Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af48a471-47ad-45b4-92ba-7dee5d4a4caa.roa
File: af48a471-47ad-45b4-92ba-7dee5d4a4caa.roa (raw, json)
Hash identifier: JtTdak0h2NRQNvP7E6rvAA6OzD36YJkW/K7y91dcHjk=
Subject key identifier: C0:5A:AB:34:E3:A1:E0:15:AA:6D:F5:A0:D8:84:17:4F:3A:AB:47:BF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 060B34A52CC70994BD65E39E0A3CE69353B1A04D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af48a471-47ad-45b4-92ba-7dee5d4a4caa.roa
Signing time: Mon 31 Mar 2025 16:51:42 +0000
ROA not before: Mon 31 Mar 2025 16:51:42 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0b:34:a5:2c:c7:09:94:bd:65:e3:9e:0a:3c:e6:93:53:b1:a0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 16:51:42 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=060fcb8f6e0af2f9095f89ba3f7ddb6dde6c45f9327f8d9c881266ac84645b90, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:db:b2:3e:08:82:94:f4:6a:63:75:93:d0:
ea:bd:8f:74:17:30:de:da:36:24:e5:7c:9f:9a:44:
99:34:6a:8d:70:c9:b2:82:20:0d:74:32:23:38:01:
19:23:5d:70:d0:40:4c:12:57:7f:3e:ea:5d:f5:3c:
81:55:61:77:3c:44:cb:c6:a6:b8:1e:1b:e5:e1:7c:
c9:e6:7c:1e:de:36:e0:c4:f8:09:8b:bc:3f:02:ce:
fa:d2:20:4d:8e:40:cd:21:61:7b:9d:20:67:d1:d7:
7f:5d:fa:82:15:1b:e2:86:ba:29:52:34:5c:60:ce:
80:f6:7e:64:6f:90:df:d2:e0:22:de:a2:2b:30:13:
8f:56:58:6f:85:8c:49:53:4f:24:61:5e:f5:9a:16:
d9:a5:45:92:1a:1a:00:41:92:2f:dc:61:e4:37:da:
89:10:50:b7:bb:59:b2:3e:68:23:ad:ee:7a:29:95:
50:e9:6f:c1:38:15:14:4f:65:18:0b:41:c2:f4:da:
02:29:4a:f8:39:64:9a:be:56:8b:5d:ee:c1:36:10:
ed:12:a2:cd:45:b3:b7:8c:2c:87:0f:33:14:42:cc:
af:47:66:bd:e9:cf:56:47:70:7d:76:ae:08:3b:7c:
b8:66:3f:57:cd:84:4c:9a:f0:30:05:32:28:b9:33:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:AB:34:E3:A1:E0:15:AA:6D:F5:A0:D8:84:17:4F:3A:AB:47:BF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af48a471-47ad-45b4-92ba-7dee5d4a4caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:ac:6f:ee:3d:80:ac:54:06:12:16:11:28:59:44:32:78:17:
01:50:b6:b1:23:26:de:07:cf:c8:d9:3e:7c:b3:48:5b:87:9a:
09:92:5c:ec:7b:74:a4:69:f1:99:d5:21:fd:9c:60:a3:9f:ac:
d1:4b:db:cc:28:ff:4a:e1:5d:00:4c:2f:50:05:a0:9c:ef:41:
43:80:31:72:03:6f:83:79:87:59:32:fb:a7:99:66:08:27:a2:
ff:dd:f3:e5:ee:8b:a9:25:f1:5d:5e:8d:cb:11:09:0a:bb:74:
a2:2a:34:b7:05:90:79:13:3d:c6:9e:07:c2:b9:3c:37:0c:2f:
f3:71:d0:80:9b:0d:0e:9d:78:f7:62:e6:ce:e2:3e:11:44:dd:
24:02:c0:de:81:26:09:b5:8e:a5:77:25:6a:ed:6f:43:c5:dd:
92:b1:af:3b:db:82:68:c6:4b:b2:ec:8c:00:d0:e1:49:f3:a5:
a7:2e:c0:19:a4:88:94:b7:f6:7c:da:64:33:ab:ae:a4:89:d6:
82:2d:3e:d6:c7:4b:35:7e:e8:ac:d4:8b:c9:57:09:20:9e:ba:
6c:db:c6:6d:4b:17:3c:21:cc:46:01:a0:89:38:0a:8f:09:57:
fc:e3:86:8b:c0:f1:ec:c4:8c:d0:b8:53:bf:12:5b:f6:b6:58:
1c:42:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:48 2025 by rpki-client on console.sobornost.net