Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8134c7bf-75e3-437f-804d-b5e9ff14e434.roa
File: 8134c7bf-75e3-437f-804d-b5e9ff14e434.roa (raw, json)
Hash identifier: FZdWaomO0/DEEJUwDSAWvvWWB3ox2QpX0U554L/e8bQ=
Subject key identifier: D3:ED:4C:D4:0F:32:13:FE:E3:CA:3A:5D:DB:AA:68:C8:29:9A:FB:D4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 79B8948D7E055B0CC2BC85C5A53CEA5C3EFF3752
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8134c7bf-75e3-437f-804d-b5e9ff14e434.roa
Signing time: Mon 14 Apr 2025 15:30:56 +0000
ROA not before: Mon 14 Apr 2025 15:30:56 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.181.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b8:94:8d:7e:05:5b:0c:c2:bc:85:c5:a5:3c:ea:5c:3e:ff:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 14 15:30:56 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=63907880e374d58b222765d78a64788c0478f8910b814d01f9ef997e4593492e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:ad:10:c2:0a:5e:79:f4:b3:20:5f:30:a4:
49:c7:c5:f2:02:5e:c0:2e:31:de:09:10:fa:c4:22:
cd:dd:63:6e:41:ec:d2:18:8a:96:d4:73:a6:fb:ff:
28:28:52:e5:77:ca:01:42:f4:29:4c:7d:eb:dc:12:
e9:ac:7e:85:f2:c6:84:c0:79:f1:47:a1:a1:fa:10:
9b:27:e8:3d:14:f2:5d:84:51:70:04:bf:6c:f9:ec:
54:e1:50:38:f9:c6:f3:bf:32:ba:db:78:b9:c3:f8:
35:ef:a3:8f:d3:ef:c6:b9:b9:db:6b:07:fb:10:be:
9a:4a:d0:45:2f:6e:9c:96:65:1c:91:d0:6e:e5:6b:
59:f0:32:5e:67:f6:77:1d:05:18:ae:70:bc:2f:19:
cb:c3:bd:9a:09:e3:ec:0e:ac:43:ae:e1:ce:15:05:
6e:50:3f:9b:32:ae:84:84:9c:eb:86:fd:17:b2:95:
2a:7d:2a:30:ef:2b:c8:21:83:80:49:f8:a9:5a:38:
83:8b:2f:e4:52:e8:55:be:42:f9:e8:bb:ef:41:07:
d1:52:b8:d5:cb:66:53:00:84:ea:dc:f0:63:fd:e1:
88:18:48:38:38:dd:c0:3b:7b:74:17:b0:ad:fc:e4:
00:82:2a:80:b4:7b:09:a7:8b:81:05:a6:87:d0:57:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:4C:D4:0F:32:13:FE:E3:CA:3A:5D:DB:AA:68:C8:29:9A:FB:D4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8134c7bf-75e3-437f-804d-b5e9ff14e434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:8e:27:8a:72:ef:36:0b:c6:7f:f6:88:b4:86:71:28:c2:41:
79:51:2f:8f:a6:a7:28:2b:2a:24:31:22:de:f5:fe:47:46:f2:
f4:3b:6a:d2:cc:53:ca:ec:07:16:21:88:77:03:c3:b9:00:b2:
ba:f3:7a:df:65:8b:8a:fb:b0:1d:15:4a:12:4f:9e:dc:a7:2b:
50:a0:e6:64:70:92:23:1a:fa:00:86:75:25:5a:a4:2a:6d:d1:
2a:20:ce:9f:10:af:18:15:ab:58:15:26:de:3d:dd:6a:80:6a:
0c:3b:0e:60:ea:78:71:fd:ab:29:b1:43:19:4a:08:c6:f7:02:
69:37:4b:f9:fc:bb:4f:67:78:2a:34:84:39:a9:ae:41:eb:ee:
3b:6b:20:ef:6d:88:87:e6:74:4f:46:8a:8b:86:c5:49:67:f6:
9c:50:62:6c:2e:5a:c0:42:ab:5a:06:6c:cc:eb:e8:38:21:7a:
64:f5:f8:73:34:f5:6e:52:40:e2:db:a8:8f:f0:5b:14:66:1c:
13:09:e8:e8:0f:e0:ef:ff:0c:07:5e:1d:42:7c:74:ad:f6:37:
db:a7:e1:59:a1:ed:49:4c:e3:57:7c:7e:fd:85:19:7b:dd:cf:
e7:52:8a:65:95:05:1c:e0:50:72:6b:93:1a:3b:e0:59:65:bc:
60:53:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:45 2025 by rpki-client on console.sobornost.net