Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
File: 946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa (raw, json)
Hash identifier: CmpHNzCZQOomgIulrez+Onbs87ApSbbv1M6CcDHWCLQ=
Subject key identifier: 3B:7C:0B:C9:F6:51:90:9B:26:D5:B4:AD:EF:C8:12:A3:25:CB:CC:0B
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 7B5A0C7A9C40CA248290B400D3CB8BDC5954CAF3
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
Signing time: Fri 11 Apr 2025 00:00:53 +0000
ROA not before: Fri 11 Apr 2025 00:00:53 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5a:0c:7a:9c:40:ca:24:82:90:b4:00:d3:cb:8b:dc:59:54:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:53 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=2aa29ef53eb104c69f61ac680266578db2197ac448242e6a5d89f8fd63ef1e3b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:2c:fe:ba:02:c0:a6:46:95:8f:ba:84:8d:
e7:23:59:01:7e:d9:c5:e2:57:f6:8b:ac:ef:96:c7:
2a:08:b2:59:84:04:45:66:7f:67:a1:18:2e:36:69:
8d:4d:37:cb:d2:c3:8e:e5:cd:f9:62:ff:b0:f2:e8:
56:b5:36:29:e2:bb:09:ab:da:71:a3:af:15:e4:34:
2f:d7:df:0e:a8:bc:76:d2:62:51:e4:47:9c:26:68:
3f:67:e5:79:d3:d5:e2:ae:86:72:7d:4a:2f:2d:2a:
b1:95:a5:01:ed:b5:cd:0d:ee:50:fd:f2:eb:a6:24:
95:cb:95:74:36:37:c5:2b:12:0b:a3:4e:2a:87:7c:
21:52:dd:ee:7b:9c:5f:ef:f7:ca:27:83:cc:8c:50:
f6:47:5d:3a:d8:19:a2:7d:3a:67:0b:3d:22:af:fc:
a1:4a:2a:3a:89:4b:56:d4:1b:5d:ac:10:7f:dc:91:
71:94:e3:a0:18:dd:f5:92:62:bb:1b:f7:4b:4e:d3:
46:06:17:6c:b7:42:6b:d0:05:a5:9a:30:68:43:6f:
02:ca:b6:a4:bc:39:1d:59:e0:7a:08:e0:ed:04:d1:
4f:d8:33:d4:8f:4b:4b:e8:c9:f2:b4:19:25:fc:5f:
9d:23:30:2e:29:e2:3b:8d:86:63:f6:f7:a0:b3:4e:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7C:0B:C9:F6:51:90:9B:26:D5:B4:AD:EF:C8:12:A3:25:CB:CC:0B
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.225.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bd:d6:2d:01:ae:90:63:bb:6e:57:14:97:19:8b:63:ff:d7:
6b:9d:8e:68:d1:ff:7f:f6:c8:b4:a9:d5:c5:ed:83:6a:4b:78:
cc:01:90:d5:85:63:44:04:dd:83:21:83:b0:7f:c0:6d:1d:43:
60:56:88:4c:51:d9:d5:a0:21:32:a2:78:c7:75:5c:cf:da:3e:
20:fe:42:28:89:8b:d4:07:5f:30:83:f3:22:45:a0:d6:86:9a:
78:11:99:3a:c2:24:88:94:f5:0b:26:ac:ed:2e:1a:4a:7a:db:
53:9b:5a:8b:17:c3:42:f1:39:94:6b:6c:3c:5b:e4:56:3d:d0:
62:24:3d:c0:ef:7d:60:93:be:28:a7:23:19:a7:35:57:51:c5:
02:32:4e:a9:40:a3:a3:3e:12:4d:33:94:6e:d5:67:2d:3c:9a:
0d:ec:32:b8:fa:f7:f8:c2:46:59:4e:3b:45:8e:4d:f1:cb:70:
b7:c6:8c:a8:45:ad:28:64:f3:5e:76:56:e0:d4:bb:11:4c:f3:
03:54:7d:61:83:6f:60:0e:a4:c6:1a:46:c6:c4:b7:82:27:ca:
71:bb:66:b4:68:d5:da:8e:86:4a:f1:25:bf:21:96:39:70:b8:
ed:cc:07:65:50:95:0c:fc:8e:5d:59:3c:7c:b7:3f:34:9e:03:
ed:36:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net