Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json)
Hash identifier: 04quVoKNo4Ten1azLbE16jYhN6gGJjFPxSPWRVlIegg=
Subject key identifier: B7:6E:87:31:EE:0C:4F:DE:B8:02:7C:F4:23:09:DD:28:DF:80:55:3D
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 63183F1F19B3B33C2DDDF9A873A8255F309CC5E7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
Signing time: Fri 11 Apr 2025 00:00:50 +0000
ROA not before: Fri 11 Apr 2025 00:00:50 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:18:3f:1f:19:b3:b3:3c:2d:dd:f9:a8:73:a8:25:5f:30:9c:c5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:50 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=781484361415ad40a85cb69ce67900882563b4977be984cd989fa7d1587b9805, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:3f:e2:ea:70:4a:6e:b2:bb:54:3e:20:0f:
e2:0e:b2:49:f4:f7:29:49:74:c1:ad:de:93:4b:b4:
a5:d1:45:f1:a0:90:86:c3:33:91:11:88:ea:17:48:
b1:e8:fb:ed:3a:3a:2d:08:13:45:2a:04:e0:da:04:
3e:85:8b:d0:5a:a2:52:6d:bf:79:6e:4d:37:89:19:
38:6c:8f:65:e5:0f:a4:79:8e:fb:ed:ea:7f:42:80:
6b:49:4e:b4:ce:a5:f6:c9:da:6e:df:bf:75:5f:ed:
f8:4b:a5:3f:88:7e:9f:46:af:c5:1b:05:5a:ac:9f:
b2:d9:90:15:b2:cf:7f:6e:3a:88:77:b8:ff:2c:fc:
ec:cd:90:f8:4b:1f:d1:c2:ed:d1:c9:63:31:66:a6:
92:43:54:ae:75:2f:26:e7:c9:24:3d:96:3d:b2:ed:
1a:2c:d5:ac:e2:8f:0b:0e:4b:45:e0:33:02:ca:d4:
e7:54:29:c1:71:2e:8f:10:b2:54:b8:6a:b8:2d:5a:
b4:99:d1:d0:ec:3a:36:d6:ee:0a:28:b9:62:d5:a7:
a8:4a:73:f2:80:3a:7f:85:2d:97:28:90:e4:49:86:
df:04:04:25:6d:2a:98:ee:34:e1:e8:e6:a9:ab:ae:
bf:af:96:56:dd:3e:aa:c7:87:be:f1:48:cb:45:dd:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:87:31:EE:0C:4F:DE:B8:02:7C:F4:23:09:DD:28:DF:80:55:3D
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6a:6c:9a:1d:5f:e6:be:bb:4a:2e:3a:8a:0c:2b:6f:85:cc:
a4:76:44:f2:9b:03:d6:97:ae:14:42:de:58:04:40:7d:a5:b8:
80:71:18:90:9d:9d:cb:46:d5:ae:f4:b5:c3:8d:69:a9:6c:30:
70:31:c6:40:84:f1:09:be:72:c9:a8:b9:f0:f8:99:d4:66:63:
da:ec:59:6e:b7:02:b8:04:91:a3:1b:f2:d0:36:73:01:b1:97:
0e:9b:85:d1:37:e1:80:06:36:d1:0e:bf:56:c7:bb:74:a0:08:
2f:26:76:7e:be:ef:20:dc:44:af:e7:ed:0e:74:58:d2:b0:0a:
5c:86:31:df:50:9e:53:31:5a:39:0e:f6:d1:5c:37:68:6a:29:
98:13:83:e0:8d:87:83:11:69:a9:28:cf:c2:f0:6e:c8:ea:a3:
85:7c:a3:3d:eb:c7:c0:35:21:ef:c9:42:f4:15:63:ba:a2:57:
9e:2c:9e:92:78:af:36:4a:83:89:cc:56:b4:66:e0:17:c3:b6:
16:ea:c4:05:90:3b:14:4d:dc:4b:2b:69:7e:77:4e:24:b9:8f:
8f:58:f1:a5:e9:a3:6c:93:19:10:12:0b:78:44:b2:4f:b3:d2:
09:ed:bd:0a:38:df:c6:38:21:5b:de:1a:b8:fe:43:f5:20:d8:
5b:54:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net