Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa
File: 29920184-aec3-4a16-ab95-1de3bb8a0901.roa (raw, json)
Hash identifier: fDPxZcop6X3N8jAq+5jc+jCiejwy1muo88rh3idzgjM=
Subject key identifier: 8B:34:98:41:92:31:C7:12:77:28:4C:79:AA:0B:DE:8A:B0:22:1A:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BEDCDD1794CD1286190A46C148DE2F2FD5580A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:8000::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ed:cd:d1:79:4c:d1:28:61:90:a4:6c:14:8d:e2:f2:fd:55:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=810b566cfc1c4072e72b4be3d2e5097f6dd7e16a01d29ac610ab65fa90781250, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:38:b3:24:b5:94:d5:6a:c4:04:a0:71:b2:
14:d2:1a:98:03:67:08:1a:67:37:e6:14:96:1f:74:
12:25:9b:82:d2:43:76:86:d0:20:fa:0a:07:ef:6d:
44:d0:99:94:2a:9b:2b:f5:34:10:d8:9a:ee:f3:99:
a2:d8:8e:77:bd:cb:e9:29:4b:e2:dd:a4:00:8e:fe:
b9:25:08:dd:d9:3a:c6:08:a4:d6:49:d4:c2:34:94:
96:e1:f5:d2:7d:3a:97:5a:3d:f3:b8:36:72:51:cc:
4f:11:37:7d:4b:84:19:51:b4:6f:40:5f:bd:50:07:
17:ae:37:f7:5e:c2:f4:b5:03:e0:cd:d5:7d:83:d8:
4d:39:4e:c1:f4:10:7c:1a:03:3b:cd:9c:d1:6b:be:
d1:c5:a3:5c:ac:c7:b5:3e:be:e2:93:7f:ff:bf:4b:
cc:d5:d5:42:82:54:7c:cb:28:4e:0d:bc:06:03:44:
86:4d:be:cf:4d:25:d1:0e:2e:ce:ed:f9:74:76:c5:
b8:1a:a9:a7:2f:71:f0:3f:cb:16:84:0c:f5:9c:73:
eb:cb:38:43:8e:e8:36:9b:7b:65:13:ed:ca:43:b1:
7a:cd:0e:27:08:31:5d:bb:eb:31:d1:46:f3:7b:0f:
86:7e:37:0d:e9:0e:6a:0e:ee:7f:20:b5:3d:31:4b:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:98:41:92:31:C7:12:77:28:4C:79:AA:0B:DE:8A:B0:22:1A:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:8000::/39
Signature Algorithm: sha256WithRSAEncryption
3f:44:b9:4e:79:97:46:f3:9c:0f:04:ff:5c:cc:3f:30:2a:9b:
15:7b:00:73:42:5e:ba:d7:bb:da:4d:7b:48:7e:60:ab:90:50:
b3:18:1f:f6:b0:a5:e6:91:ea:b0:ad:75:74:c4:8d:fc:15:0b:
ea:b2:00:f6:59:34:ff:f2:32:00:bc:78:08:ae:ee:7a:9a:6c:
9b:af:0b:09:7a:49:80:68:13:e1:e7:ad:4f:39:b3:e2:7b:d6:
62:ef:b2:e7:d6:70:2d:47:6c:f2:f1:11:67:4e:a2:a5:59:ec:
d3:bd:9c:b4:fa:d5:cf:90:2f:32:18:e8:e2:8b:b7:a7:81:f7:
fc:90:d4:c4:01:5c:a3:6c:ef:05:b6:10:a2:e0:4f:48:dd:bc:
f2:28:a9:b6:05:71:af:69:c9:26:00:82:7e:54:10:c3:a0:ee:
f3:fd:7e:48:42:d9:6b:3e:4f:0d:9c:9f:ac:f3:eb:2c:4d:aa:
6e:df:07:30:5e:2b:2a:a4:aa:94:4a:5d:ed:2e:a3:e4:95:c5:
0d:16:8f:4f:a1:ce:e2:10:48:ee:14:42:94:02:0c:61:29:29:
69:62:97:8c:2d:56:1a:f8:f3:b9:42:4b:a5:71:cb:31:e7:2c:
4e:3a:49:a8:ca:02:2a:27:bc:68:67:f0:8d:93:06:2d:51:b1:
5f:04:0e:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:49 2025 by rpki-client