Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa
File: 5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa (raw, json)
Hash identifier: ZfPIcnnmbftdBkPVOl3mTtpntWzDXmkbxyuiDYrHewM=
Subject key identifier: 75:27:91:03:E5:BC:C9:FC:E4:36:AB:E6:40:BD:35:F8:EC:79:30:03
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0DA0DA399BEB656CFB7C64EB2FB9EA8E8B8F0FFA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa
Signing time: Tue 15 Apr 2025 00:40:41 +0000
ROA not before: Tue 15 Apr 2025 00:40:41 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a0:da:39:9b:eb:65:6c:fb:7c:64:eb:2f:b9:ea:8e:8b:8f:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 15 00:40:41 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=c75d5287d99f493c63448147c6cfb056dd0b8bbff4fe567a0e60070cb7344364, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:66:3a:00:46:70:8d:8b:d9:a1:be:2b:9c:
db:27:c3:19:b0:22:01:7c:39:37:ad:0b:bd:65:23:
d8:61:7b:4a:7f:bc:eb:1e:1b:30:69:69:c3:67:7a:
42:b1:eb:c7:15:3e:4b:95:11:3d:5e:88:e8:c2:75:
ad:6c:9d:91:88:a2:24:76:a6:79:71:34:99:21:f8:
5f:14:7b:bc:46:13:4b:77:70:96:1e:f4:4d:b3:49:
36:eb:7e:8c:f2:51:bd:6c:39:ce:8f:db:4b:2c:93:
aa:96:6d:13:9c:34:13:d2:2a:86:c5:af:b8:f9:10:
f9:6e:90:83:e9:91:57:9c:03:1f:45:33:10:fa:d2:
8c:c1:53:80:08:01:98:b6:96:47:35:b7:83:43:05:
02:49:9c:fa:2e:fa:4c:ff:45:2e:4e:b2:1b:49:65:
eb:6f:6b:61:22:75:51:59:66:ed:97:af:27:48:ee:
31:00:c5:42:38:74:b0:da:9f:8d:4c:54:32:49:f1:
53:ce:e1:ea:a5:0f:1a:d2:f9:d7:7c:da:b5:f0:78:
e4:84:a2:d6:7a:62:48:49:2c:c0:dd:70:8e:ef:4e:
cf:dc:6d:6e:49:c3:26:04:c6:a3:5e:62:3d:18:6a:
ad:42:a3:a2:9e:33:07:0b:79:af:70:fd:07:a3:dc:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:27:91:03:E5:BC:C9:FC:E4:36:AB:E6:40:BD:35:F8:EC:79:30:03
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.192.0/18
Signature Algorithm: sha256WithRSAEncryption
04:bd:71:eb:b5:06:36:ce:f4:4b:e8:15:ca:17:b2:65:5d:ea:
ca:f4:00:8c:b3:e5:a8:ad:45:bd:be:68:c5:34:5b:9e:04:58:
3c:bd:bf:0b:d9:03:01:ac:c7:4f:3a:15:33:87:df:86:c0:9e:
19:79:4c:27:f1:a6:eb:b6:40:be:44:bd:af:15:fc:70:de:84:
98:78:11:38:25:89:fc:1c:22:d6:7e:78:e2:c5:42:4f:79:97:
d4:40:5d:4d:75:9f:19:a0:95:66:45:8d:8e:03:2a:a7:56:c0:
88:c4:1b:41:86:d8:a4:5e:1e:34:fb:06:97:e2:ff:2e:c3:d3:
be:cc:64:2c:07:7b:46:fc:3c:13:89:fd:da:7b:4c:d3:cc:f9:
34:2c:d3:99:2d:f0:2e:5a:35:0a:c3:11:52:9f:f2:8c:78:b1:
5a:2f:42:b3:45:1d:30:8f:f0:12:9b:0f:a7:38:c2:d7:64:44:
e8:60:5c:56:2b:1c:04:0e:2a:20:4a:f2:65:6b:19:a0:2c:27:
85:43:66:5e:dd:a6:6b:65:ae:50:de:7a:c8:a9:8d:ef:ce:10:
ff:9f:e7:7e:b3:96:89:1f:c8:02:f9:f1:23:94:4a:ea:d8:bc:
4e:99:23:b2:c5:86:33:74:e4:53:1c:ba:ce:a5:a6:89:b5:66:
7e:d4:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net