00Lj3D9asUgFksKubOsFDJGpI=
Subject key identifier: B6:FB:B9:90:46:72:C2:BF:F0:98:AB:B3:F6:D8:B4:1F:3C:DB:41:24
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 14EE08356D7C535203662571E09DB81CC1425C3C
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa
Signing time: Fri 11 Apr 2025 00:10:15 +0000
ROA not before: Fri 11 Apr 2025 00:10:15 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2620:107:3000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ee:08:35:6d:7c:53:52:03:66:25:71:e0:9d:b8:1c:c1:42:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: Apr 11 00:10:15 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=a840d8e29ae713f1ec5c0cc234773ee3378137a17213f89a5c609069ed479ec2, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:40:ed:bb:e3:10:a5:53:ad:11:64:d7:37:
79:f1:51:1e:52:ae:cd:88:4f:db:eb:13:2e:4b:0c:
83:9d:57:2e:f0:69:34:ab:09:72:f4:7c:b6:98:5a:
71:c2:fe:b7:b3:58:97:25:87:45:b1:b4:35:0b:d7:
c5:9b:31:11:6c:89:fa:24:c7:b0:25:b1:80:8e:d8:
5d:6c:0e:50:6b:3e:15:73:ad:ca:0f:14:65:0f:9b:
d8:76:04:68:00:49:cb:d3:d6:cc:99:1e:4f:c7:27:
7c:9c:80:c3:72:94:cc:0b:2f:dc:55:a4:1f:9b:84:
2f:f1:2e:ee:f0:fe:8c:5c:de:15:e8:84:93:79:d8:
b1:13:90:bb:ef:12:78:60:9a:e7:3d:43:63:4e:af:
a6:c2:0f:d3:05:61:67:ee:a0:c5:fd:93:a9:0a:92:
93:d1:72:7b:f4:ff:ee:7b:9e:4e:21:bd:1f:55:01:
f8:1d:aa:c1:bb:72:a2:4c:40:06:44:2e:22:c7:f6:
26:d1:fd:f5:1f:8e:60:26:c1:e3:78:29:c4:0a:f5:
c9:89:c1:35:5b:2a:96:6a:5b:b1:71:4e:70:00:38:
4f:25:a5:c4:67:e4:65:d7:a0:b3:76:ff:7c:87:35:
c5:a3:74:83:a4:26:79:74:b0:dc:b4:42:27:9c:43:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:B9:90:46:72:C2:BF:F0:98:AB:B3:F6:D8:B4:1F:3C:DB:41:24
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:107:3000::/44
Signature Algorithm: sha256WithRSAEncryption
08:55:e2:84:74:12:65:3f:87:3d:6d:5b:66:ea:a3:e6:06:86:
8c:5d:53:77:02:3d:bd:86:74:c9:06:37:88:65:ec:4e:b1:91:
f3:fe:92:d8:01:a0:60:1e:80:28:26:7c:95:4b:05:da:08:62:
76:e7:9b:1c:82:9f:11:86:f3:86:4f:da:c5:58:24:2d:b0:df:
2a:d7:78:c7:5d:a1:da:48:96:b5:9c:74:e7:2e:f3:8a:da:a3:
da:78:92:47:22:b1:7f:53:01:82:43:49:8e:e8:4a:f1:3f:3a:
cd:aa:42:ca:31:78:3c:23:45:71:1a:c5:b6:a0:6d:f3:e8:30:
ac:16:cd:7f:31:9e:22:55:6f:d9:15:cd:4d:34:79:42:04:fe:
70:f8:c8:65:40:65:5c:a5:88:b6:d5:69:58:de:8e:2a:e6:1a:
a2:df:50:41:c5:58:d1:38:f6:bf:d9:ae:45:76:89:0e:7f:45:
c8:75:06:d8:58:9a:fd:f9:ac:88:fe:79:40:96:27:72:45:fe:
23:eb:45:2b:5a:b7:d3:b3:4b:45:66:74:03:82:d0:43:7c:40:
a1:8c:d4:fc:31:54:c6:4a:01:d5:59:62:a7:8c:5e:33:0a:d7:
be:1e:45:1a:64:9e:29:f3:b8:7f:36:66:26:0a:35:75:70:b4:
50:ae:74:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net