Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93ef871a-5786-49ee-841f-911efeedc0f2.roa
File: 93ef871a-5786-49ee-841f-911efeedc0f2.roa (raw, json)
Hash identifier: nV7Ixp1T6KBu6x8UE5Vxcbz6qnHQ/1WsoKfCgv5wfaE=
Subject key identifier: B5:CA:A9:A5:5A:7E:CA:92:C2:21:EA:3E:2C:C8:F1:DF:DA:96:67:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F9F4FA5DE83C12C74700C9DE532DADBE2B7166C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93ef871a-5786-49ee-841f-911efeedc0f2.roa
Signing time: Fri 28 Mar 2025 19:37:04 +0000
ROA not before: Fri 28 Mar 2025 19:37:04 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.239.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9f:4f:a5:de:83:c1:2c:74:70:0c:9d:e5:32:da:db:e2:b7:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 19:37:04 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:80:40:b5:13:33:eb:ef:cb:85:67:c2:5d:
76:cd:66:a3:2b:41:66:4b:bd:d9:36:b6:40:f4:7e:
46:7c:53:0c:85:13:7c:3c:69:4f:82:74:c4:81:38:
1d:76:e2:48:29:26:d6:78:1b:94:5d:0f:af:fe:68:
da:56:b3:f0:fb:a6:db:2f:2a:81:1c:35:67:8e:4c:
7a:2b:a9:e8:f1:4b:87:1b:cc:d6:36:91:bf:b1:2e:
5c:67:bc:fa:e6:8f:f0:e0:3a:bc:09:7f:18:c5:57:
5e:de:2e:aa:9c:eb:36:94:b9:4c:d3:53:af:13:4b:
43:58:45:11:c1:2a:1c:3e:67:2f:b5:d8:20:41:9d:
54:f3:ba:c5:44:fb:b4:83:42:34:1b:09:67:a4:b5:
1d:b8:ee:57:39:3c:bf:e4:ff:b8:12:6a:ee:3f:0e:
20:b4:9d:0f:58:a3:07:7f:e7:27:e3:16:a3:7a:d1:
a8:25:94:6b:65:35:b4:e7:35:48:8d:b6:2a:d8:9b:
59:eb:a7:5d:67:57:16:82:de:28:12:2b:3c:a2:e9:
5a:53:6d:35:44:e9:b3:0e:75:5f:39:42:7d:85:2e:
02:61:50:98:c2:6b:d6:e8:1a:c4:45:44:b9:70:e8:
f5:2e:16:54:7c:1d:e7:d5:ec:19:41:87:fd:e1:bc:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CA:A9:A5:5A:7E:CA:92:C2:21:EA:3E:2C:C8:F1:DF:DA:96:67:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93ef871a-5786-49ee-841f-911efeedc0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.239.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:f9:13:28:2f:36:ca:e2:ba:10:dd:70:a0:6c:b6:a2:a3:c6:
b3:cd:ab:f7:ed:01:d6:dd:f3:27:77:41:d2:f3:83:a0:84:14:
be:9a:67:76:07:dc:73:d6:ec:82:34:a6:3c:cb:4f:2c:b7:c5:
b6:89:8a:54:1a:d0:8a:4e:db:74:71:3a:42:15:c8:5a:ba:e0:
e5:e6:20:29:37:d4:31:f7:0b:e6:bd:60:19:98:19:10:bc:48:
dc:e1:5e:8a:0d:66:22:31:28:e3:9c:db:e0:f4:ce:f2:f8:53:
4d:71:89:82:0b:55:ea:f8:45:7a:b3:af:48:88:2d:74:90:8a:
61:04:14:ba:57:92:7b:60:64:94:6f:e2:af:cb:58:f1:e3:3f:
86:4b:d9:bd:5d:59:5d:b5:0d:da:e6:22:03:e3:55:84:79:8e:
0e:0f:54:fd:b0:53:6c:e6:88:fa:5e:48:16:08:8b:19:ca:79:
bc:98:41:1f:30:03:26:32:e8:9f:cd:9e:5f:28:e6:22:3c:7c:
9b:7b:97:a4:45:14:36:39:9c:48:69:aa:97:3a:80:cd:dc:2f:
9d:d3:5e:82:29:23:b0:47:c5:c7:e0:a2:f5:a9:8f:90:97:a2:
1a:81:1c:81:f2:06:8e:ee:e5:81:d2:46:07:da:c9:7a:31:38:
ea:91:90:b2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUb59Ppd6DwSx0cAyd5TLa2+K3FmwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTkzNzA0WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjBlZmYxNWZiNzA2YWZjZTU4MzljNzVlMGY1NzE2MTg0
MGFkMWVkODgyMGMzMGE5MDQ2ZWNkZGFiZDZmYTk4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIFIBAtRMz6+/LhWfCXXbNZqMrQWZLvdk2tkD0fkZ8UwyF
E3w8aU+CdMSBOB124kgpJtZ4G5RdD6/+aNpWs/D7ptsvKoEcNWeOTHorqejxS4cb
zNY2kb+xLlxnvPrmj/DgOrwJfxjFV17eLqqc6zaUuUzTU68TS0NYRRHBKhw+Zy+1
2CBBnVTzusVE+7SDQjQbCWektR247lc5PL/k/7gSau4/DiC0nQ9Yowd/5yfjFqN6
0agllGtlNbTnNUiNtirYm1nrp11nVxaC3igSKzyi6VpTbTVE6bMOdV85Qn2FLgJh
UJjCa9boGsRFRLlw6PUuFlR8HefV7BlBh/3hvLbFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtcqppVp+ypLCIeo+LMjx39qWZyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkzZWY4NzFhLTU3ODYtNDllZS04NDFmLTkxMWVmZWVkYzBmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJu7xQwDQYJKoZIhvcNAQELBQADggEBAA75EygvNsriuhDdcKBstqKjxrPN
q/ftAdbd8yd3QdLzg6CEFL6aZ3YH3HPW7II0pjzLTyy3xbaJilQa0IpO23RxOkIV
yFq64OXmICk31DH3C+a9YBmYGRC8SNzhXooNZiIxKOOc2+D0zvL4U01xiYILVer4
RXqzr0iILXSQimEEFLpXkntgZJRv4q/LWPHjP4ZL2b1dWV21DdrmIgPjVYR5jg4P
VP2wU2zmiPpeSBYIixnKebyYQR8wAyYy6J/Nnl8o5iI8fJt7l6RFFDY5nEhpqpc6
gM3cL53TXoIpI7BHxcfgovWpj5CXohqBHIHyBo7u5YHSRgfayXoxOOqRkLI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:42 2025 by rpki-client