Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae1ba2b-193c-40d3-9ad5-7e6126ae6f18.roa
File: 3ae1ba2b-193c-40d3-9ad5-7e6126ae6f18.roa (raw, json)
Hash identifier: hwqqHLpTY3EBsa5PM3nsjpiLOYdon1W+wO5uVUcP3mk=
Subject key identifier: 4E:25:0C:27:7B:9C:4B:35:48:88:6F:ED:2E:6D:5A:A4:BE:DA:7F:3B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5855041EA2B2E49798B2C7F8A64A663DF549248B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae1ba2b-193c-40d3-9ad5-7e6126ae6f18.roa
Signing time: Mon 31 Mar 2025 17:21:08 +0000
ROA not before: Mon 31 Mar 2025 17:21:08 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.248.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:55:04:1e:a2:b2:e4:97:98:b2:c7:f8:a6:4a:66:3d:f5:49:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:21:08 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=baefe48489899ae4eee4f9d32a156adf45b365bb5ef97e544b900eb9228a7597, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:ba:47:2f:a0:32:e2:00:19:e1:a6:7c:7c:
d2:56:81:2a:8f:38:70:7d:f9:55:2a:0e:a1:f8:23:
c8:b5:be:39:35:bd:81:33:0a:df:3f:23:20:ea:b4:
51:92:12:8b:0a:7f:b3:ee:40:1c:a0:1d:0b:1e:77:
20:f8:8f:18:a1:d1:7e:66:e7:14:3d:0f:0c:a0:f9:
38:89:c4:17:d6:df:c0:36:fb:ca:04:0f:b7:3b:8a:
a5:3d:3a:ba:7b:f3:c6:bb:c7:31:4b:04:de:cd:57:
02:ce:99:7a:d7:37:53:3a:49:8f:21:7f:69:6b:5b:
76:2e:54:cd:42:b5:42:4d:de:33:91:c1:74:a0:8f:
c2:7a:16:f4:39:d0:fa:d7:e3:bc:c3:2c:b6:64:d8:
ad:ec:bc:13:2d:5a:b3:63:f4:b4:45:92:e3:38:b7:
7f:28:7a:a1:b7:4c:9f:1d:b2:78:88:33:ea:fb:93:
ec:29:78:c8:76:80:a3:39:d7:b6:9d:eb:68:85:1e:
39:0d:79:0e:93:a0:32:03:a9:ec:02:92:89:b0:9f:
69:33:f7:03:40:26:03:43:31:4a:00:7d:11:71:02:
6e:21:9a:fe:e2:15:f6:2c:ed:e5:5c:8e:a3:90:24:
aa:b4:5a:b1:25:71:ce:b1:79:b7:23:b5:2a:2e:d0:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:0C:27:7B:9C:4B:35:48:88:6F:ED:2E:6D:5A:A4:BE:DA:7F:3B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae1ba2b-193c-40d3-9ad5-7e6126ae6f18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.248.115.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6a:15:fd:ea:f4:b8:2c:d1:d7:8f:59:a5:4d:fd:06:96:7d:
b9:11:7a:f1:0c:b2:07:b2:f8:61:5e:e6:04:a0:1d:90:72:1e:
62:13:73:c8:ed:d4:48:a3:32:34:5b:f5:c9:98:e1:a3:e8:bd:
94:8c:e5:1c:9d:34:36:c5:2e:ac:8a:de:8c:cc:ac:08:5e:e7:
e7:2b:83:ed:75:14:96:ea:fc:10:3e:8c:8c:ff:be:7e:c0:ac:
ab:cd:96:bb:d4:bf:c1:c4:f8:6c:82:e4:91:01:49:39:01:a8:
99:87:55:74:3e:0b:d4:e5:0a:64:fc:be:c7:86:2a:72:ed:bb:
08:4b:77:1f:d4:7e:83:63:ef:22:c2:5a:b1:b3:81:d6:67:32:
7d:5a:a6:fd:84:4c:29:32:89:11:bb:83:08:33:d3:78:d2:80:
79:0e:cd:1f:04:09:5a:d1:1e:11:f8:b1:03:ab:95:40:0a:8f:
40:8f:ee:5d:43:17:6e:4b:39:e2:2b:5f:89:9c:3d:59:7d:9c:
01:af:23:c7:0d:d8:39:57:ab:aa:2e:c8:f0:85:65:ff:b5:3d:
57:6a:c1:6c:ed:91:5d:53:7f:94:ab:8c:e1:73:97:f9:77:e3:
03:e1:29:6f:31:a4:59:13:e2:c0:d7:f0:f4:5c:8b:ff:6e:ff:
88:62:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:39 2025 by rpki-client on console.sobornost.net