Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21292a6c-d4bb-4fe1-b876-ca3132079df4.roa
File: 21292a6c-d4bb-4fe1-b876-ca3132079df4.roa (raw, json)
Hash identifier: 9RCValtVXUo5xXVdo5yq95P/oa/HM1wMVF8DlKLYjXU=
Subject key identifier: FE:46:85:88:B7:53:9A:F9:EA:AC:65:26:3D:82:67:38:BB:2B:FF:0F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7142EE4123D0E67E48E10A895B873B05EEF68567
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21292a6c-d4bb-4fe1-b876-ca3132079df4.roa
Signing time: Mon 31 Mar 2025 16:51:54 +0000
ROA not before: Mon 31 Mar 2025 16:51:54 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 150.222.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:42:ee:41:23:d0:e6:7e:48:e1:0a:89:5b:87:3b:05:ee:f6:85:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 16:51:54 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=72f5f7e8e3657cb5eed462009b4bbfe6feb480c58dbcc020a5e21cacedac5db9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:26:d0:f2:1f:f2:37:28:20:c6:ba:09:c4:
e1:51:90:a5:6e:c4:67:8c:0d:57:99:e9:51:8d:40:
e9:03:78:ef:07:24:4f:1f:ff:f7:02:af:9a:f6:f6:
eb:1e:ee:51:88:b0:44:45:50:f5:86:cb:8c:88:72:
ce:67:33:00:26:ac:e6:6f:28:d7:73:a9:c2:09:6a:
7f:6d:00:3c:d6:13:49:f9:77:1b:49:da:d0:ea:0a:
31:2b:bb:6e:1e:ff:36:a3:b0:4c:00:f5:6e:7d:fe:
d5:26:89:c2:6a:cc:5e:d3:48:73:56:f7:43:c0:cd:
22:da:eb:9b:a0:76:47:8d:a6:a4:66:5f:72:c6:9d:
35:6a:68:d5:07:a7:a7:3e:3b:78:a7:eb:29:8e:16:
a7:75:12:dc:e5:88:19:f3:e2:37:2f:14:48:cf:e2:
ed:ce:09:40:68:87:d0:cc:65:4b:70:2a:cf:22:b1:
1d:33:9d:ed:5f:09:03:13:b3:df:ce:35:7b:71:ff:
23:ea:bf:f7:aa:48:ed:c5:51:49:e5:98:09:0e:60:
84:f6:01:b2:3a:d2:55:45:ad:51:ac:14:14:73:ac:
ce:e6:79:23:ee:47:2a:9d:35:bb:4a:8b:a3:2e:89:
f1:2c:4a:cc:f9:0b:25:41:1b:43:fd:b1:62:85:c6:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:85:88:B7:53:9A:F9:EA:AC:65:26:3D:82:67:38:BB:2B:FF:0F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21292a6c-d4bb-4fe1-b876-ca3132079df4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.100.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bb:d9:fc:70:5c:0c:8e:17:fa:08:bf:f0:69:5a:e2:41:2d:
d3:b1:d9:83:c5:ce:f8:df:bd:49:8d:ec:67:5d:e2:bf:e3:ee:
1c:97:2a:6c:bb:99:91:d3:c5:7f:53:82:0b:9c:1d:bf:a6:6e:
2d:60:3b:3e:f7:17:38:ee:65:d6:45:3c:28:30:98:c8:4c:31:
fe:a3:68:64:e5:6e:2d:28:db:a5:5e:be:93:96:0c:b9:3d:9e:
f3:03:ee:59:5e:39:0f:8a:bf:f0:3b:52:f0:f9:c5:45:ec:28:
78:87:7a:fd:c3:6a:1c:5b:ce:b8:5f:2b:00:60:9a:9c:22:ea:
fb:ed:11:a7:43:e9:61:47:34:7a:1d:49:26:70:e1:0f:24:c9:
78:17:38:2c:f8:fb:6f:70:69:22:2e:92:5a:98:02:e2:3e:12:
44:e5:3d:f0:85:36:40:7e:da:06:b9:51:f8:1b:f5:15:07:6b:
0b:64:4f:d8:b9:0d:86:96:d7:36:d7:3c:70:09:27:c2:0f:44:
51:8d:bd:c1:03:b6:ec:e1:12:81:71:4c:ab:b7:93:dd:4f:9e:
65:9b:c3:1f:84:c5:6f:f3:cf:68:f6:fb:09:e9:4d:8c:d9:69:
d3:38:7a:54:70:1f:87:ba:5d:51:11:82:68:e1:2b:8a:aa:40:
41:60:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:37 2025 by rpki-client on console.sobornost.net