Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4e3641-232b-4b02-9878-4cdd10d4f1ed.roa
File: 3a4e3641-232b-4b02-9878-4cdd10d4f1ed.roa (raw, json)
Hash identifier: 5lYhm0pjEyaAp3i0eF6ExJVhCU2Ih15upyLrdLZqLzg=
Subject key identifier: EF:67:21:47:68:D2:BE:4B:6C:A8:D8:E9:EB:06:6D:4A:CF:D5:A3:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7783BB995271A1859AC007E39C32C3A40DB29E5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4e3641-232b-4b02-9878-4cdd10d4f1ed.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff7:7440::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:bb:99:52:71:a1:85:9a:c0:07:e3:9c:32:c3:a4:0d:b2:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=36cb8a8bdee8157d89f40b9e502dbd6ec5de3c64363931ffef0ce991cefe2936, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:50:c8:68:dd:51:23:ac:74:9a:b5:ea:36:
f8:05:16:f4:72:ec:a2:cc:38:20:e3:4c:18:0d:dd:
8d:97:99:50:1e:12:fd:71:66:46:e7:a0:d8:68:0d:
3c:b1:4a:f6:30:c8:43:ce:9a:8f:93:24:0d:fd:3e:
2e:2a:55:7c:0e:e1:52:53:81:3b:ba:02:f6:5b:af:
df:a2:b9:fe:3e:6d:cc:c7:7f:b4:1b:0b:91:82:aa:
bf:f0:c9:2b:9c:37:fe:ae:66:42:59:25:a6:16:fe:
14:19:83:be:1a:22:9f:30:ff:8d:f1:57:6a:d7:41:
06:de:af:28:9c:03:c5:d3:27:bd:bd:d5:14:bb:ff:
0b:ab:68:0b:0a:b1:e4:1f:8c:02:88:8d:9f:8a:34:
7e:00:5a:a0:56:7d:73:21:78:7c:a7:48:8d:b2:2f:
ef:f4:50:0a:59:57:e0:fc:13:ca:fa:91:b6:9b:77:
03:c5:69:d0:57:f2:44:13:bf:9f:96:2c:b2:4a:8e:
c0:b8:26:b2:47:b0:af:d6:68:b6:e3:5d:aa:cf:03:
5c:7e:22:6c:2e:22:7d:92:fc:ac:cc:e5:92:61:14:
86:05:44:6d:db:63:aa:28:74:e4:9b:c9:9d:c1:3a:
fb:88:5f:ee:ab:0a:da:48:45:4e:52:8f:0e:41:12:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:21:47:68:D2:BE:4B:6C:A8:D8:E9:EB:06:6D:4A:CF:D5:A3:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4e3641-232b-4b02-9878-4cdd10d4f1ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:7440::/46
Signature Algorithm: sha256WithRSAEncryption
7d:12:2d:95:29:31:98:be:39:49:1c:c1:d3:a1:34:0c:25:2c:
d4:b0:bf:82:79:f2:67:5d:3b:46:23:77:98:09:34:8b:7c:5c:
84:ad:e8:1b:26:87:b7:0d:17:9c:d5:74:e9:8a:be:7a:ee:1a:
18:76:d0:0b:ef:eb:c7:4c:18:d2:7b:5f:c3:7b:7c:6a:4b:25:
75:95:22:77:49:bd:40:33:90:53:1b:83:50:8d:26:04:01:c3:
10:e1:f9:c4:d8:83:73:82:d7:f2:c7:4e:61:60:d4:53:f7:d4:
25:fb:d1:65:a1:50:00:af:4b:04:35:89:50:b9:25:e2:c7:5a:
92:37:0b:e0:fd:f3:94:50:65:bd:3a:f1:7c:85:23:0f:ac:1d:
fc:51:52:cb:e6:4f:75:9d:2c:6a:9a:3b:cc:eb:88:3c:0a:a2:
bf:4f:b2:23:db:ee:b0:62:cd:8d:28:5c:7c:3b:73:ac:ac:d4:
31:64:7f:88:39:85:fc:ff:67:58:7c:bf:08:97:16:ab:27:98:
05:5a:36:18:32:1b:5f:8d:7e:02:5e:48:ad:7c:8a:97:4c:7b:
29:85:2c:98:ce:45:48:30:9e:8e:89:ea:0d:e3:9d:2a:fe:ff:
bc:46:62:07:79:5e:4e:35:f7:f1:05:6b:01:3d:c7:cf:ae:cf:
7b:0f:81:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:34 2025 by rpki-client