Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
File: 5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa (raw, json)
Hash identifier: i+h7Ku9h5SeTKe/dE0y+DLO7LI+VV1xtHnPDWgZAvwI=
Subject key identifier: 3C:73:51:7A:09:A4:AA:92:07:2D:AF:E1:9A:97:A2:BC:A9:07:C5:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A66B9EEAB6A9D52A996A5ED8CFC9A8E9DBE5EC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:66:b9:ee:ab:6a:9d:52:a9:96:a5:ed:8c:fc:9a:8e:9d:be:5e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=48a2d04702f4dcd2476e47cdbfd1a265b118c7fb9a2ba18393a23332333f5ea2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:81:94:79:da:f3:3a:30:92:9f:70:76:6a:
d7:ef:af:3c:fb:6d:3a:cf:14:1d:06:58:64:75:78:
ab:ee:b9:75:64:60:24:42:28:d2:ee:6e:60:c8:03:
2e:d3:9d:b9:10:69:38:9d:06:9c:6d:29:87:21:7c:
ca:cc:93:a2:0d:7c:3b:32:19:9b:ff:18:80:f9:a7:
57:1b:57:3b:22:2b:14:11:56:9d:ae:f3:cc:48:c4:
e1:f9:02:9d:9c:85:ad:9d:c4:29:38:f1:93:b2:7a:
bd:09:f0:d7:c8:9f:de:73:c7:2f:b2:b1:aa:ee:98:
3f:51:18:5f:73:6d:60:e6:a7:7a:4c:56:2e:8a:1c:
8f:2e:07:bf:1b:8e:8e:70:fe:47:78:77:30:6b:be:
4a:68:33:89:2b:3d:08:80:29:6f:fc:1f:2a:12:c4:
14:af:be:4c:68:67:d7:2e:eb:ef:7c:c5:ba:df:69:
88:4d:c0:42:b1:0a:9f:fc:6b:bd:d9:fe:4c:17:33:
64:3b:1c:4d:eb:ba:19:73:85:7a:f8:aa:15:0e:f9:
2a:e2:31:f3:3e:07:bc:40:4a:f5:a4:d1:17:04:79:
9a:a8:7c:8e:d1:4f:5e:e3:89:09:fa:c2:93:f9:af:
41:cb:f0:3c:75:7e:a2:b4:8c:d4:70:d3:f8:68:35:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:73:51:7A:09:A4:AA:92:07:2D:AF:E1:9A:97:A2:BC:A9:07:C5:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:8000::/40
Signature Algorithm: sha256WithRSAEncryption
02:a2:2b:9e:95:be:6e:ec:06:73:3a:b6:53:5b:bc:99:37:50:
a8:e0:7b:bf:3d:49:7a:29:20:cf:06:34:68:c4:44:f9:6a:fa:
43:95:e4:13:bb:82:f4:0f:cb:8e:77:a1:b8:24:e8:fb:ba:51:
6c:18:28:36:2d:4f:d7:2a:36:9b:fe:ec:68:41:c4:2f:d0:9a:
8a:85:04:ab:38:58:a6:b1:d4:7c:67:4a:c3:a7:ba:1e:1b:b0:
10:39:2e:f1:f4:26:cc:a9:1b:56:e7:3e:3c:9a:a9:4d:fe:f4:
a4:ef:9c:1d:ee:40:59:96:da:83:36:f2:97:46:19:b6:fe:5d:
2f:60:6e:03:4e:39:35:91:11:43:8f:b3:6e:40:09:b7:5f:0b:
89:23:30:ff:75:63:89:37:01:d4:c2:71:8c:04:7a:3b:d0:80:
4a:11:d8:78:e3:dd:30:76:1f:bf:87:07:9e:d9:6f:33:da:0f:
27:6a:72:ea:c1:18:74:44:ab:20:51:1d:e4:eb:78:56:04:ff:
75:ed:f9:1c:bb:12:8f:d5:58:c5:df:dc:ca:f7:94:37:09:7e:
83:3c:74:bc:e7:ce:a4:4a:c5:6a:d2:8f:44:62:03:41:c2:46:
6d:e1:03:7a:9e:62:06:c1:24:bc:11:b4:82:7e:d3:49:b3:90:
b9:ca:b8:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:20 2025 by rpki-client