Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf6029c4-99f9-4ad6-ab7f-89d3b235b77d.roa
File: bf6029c4-99f9-4ad6-ab7f-89d3b235b77d.roa (raw, json)
Hash identifier: reKE2hzSqsGvv8hd3KqtLAG0DoB0vtnhBjaehHJ/xl0=
Subject key identifier: 5C:4A:10:C1:58:90:E9:09:DD:EC:D9:9E:BD:FF:D1:DF:89:32:37:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70C0DED081C6260C81F91855326810DCD5DDEFAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf6029c4-99f9-4ad6-ab7f-89d3b235b77d.roa
Signing time: Mon 31 Mar 2025 23:38:55 +0000
ROA not before: Mon 31 Mar 2025 23:38:55 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 123.200.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c0:de:d0:81:c6:26:0c:81:f9:18:55:32:68:10:dc:d5:dd:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 23:38:55 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=aa858e74e159bb40f10f887cbc464ece5b4acb0a40af5abe41bbe065ea93b15a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:a4:53:90:3e:ef:96:3b:fb:c9:48:64:5e:
18:44:fa:84:28:6c:28:0f:76:ee:76:41:da:df:00:
44:7e:cc:30:9d:e3:ae:4c:b9:be:ef:a3:7b:24:c0:
a3:30:3a:b7:f6:4a:3e:d8:81:2e:8f:cb:c2:77:68:
ee:a4:e2:f0:7f:7f:6b:92:5c:2a:97:26:b4:0c:ae:
c5:15:42:18:b8:60:ec:96:f3:5e:9e:f9:31:e9:5c:
49:18:0d:01:c2:a1:bc:74:42:33:bb:60:5c:ea:5c:
ac:47:0a:a7:e8:fa:83:5c:45:94:f9:83:0e:4e:6e:
d6:b0:04:fd:df:9b:a6:f7:3e:1a:95:64:41:4f:d1:
70:17:ac:b8:52:0b:93:ca:c7:7a:da:20:21:93:25:
eb:3e:89:b2:ed:e9:0b:04:24:b5:f6:ed:11:17:09:
f0:ef:c2:81:ac:46:d5:34:dd:dc:41:aa:be:41:49:
8e:91:6b:9f:d1:0a:f5:60:94:a3:5a:59:c8:5c:9f:
ff:51:b4:af:06:e3:a4:69:46:1b:15:75:54:aa:59:
ba:d8:0c:bc:ab:6d:a0:ea:65:83:51:8a:46:12:2a:
a6:99:d4:c8:03:b3:1c:fd:34:7b:29:3b:b2:79:c6:
9d:9b:e3:9b:5a:83:43:4e:63:8f:fe:6f:81:c3:8d:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:10:C1:58:90:E9:09:DD:EC:D9:9E:BD:FF:D1:DF:89:32:37:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf6029c4-99f9-4ad6-ab7f-89d3b235b77d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.200.242.0/23
Signature Algorithm: sha256WithRSAEncryption
37:7c:f5:76:75:0c:21:87:14:48:63:d4:93:9b:04:0a:6f:1f:
1a:84:ee:6b:cd:1c:ca:28:dd:5a:f0:0d:5e:cc:03:df:e5:e3:
ea:c9:cb:58:7e:41:76:9c:ad:27:b7:74:2c:fd:b7:b3:3a:54:
21:17:d7:11:40:61:e2:ff:b2:ab:41:67:b9:91:4f:4d:e9:df:
44:a5:cf:bb:74:6f:7d:73:02:23:42:46:47:7e:81:d4:18:03:
45:5a:8a:4b:cb:ea:ce:f9:75:39:ea:36:26:80:92:6e:ab:5f:
3b:4f:cd:57:9c:5b:e5:a2:26:e7:1d:79:c3:7c:fc:b5:a0:61:
9d:10:26:3c:b9:b0:39:c1:46:d4:30:ce:6e:01:fc:c5:95:4b:
6b:a2:7f:07:cf:2f:e0:1f:19:14:b4:ae:5c:5d:b3:a6:e6:5f:
e1:df:0a:b2:ea:dc:13:b4:6b:08:4d:76:95:cd:a8:a4:1c:99:
5a:40:97:34:a6:de:07:ee:d8:4b:c7:02:fd:3d:94:9b:de:40:
2e:cb:18:e8:12:92:53:f4:9a:72:66:0b:48:8e:d3:2c:1b:e4:
ab:3f:1d:8c:e8:8b:cc:41:d5:03:fd:94:75:51:69:61:92:a4:
cd:89:84:7c:1d:d5:ea:a1:c0:49:b8:15:a6:c9:0a:34:9b:b6:
f2:9b:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:20 2025 by rpki-client on console.sobornost.net