Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af3b57d7-2fe8-4e04-ad99-1366c252299d.roa
File: af3b57d7-2fe8-4e04-ad99-1366c252299d.roa (raw, json)
Hash identifier: slFD79xVMt/7I+6c3qoaGo4w09qxH5+S7GAo+JFfMDM=
Subject key identifier: 1E:3F:0B:69:D3:49:43:68:4F:1F:0E:DC:0D:C3:CD:D5:77:4A:4F:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6BB9CE9397866762FC73FA494B230FF887E4FDD9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af3b57d7-2fe8-4e04-ad99-1366c252299d.roa
Signing time: Mon 31 Mar 2025 23:37:14 +0000
ROA not before: Mon 31 Mar 2025 23:37:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 123.200.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b9:ce:93:97:86:67:62:fc:73:fa:49:4b:23:0f:f8:87:e4:fd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 23:37:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=58effff167bf51097be0798836509e106a859a1ed4cbc309f0858debc1fe892a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:8f:35:6c:32:ce:27:0e:ab:5d:6f:af:be:
00:e2:a0:d3:e0:dd:b7:b3:b0:01:69:94:62:00:df:
c0:a4:e5:7d:2a:83:7f:db:73:ce:29:86:8e:2e:ea:
3b:72:cd:18:78:52:b4:cd:6f:12:9e:e5:61:02:35:
8b:0f:6b:bb:9a:a4:53:c2:52:64:a4:cc:4f:04:6c:
70:7f:82:fa:58:77:f2:65:b2:e5:d0:e9:15:f3:3c:
f5:5c:e4:f1:40:50:58:b9:10:08:1a:46:15:57:00:
48:d4:25:76:f4:a5:ec:59:98:1e:7b:10:63:6c:7c:
52:6e:6c:d2:f8:dc:e6:4f:c7:fc:ce:a9:54:bf:96:
06:bf:de:3c:37:9c:33:91:ea:10:a0:9a:a7:ad:47:
ec:61:94:79:2d:9b:73:e4:41:c1:79:9f:a8:3a:1a:
16:d4:b7:77:ed:7f:7b:c2:e9:5c:de:d0:27:f0:27:
4b:6d:c4:4d:c0:81:04:14:47:da:87:93:9a:a8:f6:
da:dc:5e:b8:68:ec:d5:d6:6f:71:80:2b:e1:97:56:
e7:f4:39:21:01:ac:4e:24:ea:50:19:9d:88:4c:45:
f8:f4:d1:00:88:69:54:0a:16:e6:f1:3e:05:bf:4d:
df:70:67:0a:ac:50:38:70:8b:71:ac:1f:dd:f9:97:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3F:0B:69:D3:49:43:68:4F:1F:0E:DC:0D:C3:CD:D5:77:4A:4F:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af3b57d7-2fe8-4e04-ad99-1366c252299d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.200.204.0/22
Signature Algorithm: sha256WithRSAEncryption
77:59:9c:8e:77:58:de:94:9c:b9:67:ed:82:e3:1b:bf:8c:b1:
37:c3:0d:d2:74:a5:55:65:b9:3d:0c:0f:a4:2b:37:6f:2b:b7:
ff:ef:04:1c:e8:09:a7:11:e7:67:bb:1f:de:d0:e2:26:08:90:
0b:2d:32:41:ca:52:dd:64:ba:dc:9d:3d:b0:1a:fc:b7:28:32:
65:95:11:8e:6b:84:58:c8:ba:96:ae:b5:6b:ab:66:0c:c9:98:
d9:49:63:f5:0d:93:53:62:fd:c1:bf:b8:88:00:c3:a5:e6:3a:
12:88:61:79:f9:82:5d:98:42:21:9d:46:af:99:8d:20:9e:c4:
cf:44:57:a5:84:60:a8:54:fb:0e:02:6c:60:3e:d8:71:b9:aa:
e6:9e:94:40:5f:7a:8b:a4:de:42:c8:ea:14:31:3b:d9:19:18:
6f:5b:0b:af:3f:3f:b7:fd:09:af:21:9c:0c:39:b6:1b:2a:9b:
a6:81:15:7f:1a:57:e1:35:b4:b8:73:f3:f5:97:f4:3e:a7:a5:
a1:4b:27:04:53:6f:a2:d3:9a:2a:ee:8d:df:1d:c1:0e:26:85:
d0:a9:6d:6c:08:3d:fe:ea:bf:2f:76:ce:b5:53:80:48:c1:93:
80:59:57:32:0c:da:fa:a5:5b:68:e1:03:d1:07:15:f2:75:bf:
c9:df:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:18 2025 by rpki-client on console.sobornost.net