Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json)
Hash identifier: dCPHbQfs4SLRIfZnaj3njGJrFmvEetJIKobreYZOTFI=
Subject key identifier: ED:AA:80:E1:D8:4C:C4:C6:B3:BA:E7:77:37:C6:0C:F0:81:3F:A9:5D
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3523B252F639186B31367D1177BD6FB91E631594
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
Signing time: Wed 09 Apr 2025 00:00:10 +0000
ROA not before: Wed 09 Apr 2025 00:00:10 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.221.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:23:b2:52:f6:39:18:6b:31:36:7d:11:77:bd:6f:b9:1e:63:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 9 00:00:10 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=eb9e326d0aa60a24dd7a1a1c637c609bad57e197005d9bb53b77e92319749d2a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:17:b6:40:42:26:43:e4:2c:84:56:d1:7b:b4:
60:83:fd:00:75:b0:87:89:31:84:65:76:b8:82:2d:
ad:c8:6e:bc:70:2e:df:a6:1d:d8:49:0a:8f:b2:8a:
aa:ea:9b:0f:8c:83:90:25:3e:56:dc:33:d2:ca:3d:
19:e1:ac:46:39:40:78:e3:e7:d1:64:30:db:a9:aa:
07:48:71:ca:3f:0e:3a:75:fc:7a:f7:59:10:af:ca:
3e:51:9e:0a:34:24:02:e7:3c:a1:cd:6f:7c:c5:85:
22:85:c4:b3:f3:a0:0e:cc:3f:e8:62:1d:ad:69:17:
e7:1f:56:84:d9:9e:3c:db:f3:e0:c9:15:c6:27:f1:
f4:42:b6:44:16:98:3f:d9:a0:5d:91:be:27:97:db:
02:27:a9:ba:e8:09:76:10:8a:14:71:61:86:40:33:
d4:89:dc:9d:fa:1c:00:72:58:69:16:bb:bf:77:e6:
87:ad:a5:46:b9:1b:54:b3:dd:7e:27:b9:8d:bc:9d:
af:6a:90:c1:54:d4:25:a4:1c:3d:1d:03:0b:cb:5e:
7d:5c:71:1d:87:e1:ff:03:69:9d:04:7c:36:a6:4b:
fb:91:d7:4f:4c:c8:9a:0b:f8:8f:24:80:65:3e:ab:
5d:77:e3:f1:cd:89:c0:41:bb:60:b7:54:7c:c6:0a:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:80:E1:D8:4C:C4:C6:B3:BA:E7:77:37:C6:0C:F0:81:3F:A9:5D
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.168.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:71:28:27:e9:e4:92:33:77:ab:e7:95:97:15:8f:bc:54:eb:
cd:00:c6:1e:3c:dd:0d:c8:51:52:5a:ae:76:b1:30:27:df:2b:
12:59:c9:40:74:2c:f9:e4:34:2d:18:c3:16:a4:44:6f:cc:c7:
52:38:65:82:a2:8a:14:f6:f7:bc:c9:0a:a3:5f:70:b9:43:b8:
3f:a2:76:b4:34:35:c1:f8:c7:77:a4:f6:3b:e4:79:f9:ab:d1:
a8:aa:fa:21:b9:90:a0:d9:4e:c0:18:b6:51:de:7a:36:7c:e4:
85:63:00:0b:08:a0:42:5f:bc:fa:bf:54:18:5d:10:a2:70:70:
81:8a:23:98:5b:9e:d4:76:5c:fb:d2:bf:1f:17:94:31:4b:35:
df:0e:6f:b2:27:76:4c:29:7c:8f:a5:05:b8:24:bc:3c:3d:31:
9a:46:12:a4:28:b9:9b:7b:52:57:f0:38:96:82:77:6a:b0:10:
e6:b9:87:34:f8:9a:90:88:35:ad:a1:40:19:f9:58:92:19:2f:
cd:6b:85:8f:37:0b:a2:12:3a:34:79:f3:a8:dc:36:7e:e8:bc:
df:7e:d7:48:83:94:31:9c:a7:93:18:30:ed:3a:46:f7:ac:97:
c2:11:81:3f:53:6d:7c:ed:b5:d3:26:1e:a3:4f:fe:8c:3d:8d:
79:67:7f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net