Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b0eebde-d878-4e52-8785-a0916c7ab306.roa
File: 7b0eebde-d878-4e52-8785-a0916c7ab306.roa (raw, json)
Hash identifier: kGkLF++s4rcvn6eRnSYQ3d6zx7G2oMFm9E3D78Ik4sU=
Subject key identifier: 3D:C4:2E:09:4D:19:52:BF:12:9C:A1:38:DF:B9:66:C3:E9:68:C5:1C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0F8F0EA1A7515D3E25DFCCB5AF2B06614AE98052
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b0eebde-d878-4e52-8785-a0916c7ab306.roa
Signing time: Fri 28 Mar 2025 17:41:34 +0000
ROA not before: Fri 28 Mar 2025 17:41:34 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.181.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8f:0e:a1:a7:51:5d:3e:25:df:cc:b5:af:2b:06:61:4a:e9:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 17:41:34 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=d81f53658af8269a876618dd78c72c25485ed8fdb676053c34864b9ea1f50759, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:cf:61:52:e9:dd:27:e3:bf:8c:25:09:d8:
31:71:07:c8:57:46:49:72:8e:c8:1f:27:59:5f:f9:
cd:15:08:d9:d0:93:3e:e6:81:ab:04:93:07:0a:91:
93:35:c4:7f:5e:1a:a1:e2:e4:5f:2c:db:f8:be:0c:
9a:6f:cc:5b:fb:e8:58:a9:7c:08:78:5d:8f:83:16:
4b:15:f1:ac:3f:9d:58:2a:eb:f7:d0:e5:26:f7:2f:
d5:9d:29:a0:fc:2f:30:6b:a3:06:9e:c3:55:86:ef:
25:18:8a:4e:fa:7b:0c:02:8b:c2:de:ae:03:15:ea:
d6:ef:6c:75:8f:39:d6:86:99:3e:21:93:a3:51:e9:
61:2e:b2:b8:27:14:5c:e3:e8:fd:4f:23:95:26:5f:
e3:13:c1:29:6f:05:c3:0c:c1:3f:f1:34:ae:b4:9e:
d4:32:2d:87:f9:a1:61:43:66:64:e4:3f:a0:a4:fa:
04:2e:de:c0:2f:ab:34:5d:63:dd:66:02:9b:a2:d3:
dd:96:fd:26:f9:74:6d:2d:05:02:37:34:91:81:a4:
d6:e7:94:7c:fe:e5:ee:6f:36:e0:73:75:33:60:80:
19:c6:6f:78:93:e1:03:79:c3:bf:81:86:15:be:37:
9f:f2:da:d4:32:8c:9a:57:c5:05:48:15:f1:29:72:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:2E:09:4D:19:52:BF:12:9C:A1:38:DF:B9:66:C3:E9:68:C5:1C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b0eebde-d878-4e52-8785-a0916c7ab306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.244.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9f:39:e1:66:f0:b6:99:44:13:7e:e4:87:fa:fd:bc:c9:44:
a4:6e:81:73:a8:4b:cc:a1:02:ad:1d:cc:57:7a:dd:06:8f:49:
4c:b7:fc:94:fe:4e:8b:f0:66:c7:24:1e:91:73:ea:ec:e7:9b:
cf:fa:b8:56:81:e0:f0:6e:89:43:92:c2:a2:10:22:bc:1d:56:
17:74:0f:b3:01:e8:6a:69:82:f5:a5:2f:79:46:fb:41:38:7e:
8a:71:ae:a6:ab:2b:93:37:3e:99:19:8b:c1:d3:7d:9f:cd:5d:
6e:ae:cb:27:43:d7:50:14:02:ad:89:7f:ce:16:8d:d1:75:74:
a2:a1:17:1a:b0:e3:92:9e:c3:00:34:38:3e:f8:aa:1c:f4:cd:
22:10:88:8b:71:dd:d9:15:b4:d4:ae:b0:d9:ce:2c:18:a9:33:
fd:a3:08:08:95:49:d5:2b:e5:d3:74:7f:71:24:d4:a9:ed:37:
eb:cf:80:3d:5e:40:a6:10:27:e7:17:ea:c3:6b:a4:4c:96:8c:
2d:02:95:ab:3e:3a:a1:01:68:d8:b0:76:75:a6:48:cf:72:89:
20:51:c9:0f:26:31:89:f9:80:9c:eb:cc:9e:f7:11:dd:f0:4a:
70:c3:83:0c:a2:01:2e:bc:17:1a:dc:3a:3f:a6:bc:14:d1:93:
de:93:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:44 2025 by rpki-client on console.sobornost.net