Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/385545d2-1da0-4d1f-af34-d87d34ef49d2.roa
File: 385545d2-1da0-4d1f-af34-d87d34ef49d2.roa (raw, json)
Hash identifier: HWnyH3UHaDA7ohng9M5bd1nOGnB+rQKDMAHh05vWznY=
Subject key identifier: D6:BC:20:0F:A7:5F:35:FF:13:3C:E2:91:E6:CD:95:12:47:88:3B:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 74504447DC4055358976BC3559A2240DA830C96F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/385545d2-1da0-4d1f-af34-d87d34ef49d2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff7:3400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:50:44:47:dc:40:55:35:89:76:bc:35:59:a2:24:0d:a8:30:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=909b8ed9fe86a0683b74ff4e6b60be261a4a842e943baae7ad9a1eed4c939780, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:c1:0c:4e:d3:7d:66:a2:89:6f:f5:63:ba:
d5:99:91:7c:59:0e:34:7a:6b:62:6f:b2:23:54:18:
16:56:a9:20:68:aa:82:18:90:08:6c:15:22:1e:32:
db:e8:df:b1:ef:ed:63:56:d5:a5:de:55:1d:66:50:
28:c3:b4:f0:9e:d8:87:1d:4f:ca:7b:eb:0d:87:bb:
3c:8f:50:4d:ef:77:2f:98:d0:47:07:a3:0e:a8:88:
52:6a:98:f0:7d:71:cd:cc:36:4a:5b:5f:0f:28:66:
95:e0:78:08:34:72:38:10:c9:5f:92:b3:2d:80:ad:
5b:f2:b0:94:ba:99:1c:ac:cf:b5:2a:c2:6c:e9:13:
22:62:94:69:18:b6:68:4c:e5:96:61:6a:3e:7a:47:
dc:b3:7f:a6:a4:df:36:b0:b6:c7:d5:ea:fe:89:78:
aa:2b:5e:42:d6:02:25:da:b5:8f:83:8f:e3:77:e8:
70:e6:46:b5:44:05:3a:c0:db:54:78:32:f7:82:6d:
d9:6f:6b:07:90:43:af:91:6a:47:a0:a7:e9:04:03:
0c:d0:88:e3:13:37:dd:00:14:fc:0a:86:74:f0:3a:
3a:53:c6:72:01:ad:d1:02:a6:b1:2d:18:8f:83:f4:
a8:74:bc:86:f6:d7:ca:5a:cf:2e:a0:a1:07:05:22:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:20:0F:A7:5F:35:FF:13:3C:E2:91:E6:CD:95:12:47:88:3B:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/385545d2-1da0-4d1f-af34-d87d34ef49d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:3400::/40
Signature Algorithm: sha256WithRSAEncryption
c7:31:35:5d:bf:ca:c0:56:05:8f:ab:20:95:51:94:e5:d3:99:
ad:b8:46:50:05:14:26:b9:50:e2:08:29:19:cb:9d:57:f3:3d:
88:90:06:38:de:50:1c:4f:01:3b:48:bd:b2:ad:c2:71:33:90:
c3:f2:a9:bb:64:f5:99:22:d0:45:c8:4e:21:33:b3:3b:bf:ae:
72:ca:33:ca:f7:b8:86:5e:e0:36:45:5c:90:4a:dd:d5:71:9a:
a2:fc:19:65:44:c7:9c:9a:fc:53:d7:fb:63:45:c8:60:eb:71:
61:79:a2:21:bc:d2:20:3e:ec:ac:02:5a:d5:25:c9:3b:94:34:
3d:7a:9c:ee:bf:4b:22:09:bf:f8:ed:86:56:79:ae:6e:5c:65:
bf:c7:6a:de:38:20:79:7e:e7:cc:9c:b0:42:af:f3:c8:49:17:
dc:4b:55:fd:24:46:ea:56:ff:19:46:15:7a:5a:08:ef:bc:2a:
0c:10:a8:b8:ee:45:19:a6:53:e1:25:32:d2:ce:93:7e:1d:7a:
a4:71:f4:4e:fc:81:30:22:3b:4a:4d:0d:51:10:36:79:56:72:
99:0f:c2:a5:a0:38:fe:00:ac:df:02:46:3b:61:57:20:8d:a0:
ec:7b:c8:b4:96:5e:dc:3e:de:36:ae:6b:01:81:71:2d:3b:1e:
5d:1c:03:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:59 2025 by rpki-client