Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa
File: 57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa (raw, json)
Hash identifier: 8MWHNQmvr/BddMdLdUga8+LH5kovxit+6dWZXsJZV0o=
Subject key identifier: BC:87:1E:41:B0:4F:EC:0F:FD:D2:01:5B:05:24:A0:B8:BE:FD:98:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DDC40A7389D95F98D7FD9B0B7B618992284B091
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:dc:40:a7:38:9d:95:f9:8d:7f:d9:b0:b7:b6:18:99:22:84:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=f3e64ec6d5af8cabb5c29897c8065cc324ca6cc08b167cb4e80c6957cb2b672f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:7b:b1:b8:6f:6f:18:5b:f0:b7:01:ee:18:
c1:b8:da:90:e7:48:26:43:83:f1:6b:74:9d:0b:f3:
89:fd:a9:b0:e9:bd:c6:94:63:1f:b2:1b:ac:29:bb:
54:df:d2:00:61:99:38:eb:67:79:88:51:5f:11:b0:
b0:74:29:9b:c3:8f:ef:a1:6d:d1:32:e5:2f:8d:69:
c0:c1:cd:6b:1d:4e:fb:76:e0:fb:b9:a7:c8:8e:0d:
2d:bb:fd:79:04:33:aa:54:b4:10:7b:ad:65:ea:7b:
39:61:c3:65:44:94:76:98:58:be:14:2e:73:28:3a:
e0:10:91:03:6d:16:09:ea:0f:a2:61:93:1e:08:96:
1b:9e:c3:a3:a3:ee:35:9b:9d:1e:59:64:8c:16:37:
96:3d:08:1e:43:c3:bc:e7:ec:99:f3:84:ee:b5:a0:
6f:b5:92:19:fa:84:bb:88:e1:b4:ec:9c:c9:53:4d:
3c:6a:e3:ba:a9:ab:76:e3:ec:c1:1b:09:94:b7:35:
3a:3f:71:4c:9d:74:63:eb:03:16:2f:28:dd:fc:27:
1f:a2:8d:ba:b2:6a:ef:90:c0:ea:15:91:c6:98:ed:
cc:c0:6e:55:ee:dc:f3:f5:78:63:53:bb:66:93:81:
2d:49:81:3f:6f:8f:3a:8c:1f:11:be:ac:cd:65:7d:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:1E:41:B0:4F:EC:0F:FD:D2:01:5B:05:24:A0:B8:BE:FD:98:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:5000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:d8:05:29:d1:02:e0:66:5f:b0:e8:08:40:96:19:6f:8f:20:
3d:3c:0f:fd:de:b4:ef:a9:f8:58:ea:b9:5c:51:c9:0e:94:f7:
c7:f9:0a:17:59:9f:23:b0:d9:b3:bc:b3:ca:91:86:71:c3:81:
2d:b6:73:cb:d6:a9:dc:63:cf:5f:58:8e:bc:c7:83:04:e2:0b:
98:ae:88:f7:7c:4e:5d:cc:52:b6:ea:1c:d6:75:d4:b8:40:bb:
c7:81:ea:fe:dd:18:cd:1e:57:09:ce:2d:64:94:d1:c8:3f:96:
da:ce:49:4c:07:29:a6:eb:04:c0:7d:8f:d2:fb:4c:ff:47:9a:
b7:87:30:3b:9c:29:6c:05:9d:e2:2f:06:8c:d5:64:c6:03:64:
c2:c4:cc:eb:37:6a:b8:f7:31:92:cd:0e:fb:38:84:f5:e9:db:
86:97:c5:88:b6:bf:1c:01:f1:e5:37:f2:8c:73:78:a8:15:c3:
dc:93:e4:2a:21:50:64:34:26:fd:3a:1c:5c:49:8c:a5:b5:64:
85:03:51:34:f1:b3:57:74:e7:e8:49:d8:89:ce:74:d0:5c:27:
b1:13:7b:ac:fa:88:e7:f0:d5:d7:6b:7b:3c:ed:88:a9:e5:3a:
21:5c:96:03:3b:81:92:da:53:25:5f:8a:d4:41:a4:64:e1:cf:
c1:56:d7:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:30 2025 by rpki-client