Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa
File: e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa (raw, json)
Hash identifier: heZYjt5S4C3v7IujhUsNPw3uA5ms5pdxFFu9i2ORKLw=
Subject key identifier: 03:E0:FD:C1:1C:F0:E3:A3:0F:F8:A6:8C:4E:A3:28:F1:F6:28:3B:7A
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 6EBD9E62F4A7E11C7F81800B37BA64E5534EA2BE
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa
Signing time: Tue 01 Apr 2025 00:00:02 +0000
ROA not before: Tue 01 Apr 2025 00:00:02 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.221.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bd:9e:62:f4:a7:e1:1c:7f:81:80:0b:37:ba:64:e5:53:4e:a2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 1 00:00:02 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=e3b2f8ec1856c7635d14595c957689a097f5199c0d350657d8c6a7ef9cf6693f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:3e:e6:71:a4:60:e5:fb:18:cd:72:e9:c7:
54:8b:21:66:20:c4:e4:77:c3:14:36:0a:5d:5b:78:
0e:b6:de:12:53:fa:a5:5a:13:cb:0d:fd:78:28:9c:
f8:82:6f:4b:b8:c6:22:25:89:24:b2:70:70:e8:af:
a0:8c:a9:4c:55:1e:5d:12:e0:a0:5e:0e:67:26:d0:
89:ee:d2:e9:3c:17:c1:a9:b5:6c:5c:12:f0:c3:d3:
32:e4:41:af:16:a8:9e:3d:a5:9e:d4:9b:24:ff:77:
c9:e4:41:57:25:10:20:6f:4c:a0:39:7c:01:8b:69:
f7:68:b6:a5:3c:62:43:ee:cd:3d:cc:40:a5:f7:bb:
15:02:01:4e:68:7e:00:3d:37:9c:9a:1e:80:1a:3d:
9f:10:39:99:03:6c:4d:92:2a:f2:6d:84:ac:b1:77:
ab:cd:ad:b4:68:97:0a:c1:70:d8:85:39:28:b5:6c:
69:f6:7e:35:4b:8f:7e:4d:8a:3b:4c:a9:42:8d:93:
79:07:dd:19:c6:cd:3a:7b:54:d7:21:9f:5e:5c:bc:
f8:a2:54:80:82:11:59:10:ca:e8:51:c7:63:1a:58:
5b:6c:35:82:53:d7:25:33:fc:73:72:ee:2d:18:8c:
d7:c6:67:96:8b:29:73:57:4f:4f:49:66:c5:de:2c:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:FD:C1:1C:F0:E3:A3:0F:F8:A6:8C:4E:A3:28:F1:F6:28:3B:7A
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.163.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1a:80:4a:1e:19:2d:a6:31:d9:f6:f7:f7:c1:da:fc:08:60:
cc:4b:fc:7c:9f:45:4c:00:f6:a4:f3:70:51:60:01:94:c7:f3:
b3:5f:02:5f:37:48:68:b2:8a:8f:e6:dc:f9:f1:d4:b0:11:83:
c6:67:6e:0c:4a:72:04:7f:59:11:dd:94:b1:20:b8:f3:f8:60:
f6:10:3a:ad:6b:25:72:f6:ce:c6:15:c9:93:f4:e5:b4:cf:6f:
da:2d:f5:8c:04:59:70:cc:2b:ae:da:c1:1c:50:01:e7:e3:57:
8c:e4:cd:82:7e:97:e3:c6:ad:ce:af:eb:7a:d1:66:a8:ed:dd:
e9:5b:a6:69:cb:5c:94:32:87:eb:44:0a:f2:48:b8:98:2a:6c:
8d:a1:33:68:cc:ca:9c:dd:ff:60:6f:29:4d:d6:41:58:bb:ef:
a3:06:ab:35:d9:72:79:00:b6:d6:c9:d9:e7:e6:2d:14:ff:5e:
32:97:e3:d1:83:b1:cf:98:4b:cf:f6:bd:f7:dd:ca:58:19:6c:
9e:85:a3:ea:80:77:00:e8:22:c0:c7:d6:46:27:28:13:ab:71:
13:c2:ab:ac:72:6a:e6:15:98:f3:16:67:38:f3:3a:b3:a8:90:
67:53:80:c5:d2:09:0f:71:b7:fb:46:9d:90:9d:d7:88:d0:43:
4e:12:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net