Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c305e2f6-7bb1-4ea5-a37e-1075ae38072f.roa
File: c305e2f6-7bb1-4ea5-a37e-1075ae38072f.roa (raw, json)
Hash identifier: VfXdfM5FkAQlVRg3q5CYeIeWK+9sWMThTgRzTDAQGW8=
Subject key identifier: 1A:80:29:E6:69:A9:A5:6D:D6:AD:10:DF:C9:DB:1F:1C:1F:C0:6F:52
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 65BD18B0B8B058240AA1A8C33F5FACEDA85BB190
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c305e2f6-7bb1-4ea5-a37e-1075ae38072f.roa
Signing time: Fri 28 Mar 2025 18:00:57 +0000
ROA not before: Fri 28 Mar 2025 18:00:57 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 3.2.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:bd:18:b0:b8:b0:58:24:0a:a1:a8:c3:3f:5f:ac:ed:a8:5b:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 18:00:57 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=c48afe3584e63be773026e323c13e754dc4cbfb21ca718795060a5446b817445, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:bc:6b:fa:3f:a9:2b:4f:89:6d:af:7f:20:
5f:07:5a:4e:5d:48:3f:1d:8c:a9:74:5b:96:b6:85:
21:e3:ed:3a:7b:5b:a0:9e:c8:96:1d:00:74:01:66:
1b:c6:6f:1e:2d:e1:1e:e1:8e:d1:64:3e:2b:52:c9:
12:24:3a:f3:05:cb:0a:b0:43:cd:ac:15:38:43:1e:
c1:f9:90:e8:c6:20:54:9a:24:82:c5:7e:59:09:52:
bf:85:13:b3:65:e5:c0:80:2b:dc:97:69:fa:b0:e5:
43:af:26:33:cc:07:ce:36:78:68:c8:cf:65:23:8c:
da:8d:1d:98:19:3d:43:eb:0b:90:87:ff:0c:c4:1b:
96:8d:d2:33:a9:73:57:ba:db:52:87:a3:e5:9c:64:
f3:0a:27:f5:0a:9d:75:67:38:e1:64:24:a6:54:46:
a9:31:c9:f3:c3:55:7a:da:01:03:87:2e:4a:b3:b1:
71:cf:0c:92:29:68:9b:8b:6a:9f:7e:54:11:71:06:
1a:d3:8b:49:9f:34:3d:79:8f:86:36:02:83:92:60:
a2:72:1e:91:ee:c0:d1:fd:d0:f9:92:5d:49:3a:5e:
db:1b:cc:4d:48:68:ee:38:b3:b9:4b:94:b7:11:29:
ab:20:17:b2:a3:8b:7e:d9:03:ce:ca:16:0f:80:a3:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:29:E6:69:A9:A5:6D:D6:AD:10:DF:C9:DB:1F:1C:1F:C0:6F:52
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c305e2f6-7bb1-4ea5-a37e-1075ae38072f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:33:b8:8f:c6:8d:82:3d:79:a7:8c:63:0a:2d:be:1e:75:db:
5b:2e:8e:10:d8:19:41:15:b1:06:55:73:a0:71:7f:4c:57:d7:
c1:a8:5b:bb:82:e4:1b:40:8c:cc:15:b8:41:56:6a:87:93:f2:
3e:24:69:cc:a6:bd:8e:c2:0e:55:e0:a9:58:12:3e:ef:7a:c5:
8e:fc:03:34:d4:40:31:5f:00:7d:20:1d:03:9a:2c:0e:84:4f:
8b:53:38:01:6f:eb:61:99:a1:8e:dd:b0:99:c3:e0:bc:14:31:
06:02:62:ce:90:fb:a3:49:bd:8a:0c:dd:ff:29:d2:ec:f1:2f:
e6:e7:e6:02:87:8b:1c:84:fb:31:21:fa:aa:7c:cb:6c:ff:15:
22:cb:d5:e0:50:df:9e:0d:24:5b:4f:33:8f:71:20:05:b8:28:
2d:73:63:7e:a9:2c:88:b1:5e:8e:ff:f7:31:b5:e6:e9:7c:bf:
9b:e8:e4:c4:44:09:1d:50:86:62:20:2f:50:e8:e6:d4:4f:6c:
6e:25:47:dd:e5:a6:a6:57:d9:a8:c7:da:2d:37:5d:e4:ab:db:
62:06:fd:bd:29:f8:69:11:92:97:10:37:6a:42:44:7f:14:9c:
38:da:c0:ab:c0:a1:6c:c9:f6:4a:06:05:cd:d0:8f:97:31:aa:
b7:44:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:50 2025 by rpki-client on console.sobornost.net