Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
File: 33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa (raw, json)
Hash identifier: Qpb4VpQgL+bi9eF4Rlzf0y0YnzFB0jw0sEEX1YXXzZY=
Subject key identifier: C7:95:9D:D7:91:5A:AD:F6:77:EA:71:71:D3:52:8F:40:29:95:E3:98
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 035CA3F5C332E016DA918A11B03360BD0AAD61EF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
Signing time: Tue 01 Apr 2025 00:41:28 +0000
ROA not before: Tue 01 Apr 2025 00:41:28 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.94.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5c:a3:f5:c3:32:e0:16:da:91:8a:11:b0:33:60:bd:0a:ad:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:41:28 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=a26167ea060d548c5d6958a30ef5b1574a72dcc96ac299dfe8d962583189768b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:5b:8c:b2:e9:07:bc:9a:4b:3c:3b:bd:bc:
76:7b:b3:0e:a4:33:04:b4:36:44:72:7d:64:f0:d3:
f5:fc:d5:ca:33:08:c0:73:be:f4:ea:e3:c1:e3:61:
51:69:aa:fb:28:48:f4:8f:2c:7f:a2:3e:bf:d6:b5:
10:fc:84:7e:7d:c6:fa:13:8c:53:e5:56:5a:85:d2:
f0:cb:ad:9f:39:7e:08:6c:7d:b3:15:46:60:c6:bd:
e9:1e:b1:3b:23:15:d4:97:e7:e4:40:dc:53:87:e3:
3a:c7:a2:ca:9c:72:90:79:70:ff:49:4e:7e:e6:d9:
c6:e7:54:84:42:44:d9:22:c7:47:58:a8:b6:95:ee:
b9:3b:8f:22:d4:0c:fd:b7:47:06:be:13:62:14:06:
65:c4:10:a9:e1:1f:7f:38:95:31:3d:42:5f:5b:0e:
b7:22:a3:66:33:ed:a2:ab:2c:ce:34:85:6f:65:f3:
20:29:4e:fb:63:46:38:e4:b1:19:f9:24:58:9e:5d:
83:be:b3:cc:bc:02:72:86:c0:63:f1:af:37:c2:f3:
4e:ab:72:81:52:d7:6b:13:18:70:ee:b8:da:bf:26:
4e:c7:60:c2:1b:5e:0d:1f:22:a1:8a:2e:01:34:4c:
21:03:d3:5f:92:c4:15:cd:b1:eb:c2:81:9c:b3:f9:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:9D:D7:91:5A:AD:F6:77:EA:71:71:D3:52:8F:40:29:95:E3:98
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:35:a3:20:ac:f1:d8:82:c7:0e:ce:ba:6c:99:0c:93:ac:0c:
48:f3:f6:f6:24:ba:f3:3f:f4:81:5d:1d:bc:48:da:51:75:54:
d6:c1:a6:d0:35:19:28:62:5b:24:c5:63:10:aa:9a:ac:75:da:
79:65:d3:71:97:dc:55:ae:d4:39:e4:28:3d:0f:b1:8b:9a:c4:
cb:58:a8:22:2b:50:c3:7e:4c:28:c9:86:5c:78:5a:6a:1a:47:
07:7b:83:1b:42:7d:76:c1:e8:aa:6b:f1:8c:1a:6d:45:75:7e:
ba:da:8d:3d:11:3d:e3:27:8d:93:f3:c9:92:58:b6:42:3c:28:
0c:18:de:56:ae:c7:8e:10:eb:bc:77:28:ba:8a:8d:d6:2d:de:
06:7d:74:e2:7b:da:e3:72:29:9d:cc:73:00:fe:42:2c:8d:c6:
06:ac:03:72:bb:31:69:a5:85:94:89:28:c8:bb:7b:90:d2:74:
43:f0:a6:a7:93:00:8a:6f:d3:97:15:7e:d6:65:d8:db:01:07:
3d:d0:b7:e0:30:a1:a3:9a:08:7c:dd:b2:3a:74:2f:10:d3:78:
8e:bc:13:37:09:f9:b6:7d:85:9c:09:92:46:2a:ce:50:2c:b1:
2e:a2:df:f0:a8:93:67:b3:61:35:4a:d6:b0:13:17:53:da:f9:
d4:3a:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:39 2025 by rpki-client on console.sobornost.net