Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36214bab-b031-4d64-b155-eacb4b742ac6.roa
File: 36214bab-b031-4d64-b155-eacb4b742ac6.roa (raw, json)
Hash identifier: nHZcPBhFtPHTZ2yh8Iw0jP+iTD4bywPrIZt3t7pXNhI=
Subject key identifier: 23:6B:E0:1E:25:6A:ED:CF:2B:E6:64:54:26:68:E9:95:01:DC:16:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2367447CFCB54ADAE72A5FC5A7F98D9356EE0F18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36214bab-b031-4d64-b155-eacb4b742ac6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff4:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:67:44:7c:fc:b5:4a:da:e7:2a:5f:c5:a7:f9:8d:93:56:ee:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7c29815c276a512a0f9efc40c452af964a5583d89085bd07e3b2882f8da961f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:9e:df:dc:af:bc:c3:08:8e:9b:43:1b:39:
cf:13:15:d7:a6:14:a4:d8:d4:fd:36:76:34:f6:d9:
af:1b:4e:3d:10:e3:8a:c6:b7:24:d6:1d:e0:aa:0b:
0f:14:b1:60:84:87:da:92:02:1f:73:08:78:e1:08:
ac:e4:1d:4c:16:9b:c9:c2:fd:b5:01:0d:ee:16:33:
4b:9c:fb:04:04:6e:19:e8:07:39:3e:3d:2c:6f:3a:
ca:df:e8:c1:38:c6:83:1f:82:54:15:27:87:5b:30:
c7:eb:88:89:d1:8d:87:e5:59:3e:cb:b9:94:3e:59:
1e:bc:44:c6:2f:47:cd:79:4a:ce:67:92:27:32:8e:
6c:93:f0:d7:88:ed:a8:2f:8c:c6:16:07:ad:e1:ee:
e8:8a:60:e8:45:d3:b6:01:7a:29:c1:bf:ae:24:b9:
94:3d:9d:75:6b:cd:b5:e1:a8:69:b2:8a:75:49:d8:
5e:0e:5c:86:47:e7:85:83:e2:c3:c7:05:15:89:96:
a2:b7:cc:97:a6:05:6e:e1:7e:d5:40:f6:92:a3:81:
74:10:16:96:a0:34:ae:1a:42:be:b2:73:6c:5f:97:
2d:3c:e8:10:2f:eb:d7:e6:05:12:ee:13:b0:92:2f:
b3:35:93:76:55:e1:e8:0f:8b:7d:9b:bf:1f:8b:84:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:E0:1E:25:6A:ED:CF:2B:E6:64:54:26:68:E9:95:01:DC:16:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36214bab-b031-4d64-b155-eacb4b742ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:2000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:12:5f:7f:3a:82:71:77:86:81:91:be:56:69:59:e4:1f:aa:
f8:2e:95:61:c6:0c:57:8f:96:62:95:d5:fb:b0:91:1a:29:39:
76:a6:d0:3b:ef:ef:2c:0c:5a:90:ae:dc:b6:ee:c9:a9:e6:fa:
95:64:55:59:11:08:0b:21:44:63:a4:41:31:7b:b5:10:90:80:
9b:d3:93:2a:5b:db:b4:a2:f4:16:d4:da:4d:51:b9:af:c0:c5:
89:50:23:6e:85:b9:9a:6e:4e:37:41:e0:dc:63:1d:c0:f9:5e:
2c:88:80:b8:9f:41:99:d4:a2:75:a5:f2:e5:69:e9:50:a2:99:
c6:64:82:c1:d5:f1:98:fc:19:0e:ab:05:49:bc:62:2f:17:6f:
e3:91:77:6a:28:81:70:98:2c:48:a8:b4:03:d5:28:0c:f8:d8:
3d:90:a1:dc:2f:d5:ed:d0:a2:7f:78:4d:a9:98:64:2c:ee:06:
4c:0e:56:d8:5a:ca:a0:3e:dc:16:ec:a2:2d:2f:34:04:19:e2:
7b:dd:98:d9:35:28:92:b3:ef:3b:07:23:09:c4:3a:d5:a7:de:
3c:0c:a4:c5:9b:cf:95:9a:92:55:35:f7:41:2a:f5:88:c0:12:
7e:39:00:b8:45:4e:37:5d:61:85:27:4f:6e:08:cd:a5:bc:c2:
29:ab:01:bf
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUI2dEfPy1StrnKl/Fp/mNk1buDxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA4MDAwMDAwWhcNMjUwMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3YzI5ODE1YzI3NmE1MTJhMGY5ZWZjNDBjNDUyYWY5NjRh
NTU4M2Q4OTA4NWJkMDdlM2IyODgyZjhkYTk2MWY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKNZ7f3K+8wwiOm0MbOc8TFdemFKTY1P02djT22a8bTj0Q
44rGtyTWHeCqCw8UsWCEh9qSAh9zCHjhCKzkHUwWm8nC/bUBDe4WM0uc+wQEbhno
Bzk+PSxvOsrf6ME4xoMfglQVJ4dbMMfriInRjYflWT7LuZQ+WR68RMYvR815Ss5n
kicyjmyT8NeI7agvjMYWB63h7uiKYOhF07YBeinBv64kuZQ9nXVrzbXhqGmyinVJ
2F4OXIZH54WD4sPHBRWJlqK3zJemBW7hftVA9pKjgXQQFpagNK4aQr6yc2xfly08
6BAv69fmBRLuE7CSL7M1k3ZV4egPi32bvx+LhCdRAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUI2vgHiVq7c8r5mRUJmjplQHcFq8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2MjE0YmFiLWIwMzEtNGQ2NC1iMTU1LWVhY2I0Yjc0MmFjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/0IDANBgkqhkiG9w0BAQsFAAOCAQEAfRJffzqCcXeGgZG+VmlZ5B+q
+C6VYcYMV4+WYpXV+7CRGik5dqbQO+/vLAxakK7ctu7Jqeb6lWRVWREICyFEY6RB
MXu1EJCAm9OTKlvbtKL0FtTaTVG5r8DFiVAjboW5mm5ON0Hg3GMdwPleLIiAuJ9B
mdSidaXy5WnpUKKZxmSCwdXxmPwZDqsFSbxiLxdv45F3aiiBcJgsSKi0A9UoDPjY
PZCh3C/V7dCif3hNqZhkLO4GTA5W2FrKoD7cFuyiLS80BBnie92Y2TUokrPvOwcj
CcQ61afePAykxZvPlZqSVTX3QSr1iMASfjkAuEVON11hhSdPbgjNpbzCKasBvw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:40 2025 by rpki-client