Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
File: 59664a97-7a86-420c-a977-c7e06b2c9750.roa (raw, json)
Hash identifier: SYY0lWpRB0ZvXwCKyRgmnJL0D6bMOQs6aTWfxZWjw/8=
Subject key identifier: 5C:EA:C7:64:41:56:32:C7:94:01:7F:08:24:8A:4C:B0:05:EB:42:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 217F3F5CD0AD001B7F0CBE0FFA6A92CCC79BF164
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
Signing time: Mon 31 Mar 2025 22:23:29 +0000
ROA not before: Mon 31 Mar 2025 22:23:29 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 119.13.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7f:3f:5c:d0:ad:00:1b:7f:0c:be:0f:fa:6a:92:cc:c7:9b:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 22:23:29 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=e659547180ccee8f5f329e4095d220e51169b005da58df330b1b979f60b6a5c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:0d:8f:51:c8:ec:4a:8f:e2:66:f9:96:d7:
5a:20:0e:9a:4f:e7:4d:bb:5f:8a:28:1e:b7:67:b8:
9a:d0:8d:e8:26:2d:bf:5e:79:e6:34:81:46:c7:3f:
ba:cd:85:99:f6:8b:77:a7:53:e7:53:86:11:39:23:
10:b5:f1:13:75:41:4c:00:ca:1a:3e:1c:72:b6:11:
75:c9:38:f5:62:9d:fb:13:1f:24:da:07:2f:fb:bd:
b7:40:fa:db:77:0f:07:0b:04:67:01:55:4f:eb:cd:
0c:af:87:be:87:cf:0a:a5:7f:1b:62:17:33:4d:37:
a1:4b:04:d2:63:3b:77:97:fd:40:c5:75:01:e7:56:
de:ed:ca:04:b7:36:e0:c6:f7:97:f7:d4:f2:a5:e9:
c7:77:43:a8:41:32:33:e4:8f:37:7d:01:01:ae:e6:
34:d0:b4:a7:1e:26:c3:f1:9e:e0:d4:0f:20:cc:25:
21:99:3b:8d:8e:cf:bc:05:b5:61:4d:e4:37:ab:99:
c8:47:b7:0c:61:ae:2f:83:5f:a6:d7:7e:33:48:6d:
9a:43:6d:d3:5c:5e:e3:2b:7c:c4:49:d0:4e:af:87:
e6:9e:50:b0:27:2f:df:c5:8d:9f:1b:45:ea:52:25:
d5:cc:df:8d:24:9a:fc:a4:db:1a:ee:9a:fd:f7:3b:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:C7:64:41:56:32:C7:94:01:7F:08:24:8A:4C:B0:05:EB:42:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.13.180.0/22
Signature Algorithm: sha256WithRSAEncryption
31:de:6e:2f:31:38:85:a5:99:45:db:08:8e:b0:67:ca:35:8b:
c0:d3:a7:ef:8d:7e:3c:c3:6d:e5:7d:d2:8a:1d:13:e3:58:74:
01:7b:b9:ec:ea:28:f9:98:09:2c:b0:8b:c1:76:02:59:04:de:
3b:3a:bb:14:b2:b5:b9:f0:44:d0:1e:3b:dc:da:60:c8:1f:ba:
6c:de:c6:72:ac:0d:01:bc:52:70:bb:84:86:77:9c:02:01:4e:
6e:38:21:df:61:e3:0c:10:85:20:7b:4f:32:2c:af:8d:d6:a6:
82:ca:8d:2c:30:b4:ff:94:9e:15:46:d8:e0:96:15:e0:1f:64:
11:0a:e1:51:b8:62:49:8c:60:b0:1b:8f:d4:f5:c3:2c:42:9b:
ca:5b:9f:3e:de:f8:fa:7a:b5:cf:89:03:40:2a:2e:86:86:a7:
f0:6c:a4:10:9d:83:3e:20:29:87:78:fa:02:36:72:4d:6f:27:
a3:75:00:81:6d:d2:9f:7c:f4:52:c3:37:75:d3:e9:9f:48:e0:
18:bf:ac:00:5d:2f:52:b8:7c:b7:19:b3:d9:57:4b:97:a6:69:
be:28:be:6d:71:db:cf:ff:f8:db:63:42:85:a3:0d:3e:52:e6:
94:5b:c8:78:6a:c5:79:c2:8b:3d:e8:f0:ea:83:aa:08:54:17:
67:c8:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:06 2025 by rpki-client on console.sobornost.net