Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa
File: 7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa (raw, json)
Hash identifier: GJ+8C3RkjBnWyxPZJEc6pXHFknpzfQi1inbMim4U0wg=
Subject key identifier: 29:88:86:E6:E9:96:C5:AC:46:5F:E4:4C:07:19:09:FC:D6:B4:A1:20
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 64D0375C4B53EB046B50E75DA12930B76885214E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa
Signing time: Tue 01 Apr 2025 00:11:48 +0000
ROA not before: Tue 01 Apr 2025 00:11:48 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d0:37:5c:4b:53:eb:04:6b:50:e7:5d:a1:29:30:b7:68:85:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:11:48 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=930b11b87f48c7b14616f8ae64329b020d3c14399bcac754b3b800d298ef41dd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:e1:ad:d5:4e:9a:3d:e6:50:59:e0:7e:6e:
c5:37:5f:ae:c8:d9:c3:e0:da:20:e4:4f:74:3e:fc:
ce:dc:13:e3:83:b2:f7:e3:3d:7e:72:2f:a7:bb:c9:
e0:03:f9:f5:06:81:e6:f8:9c:60:3f:df:76:3b:f0:
28:79:45:86:6a:08:07:03:77:87:93:a6:7b:86:b9:
f8:64:f0:6b:9a:cd:39:ee:6b:f1:5c:65:20:2c:da:
9f:d8:3c:67:64:ae:23:25:82:fb:68:ab:6b:0c:4b:
4c:25:b0:51:d9:e4:5d:99:81:53:c5:b6:b3:c2:fc:
7c:cc:56:5f:9a:25:6b:e7:d5:49:05:35:e7:9c:5c:
3c:46:0b:a0:38:84:65:9c:55:17:bd:27:a0:a1:a5:
8a:33:d8:ca:63:15:c7:3e:31:03:a7:50:5c:27:ba:
37:81:42:84:0d:fc:27:db:3d:58:fc:e5:60:ae:d9:
b5:87:cf:e9:7b:87:85:e5:5b:30:83:77:d8:ed:f8:
82:e5:0a:e0:e0:39:0a:84:fe:8e:04:14:a6:81:b9:
ae:e2:7d:44:47:ce:5b:62:18:6c:2a:db:e6:c4:1e:
2e:ec:5a:ee:a5:44:0f:bf:c3:c6:8f:4c:74:00:f3:
a3:fb:10:e5:6d:d2:3e:5a:93:0b:7a:8d:05:09:25:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:86:E6:E9:96:C5:AC:46:5F:E4:4C:07:19:09:FC:D6:B4:A1:20
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:5d:0d:4f:da:41:36:3c:10:dd:e5:aa:ad:ac:90:ad:b4:46:
1e:9c:20:50:ce:16:2f:85:86:8b:16:10:64:b5:10:f3:04:a9:
85:99:1f:b9:14:df:3d:cc:40:45:a3:fe:13:b7:8b:db:64:4b:
d0:89:5e:09:f4:0d:cd:79:65:f1:1a:c6:9c:8d:85:d3:90:54:
8c:b6:97:00:b5:ca:e0:25:9a:a0:2d:e5:67:dc:5b:a7:8b:41:
86:f5:26:f7:65:31:47:1e:9e:d4:b8:56:84:cf:15:c6:b8:d3:
63:90:73:8d:e3:ec:a3:1b:9b:43:d5:03:fd:82:50:91:25:b8:
76:b7:2e:79:c7:dd:fb:25:2c:00:bf:4d:cb:74:0b:02:35:a9:
ec:7e:38:82:ea:6a:6f:f4:03:fc:4e:b2:f1:de:04:01:4f:e0:
9a:10:0b:a8:43:17:f3:b6:9d:2c:89:a0:1f:87:f7:22:d3:e3:
d2:f4:4e:22:af:c5:d7:ef:b1:2e:c2:e5:76:a4:51:7a:da:99:
1d:62:d5:02:86:01:6e:31:9d:34:d5:3e:67:7b:81:ae:61:e8:
33:2e:3b:13:6a:fa:cd:7c:25:45:19:01:e9:54:7e:ea:ad:0f:
e6:27:86:df:bf:f1:e5:b3:ed:36:23:3f:cd:fe:0b:be:16:69:
29:ce:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:44 2025 by rpki-client on console.sobornost.net