Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bf41140-a41b-4dbb-ba06-478aff47ce48.roa
File: 7bf41140-a41b-4dbb-ba06-478aff47ce48.roa (raw, json)
Hash identifier: l+nASVg5/EcGeo8Fjk0LlHd5BMg54IXA9nAL0A1lvrU=
Subject key identifier: 06:91:BA:DB:88:77:07:03:6C:8A:34:62:DC:65:1A:22:28:6E:10:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F4670AD8C04AF5C2FE3B174B67F8B4620A3BF0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bf41140-a41b-4dbb-ba06-478aff47ce48.roa
Signing time: Mon 31 Mar 2025 21:37:04 +0000
ROA not before: Mon 31 Mar 2025 21:37:04 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.239.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:46:70:ad:8c:04:af:5c:2f:e3:b1:74:b6:7f:8b:46:20:a3:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 21:37:04 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=db624ab2b4a797dab0fce40b43999320b7aca4de7258c5fc8531a13d0043456e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:6d:fe:06:03:5e:6d:fc:0b:fb:7c:d5:b0:
8e:ac:09:27:54:95:d2:cc:17:e0:9e:62:48:ad:5a:
8f:4d:0e:a4:80:84:87:03:7b:ab:d6:ce:88:e0:a4:
f5:91:38:0a:44:12:0c:9f:60:f9:e1:a1:3c:7b:ca:
ec:5f:e2:2c:af:76:7f:29:48:10:de:87:3c:97:01:
c9:ae:4b:31:8a:82:e1:7e:f8:d3:79:87:2d:13:92:
56:0f:b0:d5:66:12:d3:ef:58:b4:28:b5:3e:27:0a:
3a:ed:ca:7d:c1:82:de:77:7b:eb:70:0a:68:6d:fd:
71:1c:a4:fe:59:f8:7a:d3:a8:16:60:72:71:50:12:
bf:91:67:d8:9f:bd:4a:00:2c:03:03:ef:d3:65:3a:
15:eb:78:66:64:47:a1:6f:86:29:d1:ea:a8:e6:2b:
a1:42:f1:cb:4c:af:4a:d2:0a:78:cc:39:30:18:31:
94:a3:9b:a9:2e:34:a6:06:91:04:3a:69:00:cc:65:
18:1f:6b:4f:9b:4c:4d:64:e8:b7:d4:27:2c:ff:ca:
5c:5d:7a:df:27:d9:eb:3f:24:a4:c7:93:66:30:87:
50:56:2d:2e:74:9f:60:32:6f:f6:3e:4e:d5:5d:1a:
b4:3a:a5:5b:09:e9:5d:86:6f:cf:35:fa:2d:6d:79:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:BA:DB:88:77:07:03:6C:8A:34:62:DC:65:1A:22:28:6E:10:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bf41140-a41b-4dbb-ba06-478aff47ce48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e1:ae:07:e7:e4:e1:65:c4:f3:2e:0d:ea:e5:71:b5:42:1d:
02:46:b5:96:06:14:e8:76:37:65:17:c7:4f:cb:7d:b2:49:5c:
ff:1b:23:0a:f0:9c:31:a7:7e:fa:ba:10:a1:ca:e3:12:67:62:
5b:5a:e4:e2:51:75:17:18:91:13:e5:48:cb:80:b0:a4:69:ef:
6e:f5:04:c8:2f:ff:02:1c:d7:a3:7f:7f:14:9b:e8:8f:5a:77:
fc:ce:8e:06:4d:4c:31:6f:cd:e3:94:5d:12:12:ee:87:4a:3d:
59:00:fa:71:bb:80:41:0a:64:a4:b3:91:c0:73:57:34:61:fe:
95:e0:95:2f:06:4d:9b:cc:47:a0:bc:41:1c:35:36:5e:60:04:
2b:cc:69:31:05:18:83:b1:18:34:b5:06:3a:78:96:31:d2:61:
0a:4a:c2:13:a4:9a:fe:a1:af:cb:dc:79:93:7a:ef:ef:43:ab:
12:68:40:f5:de:77:a4:35:e3:ce:61:ee:3c:21:34:06:e3:c7:
e9:80:0f:96:de:84:6f:e4:4d:d8:5b:0a:09:47:d7:78:20:5e:
a7:3b:c5:b8:7d:12:ab:38:75:47:c0:c1:43:fe:7e:71:79:57:
57:37:66:4a:d2:59:c3:74:f1:7a:ce:df:aa:ab:b7:23:b9:c5:
87:04:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net