Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d35de53d-016d-4743-a282-d769f70423f4.roa
File: d35de53d-016d-4743-a282-d769f70423f4.roa (raw, json)
Hash identifier: XxHgTUnHLE6bMueE6pK/X2xZItRNwlpAssZj/1uFLuA=
Subject key identifier: 31:60:29:A5:28:33:B8:55:AB:49:F4:4B:E5:C8:15:4D:53:5B:DC:4C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0361D84620A0587132DE73E97147B4DED0883C55
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d35de53d-016d-4743-a282-d769f70423f4.roa
Signing time: Sat 22 Mar 2025 00:30:17 +0000
ROA not before: Sat 22 Mar 2025 00:30:17 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.230.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:61:d8:46:20:a0:58:71:32:de:73:e9:71:47:b4:de:d0:88:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:30:17 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: serialNumber=f70d3ef7cff996e8e2e9b379b55695f71b0789171c15d3b3f3a7c8132cee1b0c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:56:09:28:8c:b9:92:51:e1:fb:65:2d:e9:
6c:01:4a:95:02:63:21:d1:b4:7b:a8:0f:3b:7b:03:
74:11:c3:b2:20:79:07:70:f2:ea:13:5d:1b:46:d6:
4b:a1:3d:e8:5e:37:33:de:83:53:8b:2e:4c:c4:0b:
cd:cd:97:54:e9:95:1e:ea:3f:18:45:a6:b6:f9:33:
ba:2e:0e:ca:b3:e6:0c:07:20:34:4b:d2:dd:9d:79:
9b:69:b7:3a:5d:1c:66:b7:47:5e:88:34:b8:7b:76:
d6:c3:45:94:24:56:92:59:24:87:13:fb:65:ab:c1:
f9:c1:9f:e5:4a:8f:dd:b3:6e:b0:bc:ee:d4:8c:fa:
68:7c:08:c9:42:a3:61:f3:8a:06:e8:ef:67:1a:27:
a2:e3:14:76:51:f7:36:1f:9f:cf:97:1b:7a:e1:e6:
84:27:8a:4a:32:93:55:b9:e3:9a:41:90:90:fa:15:
0a:d6:53:47:33:74:86:dd:af:40:70:83:21:89:ca:
27:3a:f5:41:6c:14:e0:20:6b:fe:2f:44:4c:47:26:
52:9a:fe:9a:d4:6b:e4:34:dd:ff:d8:7d:55:ac:11:
dd:c6:9e:53:7e:2e:14:ec:9b:e4:a3:80:67:59:7b:
65:4c:3e:55:61:18:58:c9:af:ef:a2:42:34:6f:bf:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:29:A5:28:33:B8:55:AB:49:F4:4B:E5:C8:15:4D:53:5B:DC:4C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d35de53d-016d-4743-a282-d769f70423f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.145.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b6:16:59:22:4c:f5:9e:97:17:c0:5c:40:d6:1d:7e:c3:a4:
0e:eb:f6:e9:1f:49:a3:aa:c6:8a:68:cb:18:42:a4:35:cf:b7:
85:ea:c7:8c:7a:ae:00:44:62:7b:d8:3d:93:b1:de:94:18:72:
27:d7:c9:d1:74:95:1e:17:c4:e9:ae:1d:16:82:7e:1c:60:0e:
e7:28:e5:e6:9e:49:ea:47:73:e5:37:62:78:dc:e0:ae:1e:3c:
62:4e:81:28:ff:09:a9:5c:e5:8a:3b:e5:82:71:4c:83:d0:09:
86:b8:64:bd:8e:f4:97:f1:88:38:52:f8:ec:03:dc:be:77:9f:
90:ca:80:18:09:6d:51:73:70:4d:6d:44:74:b0:0e:f0:ca:ad:
c5:7d:41:f0:3c:7f:90:1f:72:52:09:91:67:b3:dd:83:42:b4:
f3:5b:1a:d1:26:0d:b0:b8:45:b6:93:c3:33:0c:1b:2f:31:00:
af:b5:f6:2f:52:ac:1b:f4:71:a8:ba:0d:8b:50:cb:31:55:e8:
f4:cb:0a:0c:f6:a5:b9:a7:04:a0:2b:7d:47:29:a3:0f:ac:47:
ea:9a:ff:f7:da:57:62:16:b5:23:c4:60:b7:e2:54:d7:14:b0:
e1:b0:14:04:ec:cb:26:4f:56:47:4d:be:93:de:b3:32:1f:0b:
0d:f8:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:51 2025 by rpki-client on console.sobornost.net