Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88ad3ecf-8794-428a-bc51-4ac3eff6ca62.roa
File: 88ad3ecf-8794-428a-bc51-4ac3eff6ca62.roa (raw, json)
Hash identifier: mhmdHiVY/c8pPA1+Wxj88ySs0mvf//xsJreVFYJkHQo=
Subject key identifier: FC:F6:00:05:2B:3E:16:EA:C4:5A:AF:48:24:73:04:10:DB:18:8B:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20912626905068DC0AC674C73D88F5D2F843B0C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88ad3ecf-8794-428a-bc51-4ac3eff6ca62.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 212.111.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:91:26:26:90:50:68:dc:0a:c6:74:c7:3d:88:f5:d2:f8:43:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=5f2b675dcb30b234e2ba2d170dbc60b679fea37c8ecdc2e476e98621a7777cc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f5:58:69:0e:6e:3b:c1:3c:11:5e:e8:84:39:
1b:e0:e8:bc:0b:4c:df:f1:ef:d5:95:84:f3:e3:d9:
5e:cf:76:b9:ba:60:3f:f6:06:fb:d1:af:2e:55:b3:
c6:40:99:89:fa:9e:53:aa:0a:50:74:36:98:8f:4b:
f5:e3:c6:ca:87:62:40:90:ed:a9:4b:7e:83:1f:09:
52:66:0d:14:b2:f2:b8:a6:9f:1d:20:aa:76:88:36:
07:d2:f7:66:07:31:16:ee:9a:3f:68:f0:34:21:5a:
0d:ad:90:e7:30:eb:c4:6a:e3:2a:94:03:55:37:53:
db:ef:df:38:0f:85:1b:91:f7:3d:28:a8:f1:b2:a2:
d5:dc:38:da:79:ef:ed:0d:57:0f:48:f0:c4:84:d0:
36:1d:ac:e9:2b:a7:16:f1:6e:09:7a:1c:fe:3c:77:
ca:d4:70:15:9c:46:02:a3:c0:79:ae:60:8a:91:f5:
37:12:8f:5e:8d:e2:9c:de:ee:94:42:21:d9:92:6a:
a3:f4:9d:38:b5:f1:10:b6:1f:ea:58:8e:aa:1c:d5:
fa:33:23:f3:37:49:5c:3e:bb:2f:e9:6e:71:94:dd:
db:35:dc:77:43:e9:09:94:c2:bb:34:1f:5e:d0:d5:
11:49:76:df:28:bb:34:e4:b5:ac:c1:58:3a:5d:29:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:00:05:2B:3E:16:EA:C4:5A:AF:48:24:73:04:10:DB:18:8B:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88ad3ecf-8794-428a-bc51-4ac3eff6ca62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.160.0/19
Signature Algorithm: sha256WithRSAEncryption
10:5d:97:81:5a:46:af:5d:f4:ac:4e:e0:47:6a:75:a6:2c:4d:
fd:c4:6f:8b:f4:40:73:b1:79:ee:4f:a3:82:c1:74:bf:d9:e3:
ff:94:70:46:23:4e:c5:25:60:de:58:91:0e:b7:4a:07:9b:ea:
fc:99:2b:83:ce:07:c6:eb:bf:50:fd:15:64:0e:fd:26:a3:d7:
49:d2:c3:72:36:b7:13:92:41:12:12:e8:ec:1f:d0:da:04:01:
c7:ab:19:81:53:a6:8f:4a:e3:1a:80:6f:cf:7a:20:6a:fe:72:
74:b6:84:0d:3a:d5:af:e9:34:e3:1b:b7:b6:3e:e8:fd:9b:85:
66:b3:38:e6:4e:35:e2:71:e9:41:95:5a:18:e7:2d:83:5b:58:
a3:c1:fc:0a:9b:04:51:af:f5:a9:87:3a:e8:49:5e:30:40:4e:
5f:49:ec:69:a7:36:35:9e:1f:93:0f:d9:7c:d2:a7:78:c0:28:
5c:a0:e5:d5:49:d3:a6:e3:aa:df:49:bf:ff:91:22:e2:ad:e9:
71:c9:be:2b:db:22:f9:76:06:29:6d:72:2f:ab:c6:86:80:d7:
79:b0:e2:a1:b4:73:2f:e7:40:ae:fc:ab:be:26:ad:26:ad:ff:
2a:48:b2:c6:e0:a7:c9:bd:18:a5:e9:a9:15:c3:db:63:ab:c1:
98:4b:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:29 2025 by rpki-client