Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa
File: 35a17a79-a4f2-4fde-89fd-653cadace6b7.roa (raw, json)
Hash identifier: G7eUsV5julr/lh+ZXx58wqM/uGBjOs+67MJwHDu6+FQ=
Subject key identifier: 23:21:58:A7:3B:A5:98:19:5B:C6:BF:9F:27:16:1A:AB:F8:7A:87:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 427C31F028CA4B25BE9FAA16910EE2E1647575CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa
Signing time: Thu 03 Apr 2025 23:38:48 +0000
ROA not before: Thu 03 Apr 2025 23:38:48 +0000
ROA not after: Thu 08 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.80.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7c:31:f0:28:ca:4b:25:be:9f:aa:16:91:0e:e2:e1:64:75:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 3 23:38:48 2025 GMT
Not After : May 8 23:59:59 2025 GMT
Subject: serialNumber=be4dfd76a5398d54b614a7e2098669892406a6d3f8d5e9e5a2b9bab26e4caa40, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:ec:f9:ee:87:ea:d8:84:22:25:48:ad:4e:
c2:3b:df:3b:16:b9:a3:98:c3:0a:2c:c6:89:ed:25:
c6:ae:8d:c6:5f:6f:69:27:05:27:68:d6:01:aa:05:
3c:b5:fd:3f:f6:f4:4d:a2:d9:c9:01:19:cf:15:6a:
73:f7:cb:43:1c:62:26:a7:d3:9c:8e:f5:29:d0:47:
4a:a7:cf:cd:47:67:ba:55:99:bc:00:25:a4:ce:5c:
de:51:9d:7a:59:b2:b6:de:4e:fa:5d:35:c4:6d:9f:
30:a6:ad:7b:6e:8e:2d:51:c9:54:ae:a5:7e:f3:82:
97:78:0c:d6:0f:95:98:d6:a6:b5:36:98:c6:0a:57:
b0:a1:a3:9a:96:b1:9d:39:9f:6c:b3:eb:16:de:ab:
86:d2:05:e9:3b:1b:cc:d4:e7:86:d2:17:bd:3b:49:
4c:81:97:97:c0:7e:2a:74:99:12:54:53:84:78:b1:
17:72:0f:6f:c0:a9:32:39:31:89:80:04:72:ff:e9:
a2:b3:b8:58:95:b7:90:20:86:52:7e:2a:be:d4:3e:
3a:0b:ab:c0:a8:37:77:39:69:26:2a:e5:98:8c:ea:
34:4c:7a:f1:b3:f2:a8:19:d4:8c:fc:e2:5e:a1:41:
dd:9f:e6:c9:87:14:23:7e:79:38:b0:ab:7f:ee:1b:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:58:A7:3B:A5:98:19:5B:C6:BF:9F:27:16:1A:AB:F8:7A:87:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.80.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:48:40:d7:28:77:b0:72:2a:50:e0:3d:55:dc:13:e4:d8:e5:
22:a8:cd:bf:77:f9:2f:3f:95:fc:ae:33:eb:ec:59:b6:95:64:
96:52:a2:cf:56:5f:6b:1a:73:45:88:4d:ce:8a:58:0f:72:34:
43:82:a6:ae:27:a1:74:27:6b:bd:04:36:51:6f:03:90:29:53:
b0:8a:9d:fa:23:a3:f9:f7:35:64:a6:e4:a5:b8:72:41:d1:c9:
96:f8:c7:70:2a:45:6c:dc:91:11:ed:c8:88:9f:f5:c4:41:ad:
a1:a6:77:e4:a1:cc:5b:11:ea:2f:a0:5c:76:bb:90:12:d9:0e:
ca:0a:b7:c1:37:27:4b:c8:d4:fa:bb:b5:ff:89:79:9b:96:35:
29:69:1f:5d:d9:e5:13:92:7a:e2:26:9c:12:a2:78:e0:ae:0a:
25:2f:fd:5b:41:d6:64:55:90:5b:9a:14:e8:9d:59:9e:f1:59:
82:64:15:52:52:27:76:3e:8e:eb:4c:a7:1e:9f:33:82:4d:e9:
cc:4e:80:96:02:d8:6f:e6:ab:bf:70:c6:e3:85:8b:36:e6:eb:
3c:75:95:fb:31:3d:d0:ee:bb:9f:10:43:c6:b8:b3:72:27:b4:
d0:a8:7a:eb:8d:d2:ea:3c:ad:64:34:f6:ec:c0:8b:04:4a:3e:
ab:6d:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:02 2025 by rpki-client on console.sobornost.net