Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
File: 6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa (raw, json)
Hash identifier: LRd8XoGSRp3Qo/bTS2GzCiSqQqPi3+r7ZGLtkEK1qxI=
Subject key identifier: 15:C1:0A:5C:73:6B:92:B6:D4:34:82:62:F8:AB:34:FD:88:38:70:6C
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3F3F5B7613C1A7CD722D50E005A158FCC8DBB148
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
Signing time: Wed 09 Apr 2025 00:00:03 +0000
ROA not before: Wed 09 Apr 2025 00:00:03 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3f:5b:76:13:c1:a7:cd:72:2d:50:e0:05:a1:58:fc:c8:db:b1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 9 00:00:03 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=1bd93175c34122911995fdbcf2dcb8c3f6c41b796fe65b40463839136a05210f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:2a:cb:72:79:f0:f2:9b:2c:0e:93:f2:f3:
1e:7a:0c:22:05:8d:1c:06:12:26:ee:a8:eb:5e:19:
21:06:07:0f:ea:4c:cf:5e:26:31:a4:fb:16:f6:9d:
cb:41:88:29:68:4b:96:37:53:26:bb:28:89:8a:48:
b4:d8:f1:dd:80:d5:88:00:f7:5c:59:13:de:e7:30:
15:4e:a8:74:12:19:40:eb:9d:b8:63:eb:6d:9d:85:
2d:b0:6a:cf:8f:b6:1b:12:9f:d7:06:fa:82:79:2c:
b4:55:52:1c:16:6f:d9:4c:08:c5:81:52:12:6f:12:
30:5b:b8:c5:e1:89:dd:8a:f4:21:04:d8:86:a6:cd:
de:1f:ce:2b:44:ca:4a:bd:29:a4:cf:31:b3:90:d6:
49:71:e3:31:1c:92:de:62:56:ed:de:ef:fd:36:f0:
b8:73:f8:6f:65:4e:bb:c3:39:45:97:b4:ab:2e:d0:
22:f8:c8:59:8d:ed:a9:7f:3c:9b:56:4d:e0:0e:72:
93:bb:61:e7:c7:45:b3:3b:c5:36:22:cf:df:ce:2b:
37:60:30:14:67:56:59:dc:78:59:b9:4a:7a:13:73:
b6:57:fc:a8:fd:39:83:cf:ed:34:9c:a2:a4:82:5c:
2d:91:0e:de:d3:0a:8e:34:fd:1b:73:af:c8:85:65:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:0A:5C:73:6B:92:B6:D4:34:82:62:F8:AB:34:FD:88:38:70:6C
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:78:01:0d:f8:40:2c:e7:1a:1f:98:cb:f7:9f:63:ec:27:f1:
c5:d7:8b:c4:b5:c4:35:69:54:7d:d3:ba:07:47:d5:57:cc:9b:
10:27:9e:d0:cd:02:30:7c:f6:07:2b:c8:1c:58:3a:4b:f3:ff:
4e:93:74:66:f6:6d:f2:4e:e4:1c:f3:ac:59:4e:f3:40:d1:4e:
45:4b:b1:95:3e:ac:d3:e7:d2:f4:45:ff:b6:1e:75:28:9f:ca:
f5:4b:09:cc:bc:97:d6:00:90:28:1a:7a:d7:45:d5:26:13:4e:
41:98:4f:ff:ee:89:f5:05:d3:8e:50:1f:72:76:48:48:e7:93:
bb:1f:33:39:f6:00:7c:05:40:ae:57:1e:51:10:b4:e2:27:8f:
0c:d9:b0:af:8a:d0:be:97:20:d3:78:8f:08:e8:8d:02:44:e9:
96:4f:d0:7d:a4:40:ab:4e:09:21:6d:97:0e:97:6f:a5:8c:99:
60:26:cd:6b:cb:20:11:09:d8:a7:a9:15:95:0f:c9:7a:e9:44:
91:a0:a9:b2:31:09:80:7a:25:6b:e4:c2:bd:3b:c8:1d:68:84:
1e:96:0f:dd:6a:12:b3:e4:0a:2e:d5:4d:0f:31:2c:34:c1:80:
68:1c:e5:f5:dd:7d:cf:af:0c:97:a2:09:28:98:2c:d8:d9:10:
79:72:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net