Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63ede909-56a4-46e5-a5cf-104b4c5be8fb.roa
File: 63ede909-56a4-46e5-a5cf-104b4c5be8fb.roa (raw, json)
Hash identifier: rrTKcL1qTOTaFa+XX/Dz1+xAt8ahDbgYZ1UkJxcca8Y=
Subject key identifier: 36:7D:CB:72:5B:93:3B:23:79:77:AD:74:08:78:3C:FC:03:B4:72:16
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0CD03BAB1462D96A9D8275A43FEF13DDD98C9E46
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63ede909-56a4-46e5-a5cf-104b4c5be8fb.roa
Signing time: Sat 22 Mar 2025 00:31:13 +0000
ROA not before: Sat 22 Mar 2025 00:31:13 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.28.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d0:3b:ab:14:62:d9:6a:9d:82:75:a4:3f:ef:13:dd:d9:8c:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:31:13 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: serialNumber=41d6a5aefd1d5e831a91f170be3ae7c7c0873a3780382a80e918c39ecda3e0f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:d4:e0:20:e7:9c:9d:92:e8:51:65:9a:a0:
b2:4a:04:35:31:ea:a3:4e:fd:1a:d6:09:2a:96:1e:
ae:d3:18:6e:f4:e3:26:41:a0:22:85:ea:6c:ba:2e:
83:40:53:55:55:f5:02:89:36:af:1c:45:b6:0a:7d:
93:46:1d:32:d4:4e:2b:91:9e:78:15:d4:9b:1b:e4:
0b:17:b5:f7:02:0b:df:a2:ee:0f:2d:f3:2e:ef:c7:
2d:bb:11:53:d9:42:a0:b8:ee:89:0b:a6:cf:4c:eb:
8d:27:b5:85:db:73:1d:82:29:36:bd:cd:9d:35:92:
52:0f:ac:20:90:fe:41:f3:04:e2:d3:23:6f:e2:18:
d9:63:8f:66:a2:5b:58:8b:67:d4:54:15:7d:3e:8a:
bb:0a:4c:0e:da:4b:97:54:c1:16:57:09:0a:ff:4d:
f1:d4:5c:1f:1a:06:9b:30:8c:03:16:38:ad:aa:59:
c8:4a:d1:cf:fa:41:04:83:33:5c:98:c6:73:81:e9:
35:1f:22:7a:7b:dc:6b:eb:85:d2:98:2f:18:56:85:
75:eb:ba:78:9c:77:91:0e:6a:24:f8:04:f3:40:4a:
1c:64:58:42:6f:01:99:4a:4f:c8:ae:4e:4e:2f:d1:
34:b0:8b:e2:35:16:50:02:28:33:7c:6b:09:33:2f:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:CB:72:5B:93:3B:23:79:77:AD:74:08:78:3C:FC:03:B4:72:16
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63ede909-56a4-46e5-a5cf-104b4c5be8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.28.229.0/24
Signature Algorithm: sha256WithRSAEncryption
23:84:ea:55:24:b4:c5:f9:be:34:af:91:f4:3c:f7:1d:ff:0b:
95:13:3c:13:da:8d:f5:2b:a0:b0:e5:97:3b:40:52:dc:59:ff:
60:70:61:2a:78:54:26:6c:26:05:0f:b5:6c:d1:a9:2d:93:f9:
4d:b6:92:7c:fb:66:9a:50:73:2a:8c:fe:7b:e7:1f:d3:43:fa:
3e:78:25:fb:6e:47:72:af:b2:70:04:7f:ea:da:2a:1d:5e:94:
6b:ce:87:c3:5a:ba:6a:07:a7:a4:2e:bb:1f:5b:f9:46:be:50:
f2:46:7d:07:50:d8:15:89:89:d3:e3:4e:ec:3c:d9:46:2a:ac:
34:dc:8f:08:3c:4b:af:bd:07:e0:3b:08:62:3b:64:94:96:e3:
7c:e0:b3:47:f5:6b:a4:f1:3f:b7:a0:ba:75:36:4b:bf:e6:90:
51:ed:c1:b3:df:54:d9:6f:62:ac:bb:80:0f:ab:d2:fa:48:34:
a8:23:08:5e:89:3f:1e:29:dc:f1:8a:9e:d1:3b:15:d0:e8:bf:
5c:f1:fb:79:fb:68:c6:8f:cb:96:67:35:8b:bf:2b:1d:69:be:
57:d7:c1:ea:02:66:fb:e3:05:ff:f3:d9:db:a5:cf:42:67:74:
95:88:5a:88:c4:41:30:43:81:63:a2:02:5e:a4:4b:70:af:2b:
62:f9:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:42 2025 by rpki-client on console.sobornost.net