Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa
File: 181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa (raw, json)
Hash identifier: ZxdCg/6QF77jcCEDv69wkU4wA6wPKS+299eWrvkqShM=
Subject key identifier: C3:5A:4A:FC:0A:B1:24:9B:39:80:0D:43:22:63:A7:55:F0:A1:C3:10
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 34AE07EB115794F9517229FB63113A7A5EBE7B16
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa
Signing time: Sat 22 Mar 2025 00:20:09 +0000
ROA not before: Sat 22 Mar 2025 00:20:09 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ae:07:eb:11:57:94:f9:51:72:29:fb:63:11:3a:7a:5e:be:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:20:09 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: serialNumber=9d8cc326f2f3c86861638add3b8fbeaf181d914e181ccdcf4b9879a1015d5e26, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:3e:7c:7e:b2:2c:9f:bf:38:c8:08:11:19:
ab:cf:e0:f2:e2:9f:69:ad:2c:42:f1:c8:b9:a4:aa:
3e:e8:10:ff:9a:ff:4e:94:16:6e:17:1b:c3:5b:5c:
15:02:26:53:6f:b8:51:74:f9:bb:5f:2c:10:ca:ca:
fa:c7:d0:40:67:46:15:1e:b1:93:01:5f:b5:13:57:
03:05:d1:da:b5:37:8d:db:eb:06:7e:85:d6:e8:91:
59:70:24:da:bf:6c:40:f9:79:57:db:d2:8b:2f:9d:
47:6c:62:ed:4c:4d:7f:03:2f:3f:8e:15:b7:8f:94:
76:55:41:fb:dc:33:8e:1b:09:80:15:4f:11:e4:ef:
8a:4f:0c:5f:1d:98:23:21:3c:d8:c8:93:b1:d3:80:
4d:0e:5f:61:6a:53:6d:64:b1:9b:7c:40:41:66:14:
63:0d:33:1e:d2:a6:c1:c2:05:d2:04:2d:13:0e:1d:
ec:1c:8c:be:5a:1d:a3:b5:41:74:48:d3:06:cd:db:
6a:32:3f:20:db:2e:61:03:14:15:bc:0e:ed:0a:c2:
80:82:70:7a:35:42:51:ac:12:99:26:99:eb:38:e9:
f0:a0:89:2e:9b:99:cf:b4:6c:2d:f4:fc:43:a5:4f:
1b:d3:e5:ea:76:7b:97:e1:2e:b9:15:be:81:9a:44:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:4A:FC:0A:B1:24:9B:39:80:0D:43:22:63:A7:55:F0:A1:C3:10
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fd:68:d1:cb:10:d5:e5:ae:21:b0:31:4d:83:31:2e:35:01:
d2:f6:cf:78:12:ce:33:ed:47:11:95:82:dd:4d:65:f7:37:94:
b0:e0:79:a4:ab:5c:1b:21:03:42:15:9b:56:e3:f0:c1:e2:a1:
92:35:a1:41:a0:de:89:16:6a:7c:6d:83:49:c1:7b:14:bc:80:
d7:17:52:eb:81:4b:de:2e:35:72:b0:d8:0b:a2:dd:99:92:ec:
ca:43:f2:e3:a3:d4:44:cf:0f:09:f4:8a:f6:8b:b5:8c:b3:71:
5a:9e:6d:fc:38:e5:47:bb:d2:1a:38:5d:a2:1d:dc:d1:93:3b:
0e:9e:84:87:59:fa:d3:03:5f:63:e6:87:de:83:63:1b:03:fd:
e7:a0:cb:1b:03:84:8d:0c:73:b9:2f:0c:c8:79:f4:a2:2b:85:
e4:25:1d:fb:df:57:33:c6:06:83:31:f5:96:7f:32:14:b4:be:
c6:e8:7a:df:87:ce:e1:27:ed:ba:d4:3b:3e:87:93:67:ee:4d:
cc:e4:7b:37:ad:3c:85:b0:24:c8:38:4f:d2:c1:7e:95:bf:36:
dd:15:54:eb:eb:40:c5:fd:d6:d1:1c:e0:67:22:9c:b1:b9:a8:
6c:ba:2b:58:b1:5a:fb:01:62:0c:90:d1:30:22:7e:52:9f:c6:
e8:ff:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:37 2025 by rpki-client on console.sobornost.net