Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9be9c7d8-2185-4142-b87a-9e7f28efe569.roa
File: 9be9c7d8-2185-4142-b87a-9e7f28efe569.roa (raw, json)
Hash identifier: YIMexmQs6YxJeAbGFH2T4KrD/vOgk5xbVuwye3E4qS8=
Subject key identifier: 94:EC:D6:B0:08:F9:E1:61:D0:00:C3:FA:DD:8C:40:F1:C0:AE:FC:83
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 22B2532B6B5BFB6C9EA56E2D261019D263B81056
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9be9c7d8-2185-4142-b87a-9e7f28efe569.roa
Signing time: Mon 31 Mar 2025 16:41:13 +0000
ROA not before: Mon 31 Mar 2025 16:41:13 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:53:2b:6b:5b:fb:6c:9e:a5:6e:2d:26:10:19:d2:63:b8:10:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 16:41:13 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=56c6c26378647a5247b8332aaff60cf1ca598f3384192f7c7a77b79b071f74ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:89:75:8c:9e:1a:2d:05:c6:bc:d3:60:41:
5c:b9:b8:66:55:16:ec:e4:c4:26:60:ca:e1:ff:03:
b9:ab:62:18:d1:eb:ac:c8:6e:9d:3b:ce:7a:5a:fe:
10:83:3f:f4:95:57:c8:b4:80:1b:37:e2:21:5e:0d:
4c:fc:b1:fa:df:ba:ce:af:7f:dc:03:30:66:98:01:
58:7c:10:f3:04:e2:f6:7a:98:14:71:ba:5e:23:13:
ef:d9:78:e2:72:18:9f:bd:c2:b4:cc:39:d6:96:2f:
88:30:51:56:a9:cf:91:56:45:c0:14:38:52:4c:32:
b4:82:2d:9f:49:5e:01:3a:a3:1d:a1:b4:fa:2d:93:
d1:3d:5f:ab:e2:f2:99:5e:00:f1:8c:e4:eb:e9:cb:
71:83:72:3d:1f:da:9d:52:11:e3:f6:56:75:e0:8d:
60:17:e0:fc:47:d7:e6:e8:b9:ae:62:4d:28:ad:ec:
10:ed:d0:d9:8c:95:c1:16:f8:38:ac:54:ac:5c:ea:
48:5c:23:52:35:0a:52:03:44:48:bd:a9:b0:5a:15:
2d:b3:3b:a3:b9:22:3d:31:15:11:9e:80:21:89:ea:
fa:10:6d:cb:ac:85:b5:f3:0f:6a:f6:cd:ec:9a:ca:
70:db:a9:f0:24:0e:ce:3c:b8:84:48:e3:94:d1:0c:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:D6:B0:08:F9:E1:61:D0:00:C3:FA:DD:8C:40:F1:C0:AE:FC:83
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9be9c7d8-2185-4142-b87a-9e7f28efe569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:66:d7:e5:75:b2:26:f3:5b:6a:2c:b0:8f:c3:f5:98:24:22:
2a:04:38:1e:aa:32:ac:31:b9:4f:e7:06:a4:85:bc:dd:66:e3:
65:a6:8d:11:bc:0b:24:af:68:8a:c9:b3:2d:d9:74:19:e1:33:
ec:c6:92:7a:bc:b2:d2:ed:2a:7a:b6:e7:ca:d2:01:43:3a:72:
31:4a:26:95:ab:95:c7:2e:cf:29:e0:51:cb:24:b1:55:96:bd:
d4:71:dd:42:8c:20:d7:7a:ec:d2:e8:ea:79:71:25:a0:00:f9:
56:d4:a3:36:ad:0c:01:e1:00:b0:03:b7:93:65:91:3b:a5:2f:
24:6c:1d:00:95:da:ca:30:39:6b:aa:bc:26:bd:0c:20:04:85:
9a:3f:39:f3:cf:45:32:49:c3:10:92:67:65:00:4c:5d:37:91:
dc:22:78:ff:36:fa:d3:4c:0c:94:25:5d:47:d3:48:cc:04:f2:
70:9c:4f:f7:3e:77:a7:39:63:c2:1d:97:fa:be:d3:df:b2:c2:
e1:b5:c4:d0:4d:f4:e5:6c:5a:9c:7a:f6:ac:fb:1d:c4:ca:ab:
3b:e0:64:7d:de:cc:a1:17:2e:40:1e:93:80:f0:87:1e:40:50:
b0:59:48:7e:7f:66:bc:1e:ad:61:6b:6b:06:73:68:a0:a5:77:
d5:e9:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:47 2025 by rpki-client on console.sobornost.net