Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/647019d0-aed8-481b-971d-49bbf00e94fc.roa
File: 647019d0-aed8-481b-971d-49bbf00e94fc.roa (raw, json)
Hash identifier: P1AO9efI76Bd3hLaMmBAqY/WnEWv8A7aVb9sSay7LYk=
Subject key identifier: 3C:42:9A:2C:FC:16:77:33:FA:A1:3F:5B:29:10:EB:93:16:97:3E:09
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C4963F809BD0799CD328A3DFF2179C9F3C69FD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/647019d0-aed8-481b-971d-49bbf00e94fc.roa
Signing time: Sat 12 Apr 2025 00:11:04 +0000
ROA not before: Sat 12 Apr 2025 00:11:04 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 31.220.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:49:63:f8:09:bd:07:99:cd:32:8a:3d:ff:21:79:c9:f3:c6:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 12 00:11:04 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=9bce387b942e1ba8330cbc4eaccde139ab6f20c25ce4b426d3150fb2b96bdf93, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:d3:60:26:9f:e6:9c:5a:0c:11:ad:7c:81:
41:ae:d2:c9:aa:f0:0e:1e:48:2b:41:9a:35:5c:ea:
44:0c:26:eb:37:fb:97:1e:0b:0e:d9:47:d6:56:21:
22:f6:9f:7e:0f:04:10:a1:73:b4:fc:a3:96:1b:38:
ff:fd:64:36:f8:69:26:a6:56:fd:f1:e3:41:de:6d:
2a:bb:7f:fc:e5:12:d7:29:7a:40:56:4b:d8:92:c2:
e0:d0:04:ea:63:74:d1:ce:40:ad:2d:32:1b:e3:dd:
5a:84:98:cd:77:f6:5b:d8:83:ff:43:41:4d:76:2c:
d1:80:8f:e0:fd:2f:00:7b:8a:01:38:7d:9b:8d:71:
35:5e:d4:ea:4a:2f:a4:d4:12:25:a1:08:00:80:fd:
5b:e9:2f:9a:6c:f9:23:60:4c:75:9e:a9:92:bd:cf:
cc:1f:05:fd:03:61:72:3c:c6:d8:ec:9f:b3:b4:5d:
db:35:0a:f0:a6:41:c7:dd:55:dc:9e:ff:c9:9d:d8:
fa:a4:79:b7:f7:19:a0:e6:5f:cc:78:17:d0:44:2f:
38:d9:90:e8:89:96:5b:b8:3b:08:12:bf:a8:0c:1e:
87:e5:23:d9:3e:2f:bf:04:2d:fa:a0:f4:cb:37:53:
95:47:2e:f6:00:03:4b:fc:1b:94:5e:57:d6:91:d6:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:9A:2C:FC:16:77:33:FA:A1:3F:5B:29:10:EB:93:16:97:3E:09
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/647019d0-aed8-481b-971d-49bbf00e94fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.253.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d0:fc:5f:1a:cc:e5:4e:20:9f:04:9e:d1:d0:d3:c8:6c:6c:
41:89:73:05:d8:a4:e4:d2:45:b4:ff:67:91:59:54:f0:c0:47:
a1:4d:7e:1d:a0:9f:27:9a:15:9f:94:6f:fa:2c:c9:10:64:f6:
04:32:50:53:bd:fa:19:d2:30:38:56:d5:51:39:29:aa:3e:21:
4b:93:6f:80:a6:49:4e:0c:6b:ab:9b:4b:5b:99:e7:7a:5b:e6:
67:2e:3c:87:7c:5b:86:7d:b1:40:87:72:67:5b:7f:31:cf:09:
fd:99:c2:d9:69:9c:ec:62:9d:b6:40:65:fe:18:f0:6f:ee:d8:
4c:e0:b4:19:4c:a3:8d:46:7a:ab:f4:c7:8f:48:8f:d6:e9:a2:
5f:ae:42:9e:2f:3c:59:43:11:7f:98:8d:f5:43:cb:eb:e2:ca:
2c:13:0c:45:45:05:35:8e:72:32:71:34:46:e0:cc:7d:e5:e8:
c0:1b:a0:aa:97:b8:8b:08:1f:e9:2c:b9:8d:6b:eb:c6:88:e8:
57:4b:f5:53:76:5c:29:26:8f:9d:86:f2:a7:4e:ca:8b:04:42:
3e:64:99:58:f3:7a:1d:0d:c0:1a:ee:82:d7:d1:fd:75:a9:12:
74:32:93:03:ef:e6:83:5a:b2:ce:d5:f9:1b:db:d8:32:98:18:
87:de:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:08 2025 by rpki-client on console.sobornost.net