Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa
File: dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa (raw, json)
Hash identifier: mUdrZd1RxMiwjiLhYCqNi3WcfdkW13I4fmQEFdKzqlw=
Subject key identifier: B4:8C:87:47:A1:2B:70:A3:97:B1:44:95:0A:2B:27:AE:77:9C:12:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 76CD3DB38895992F46FE51C1CC39FF4D316C402B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa
Signing time: Fri 28 Mar 2025 18:00:28 +0000
ROA not before: Fri 28 Mar 2025 18:00:28 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 3.2.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:cd:3d:b3:88:95:99:2f:46:fe:51:c1:cc:39:ff:4d:31:6c:40:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 18:00:28 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=c794fff4a6d6e84fe7d30c02ff18ecd8091770e78a07bcfec80382a828657ca3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:6d:46:39:0c:33:e2:93:17:c7:70:8b:c0:
e1:93:d5:c0:bc:a3:b4:7b:7a:15:b5:87:cf:9b:b1:
b6:3a:67:26:f4:a9:be:15:33:bd:c3:c4:79:22:e1:
28:d1:3f:2b:44:3a:03:af:2e:92:40:43:84:86:9e:
5b:64:ec:2f:26:42:63:5c:79:74:21:79:76:3b:ea:
19:84:f6:03:b1:4c:36:de:49:97:d3:bd:62:c2:68:
7f:cd:b0:07:ec:e1:f5:b2:0b:0b:64:bc:10:db:cc:
cf:03:31:cf:52:91:84:54:d5:c6:4f:a6:d5:ac:d7:
3c:9b:5e:3b:55:d0:5e:c1:ea:c4:1f:20:18:93:bc:
ce:aa:96:14:3f:37:5d:e1:37:3d:e9:1c:68:21:07:
2c:5d:26:ba:72:b8:70:b4:09:16:83:8c:48:a3:a3:
64:8d:03:a9:05:78:ef:f8:41:7b:e5:94:fa:35:e8:
06:7a:54:9c:c4:f7:10:df:d5:d8:8c:a6:17:d5:46:
f5:0f:16:11:2f:e6:a5:02:9f:10:bb:87:e8:18:29:
53:c6:b3:aa:07:af:9c:b2:d0:6a:6a:94:fe:64:44:
dd:fd:c0:5f:81:b2:fa:2a:e5:6b:fc:9a:f9:17:ba:
ea:b2:ac:1e:0b:b4:32:71:94:8f:b9:f5:49:a0:44:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:87:47:A1:2B:70:A3:97:B1:44:95:0A:2B:27:AE:77:9C:12:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.2.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7d:35:cb:81:27:67:bc:8a:5e:d9:b1:ee:06:0f:a1:37:d6:
62:50:b6:7b:3b:fe:03:86:c9:1b:51:d6:5b:0c:06:8d:04:b7:
89:b5:9a:22:0e:9e:aa:e7:7c:d9:2f:70:53:e1:29:b3:d9:21:
76:13:4b:35:b2:2c:c6:7a:99:c1:c5:17:81:e4:5b:b2:6e:79:
0a:5c:03:6b:4a:a5:72:e1:71:4b:ac:da:2c:b1:6a:54:e3:2c:
91:0f:2a:74:ae:20:55:97:c1:fd:5c:07:84:c2:d7:8b:59:44:
fe:31:3c:ad:1f:8d:68:b0:48:4e:da:2c:e7:52:4e:ee:4e:d4:
37:e0:20:99:f2:b3:93:b8:2b:35:0b:7a:96:88:01:ab:31:3b:
af:cd:d6:6a:47:a7:9a:58:d4:f7:9d:7b:cc:07:23:b2:c0:07:
e7:50:91:f0:45:a8:d1:e3:c0:4e:36:03:11:6f:fa:9b:7f:42:
e1:5f:57:5a:3c:aa:8e:2c:ff:16:b5:b5:a2:06:56:bb:41:c1:
26:5e:8b:98:9c:32:61:11:87:2c:9b:e7:f6:98:b2:64:02:3c:
bf:ec:10:a4:82:f9:42:2d:b8:ec:a6:7a:ec:07:cf:b4:a7:ac:
3d:55:48:27:e1:dd:bb:91:e8:29:5b:e5:b0:82:b7:20:47:c8:
47:bc:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:52 2025 by rpki-client on console.sobornost.net