Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8547554f-aa18-48c0-9f58-768583199748.roa
File: 8547554f-aa18-48c0-9f58-768583199748.roa (raw, json)
Hash identifier: KgLKUqvgINtSQmPrts0rSR4jT4/OHlhBbqYfhOQcNns=
Subject key identifier: 1C:B5:82:E9:F6:DD:D2:BC:6A:56:72:F5:1B:C7:8A:A5:6A:8B:21:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 234668BD9E3101978E6D8291D79A0165609C4253
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8547554f-aa18-48c0-9f58-768583199748.roa
Signing time: Fri 28 Mar 2025 20:07:54 +0000
ROA not before: Fri 28 Mar 2025 20:07:54 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 119.12.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:46:68:bd:9e:31:01:97:8e:6d:82:91:d7:9a:01:65:60:9c:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 20:07:54 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:30:37:83:ba:7c:5c:95:b1:b8:3f:09:64:
2f:a9:b8:b4:4c:41:65:31:cd:8f:db:40:10:66:1b:
32:35:14:50:c1:e6:3d:fe:f4:1a:21:3a:82:37:5f:
99:f1:f6:4f:15:82:32:20:95:62:13:ad:96:7c:34:
32:5d:ed:fb:31:f3:72:da:e9:29:57:dc:4d:81:42:
2c:0b:ae:fb:ff:b8:42:5b:53:78:1f:ed:89:1e:d5:
fc:fb:e5:e0:0c:9b:7a:8e:32:4b:c2:33:d5:b8:83:
15:6e:ec:ae:81:bc:85:c5:77:b9:1a:16:67:a2:ba:
cc:56:e4:5e:a2:f4:79:b5:3f:ff:74:2a:3d:48:a4:
35:51:7a:70:7c:44:62:a0:f9:c0:4c:b5:ae:f3:a3:
de:02:6c:89:ef:8e:66:8c:75:1b:a5:b8:31:ae:30:
6e:b2:f1:53:4d:00:c1:e6:fe:db:39:3d:ff:30:2f:
66:d9:fd:17:98:b1:82:34:42:fe:93:5c:9e:cb:2a:
72:bd:98:74:3e:cf:9e:1a:af:af:50:3a:95:e1:e1:
e5:64:5a:10:0a:61:5f:64:9c:17:c5:fb:af:ee:00:
8e:7c:96:06:49:dc:a8:a4:bb:22:39:f1:96:12:30:
63:20:14:3a:9e:46:93:aa:b3:1c:15:da:e6:b7:23:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:82:E9:F6:DD:D2:BC:6A:56:72:F5:1B:C7:8A:A5:6A:8B:21:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8547554f-aa18-48c0-9f58-768583199748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.12.88.0/21
Signature Algorithm: sha256WithRSAEncryption
49:7e:fc:63:bb:01:17:cf:b9:6f:f3:a4:19:b5:a4:bc:f8:f6:
7c:ad:fc:f1:43:0b:84:f3:97:6c:d6:10:71:58:5b:3f:99:fb:
2f:e8:b7:32:f5:83:5e:4a:25:86:06:34:03:73:82:75:5b:d4:
96:7e:e6:50:f9:36:f8:17:96:45:95:07:82:7e:ff:1f:f5:2f:
38:95:88:d6:48:a3:d6:33:3f:d8:59:81:9c:38:95:39:72:04:
5b:83:c7:11:4a:5f:67:d0:f0:35:0c:f0:ab:a8:1a:79:1b:00:
10:bb:c5:9b:8f:e1:0f:b9:de:72:ad:19:ab:dd:c1:dc:e9:d8:
8d:7b:33:93:11:f9:5e:2a:a6:d0:5b:7e:1f:5c:c2:be:88:77:
f8:65:03:be:cc:43:9f:f9:22:11:b6:08:09:f6:50:a1:95:1a:
ba:18:54:45:a9:51:03:59:29:13:14:68:9c:d4:99:12:a5:e1:
aa:61:27:fc:26:fc:da:0e:28:db:4b:e4:e8:59:95:1b:e1:a7:
7b:51:95:85:1b:34:f7:7c:59:13:b5:3c:03:2e:cb:c3:e4:f3:
53:14:5a:5a:0c:4b:3d:45:35:b3:be:6b:6e:96:42:33:a7:d1:
63:3c:fa:be:c5:c4:95:74:65:a1:af:e7:c1:d3:3f:0e:b0:86:
d3:ea:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:25 2025 by rpki-client