Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa
File: 449a3cb0-095f-4360-86c2-46dba2beaf65.roa (raw, json)
Hash identifier: BRFQWlNeI6hxsyV87ZFb7eTM3gjfuzRK+8MHuRpC3ps=
Subject key identifier: DE:FD:E2:C9:21:F3:10:B3:42:21:58:CF:14:17:42:80:82:D3:B5:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09A7D3A3C0571AC8D734171A48BBE9424B1DC4ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:3440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a7:d3:a3:c0:57:1a:c8:d7:34:17:1a:48:bb:e9:42:4b:1d:c4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=49f7b52e4811ae103cb2db192055b5d5a7e5572f77ec840fba37c9b68d479fca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:38:43:d9:7a:a1:78:2e:79:30:2b:15:04:
b7:ae:db:ac:68:52:ba:0d:4c:28:b0:ff:84:ec:72:
5e:36:82:5f:fd:d6:41:70:e9:13:d2:79:8f:e2:ef:
07:b0:b4:f1:e2:76:80:0b:10:c7:7a:80:6b:b0:76:
19:d3:58:29:cb:ff:e8:b2:99:29:98:14:31:1d:a6:
73:a5:7a:eb:88:10:b4:bb:ba:1e:0b:f1:c1:47:51:
ef:cb:d2:a9:52:b9:58:03:1f:72:90:e9:e7:9c:99:
e4:97:d5:20:3f:d3:17:71:0d:56:f2:d3:09:f2:7a:
9c:95:74:03:fc:28:db:cd:87:c6:35:9b:31:a9:2d:
8e:29:83:8a:53:d1:80:93:01:d0:8b:ef:d2:9b:ce:
51:32:d3:9f:8f:77:ef:d3:9c:28:eb:c3:79:41:56:
1d:4d:af:91:1c:08:2d:b1:df:4c:4f:bb:05:f7:b4:
d1:28:5b:60:d5:ca:67:5f:5f:e4:c8:9f:d9:51:cf:
93:10:17:6d:ed:f8:90:93:fd:05:14:bb:aa:3c:93:
8a:20:e5:e4:03:28:63:f9:f5:ad:15:d1:d9:b3:8b:
95:5f:a1:27:dc:61:a4:5e:03:68:f9:4a:d8:29:07:
d8:da:48:a3:2e:28:cf:69:e8:b5:f3:fb:12:21:16:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:E2:C9:21:F3:10:B3:42:21:58:CF:14:17:42:80:82:D3:B5:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:3440::/48
Signature Algorithm: sha256WithRSAEncryption
9e:b9:b9:81:c8:b7:4f:e3:d1:8c:25:29:49:db:76:d5:b5:01:
00:b3:ec:13:ec:96:9e:80:b1:2e:95:b1:76:9c:15:22:1a:a4:
03:af:6a:46:77:83:36:40:39:1b:86:d5:cf:da:3d:44:2e:0f:
cb:ff:d9:3e:89:78:dd:ef:02:fb:a6:ff:25:1c:47:3f:36:15:
30:ca:bd:9e:17:dd:85:24:07:3d:d9:d8:f6:04:1f:c7:d5:a9:
f2:26:dc:98:3e:38:91:c6:52:5e:de:1b:6f:d9:ca:0d:6f:ef:
fc:7b:3d:12:9c:a4:b1:70:c3:19:1f:45:14:ca:a1:9c:8a:0a:
0d:62:ba:1e:5a:85:21:e6:62:7a:38:7a:50:12:9d:34:20:5e:
91:d3:f3:ba:14:87:93:42:87:42:88:12:34:7b:13:48:47:35:
81:6c:e6:c6:90:c4:f9:be:fc:c7:17:d4:26:d6:8b:c9:fc:f0:
1b:2c:c7:9b:10:40:13:00:d9:80:2e:0b:73:32:27:b0:6b:a8:
c7:cc:ff:d6:9b:0b:fa:ae:c1:2a:d7:b3:b9:b5:eb:f6:75:44:
d5:8b:cc:da:17:e0:d8:08:79:39:be:3f:19:8a:10:8b:b0:33:
50:b9:b5:a6:81:2c:8e:2a:7d:2b:81:d1:40:64:94:a3:3b:18:
87:74:2c:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:12 2025 by rpki-client