Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa
File: 24b3424f-9bad-4599-a0a2-6507f7c70050.roa (raw, json)
Hash identifier: bYMGq1tuK1ZwT+dzq3zTypVK6dTQhG0zAOQcCHB6coU=
Subject key identifier: B1:70:C8:FB:AF:12:BF:FC:92:06:7B:FB:45:1A:85:EC:7C:A6:70:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CC94F2AF4B54BDB43F5CFB25B1DF1A9D8FF7534
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f11:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c9:4f:2a:f4:b5:4b:db:43:f5:cf:b2:5b:1d:f1:a9:d8:ff:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ff895fd529014b938a615aa33ea0aa4264913236819c78b90debfe539645ff1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:ab:af:3e:fd:1e:61:da:be:ba:b4:fe:0e:
35:5b:65:8f:53:86:c8:28:9d:4c:9b:aa:21:70:cb:
91:18:0f:95:e8:c4:d4:98:c2:dd:17:6b:2b:02:b2:
4a:c8:50:84:6d:06:d2:fc:4f:70:26:6a:df:e5:fb:
2a:47:a5:27:2c:bc:60:55:80:b8:5d:1c:a4:d5:90:
89:a9:29:61:a5:64:fd:17:b7:5b:0f:b9:e7:1c:48:
d6:48:d2:6e:2c:d1:d4:4d:8d:8c:22:f5:e0:7e:ef:
a9:da:7d:fe:5b:bd:72:6e:42:d7:b7:cd:dc:ef:a1:
09:c4:ca:ec:25:35:60:c8:3f:da:58:bb:eb:a9:36:
e1:c9:d2:da:7f:0f:e3:9d:d0:13:50:73:48:4a:b9:
46:a1:26:28:29:25:ce:10:6b:d2:ac:31:86:98:6b:
f0:59:e3:14:43:d2:3c:95:a3:93:5d:c1:4e:28:ce:
d0:44:52:8e:f1:ac:1f:56:f0:39:bd:35:4d:ca:dc:
c7:f2:10:24:a9:0b:a7:5d:5d:46:17:a5:12:ba:0e:
68:6d:e3:99:34:f3:bd:18:80:55:0f:f8:c3:dc:d4:
4b:d5:fe:01:8a:6b:16:30:f4:60:71:04:e3:d2:8d:
c3:dc:14:3b:22:e9:16:ce:5c:d0:06:6b:e9:26:b6:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:C8:FB:AF:12:BF:FC:92:06:7B:FB:45:1A:85:EC:7C:A6:70:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f11:8000::/36
Signature Algorithm: sha256WithRSAEncryption
73:8c:e1:98:9b:09:24:f5:4e:19:e4:4e:56:a2:49:1e:2c:ee:
6c:72:d0:7e:a2:ee:8e:41:34:28:de:91:7c:19:ae:88:a5:ac:
59:3b:3f:d7:13:0d:bd:21:72:38:0a:04:8f:cc:72:d5:0f:6f:
20:a2:90:6c:68:b6:d3:a2:66:0c:d0:9b:5f:54:2c:a1:2e:7f:
ed:58:52:3b:95:37:25:b6:74:7d:da:58:98:cb:85:81:22:ab:
e7:4a:f2:0e:4d:3b:08:c2:fb:de:a3:94:0a:55:15:1c:4f:50:
41:71:63:4a:a1:ac:fc:51:e5:24:72:ea:0a:9a:5a:5c:22:b6:
b7:64:f9:bf:85:6a:f9:23:43:f0:d5:16:b2:db:16:ee:f8:1a:
21:47:3b:60:09:d0:bd:bb:69:22:a3:e4:7a:5e:21:1a:11:0c:
4c:24:bd:2b:71:b6:17:41:5c:54:f6:9e:44:9b:e3:28:7b:3d:
77:e2:6a:69:6d:62:da:6a:38:93:74:a5:8e:89:a8:dc:62:aa:
cb:0f:55:67:fe:ca:dc:60:9b:fa:3f:08:d9:0b:a0:6f:16:e1:
58:5b:2a:11:c9:2e:07:ab:45:cc:c9:7b:99:5a:d9:36:41:69:
2f:f7:bd:be:85:b1:dd:91:52:44:84:ec:06:a2:cb:73:e4:ee:
51:2b:ab:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:59 2025 by rpki-client