Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c87987a-271c-4011-a5f1-1d7344a7455a.roa
File: 6c87987a-271c-4011-a5f1-1d7344a7455a.roa (raw, json)
Hash identifier: iDUyZlIX47OAh7x30JOPXmcNEV0ao6Ijv07pNCUzXQw=
Subject key identifier: 14:BF:1B:AE:85:DC:AB:C6:44:C3:F6:5C:B3:D7:99:35:07:C3:E1:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 494265AE9EB273D0B935C955A534C9308945A54C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c87987a-271c-4011-a5f1-1d7344a7455a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:4000::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:42:65:ae:9e:b2:73:d0:b9:35:c9:55:a5:34:c9:30:89:45:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6854b5b64f3211a3d33b6268d3a9d9146372ff4b8fc283cb174a231c2e95658d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:19:0c:94:3a:41:27:5a:5c:b0:ee:31:6c:
16:10:d9:95:f4:51:bd:b7:a6:13:56:a9:f9:e5:0d:
5a:dc:84:2e:af:e0:6f:c8:73:d6:59:ec:3d:37:a5:
a0:69:68:5c:70:7d:48:e9:23:6a:9b:50:1a:7f:cd:
4f:e7:e4:23:be:2f:03:22:39:1a:37:9e:b4:30:08:
1d:12:05:60:71:ef:d0:75:cd:ee:46:65:50:cc:27:
30:8e:a7:99:60:2f:d2:79:07:1b:62:1e:7b:29:2e:
26:dc:df:2d:b3:08:68:7d:85:ff:23:de:25:83:cc:
fd:06:cf:ed:1a:7b:43:c7:77:92:de:a3:55:48:1a:
5e:b8:aa:e8:13:03:16:6e:6c:9f:ca:7c:e0:17:6d:
d7:3b:fe:95:73:e4:46:7d:ab:f2:bf:e3:1b:2e:07:
cb:1c:d1:9f:be:35:cd:a8:41:9b:dd:1a:9c:53:27:
ea:85:cd:b0:c7:1e:93:e1:bd:75:2c:7c:7b:18:88:
eb:88:48:80:88:fb:16:2f:06:ea:78:69:68:76:55:
98:a8:cc:ca:f1:50:39:58:a7:d8:3d:39:d5:eb:73:
45:a5:a4:73:67:fb:84:3b:03:20:a1:a9:28:c2:b4:
37:0b:56:5c:5e:a3:9c:06:5f:1b:48:85:64:a8:cf:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:1B:AE:85:DC:AB:C6:44:C3:F6:5C:B3:D7:99:35:07:C3:E1:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c87987a-271c-4011-a5f1-1d7344a7455a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:4000::/39
Signature Algorithm: sha256WithRSAEncryption
69:5f:b2:3c:47:af:34:4c:b2:15:24:55:31:87:ba:b3:37:be:
5a:8d:c5:7e:e4:fa:46:26:01:48:c3:20:74:bb:eb:8d:78:a4:
b3:62:4f:57:19:80:aa:cd:d5:7c:41:68:fe:16:cb:af:54:a2:
51:56:9c:4a:ff:15:3d:59:29:f5:72:bd:db:1e:20:18:48:96:
79:8c:68:2d:6a:af:52:70:a8:50:04:47:2d:63:9b:13:45:c9:
db:1c:ca:ff:ec:9e:40:89:ad:98:2b:91:df:d2:a1:d5:4e:2f:
17:b1:70:3f:ce:5e:c7:a8:c8:42:bb:0c:4c:08:10:b1:2c:fd:
b3:64:fd:9d:42:a3:28:f6:17:d9:1d:a1:ca:3e:1d:43:49:37:
1b:16:79:f5:f5:c8:0b:e4:d7:0c:c6:87:f2:1a:aa:78:9a:80:
e7:94:30:9e:51:07:fa:49:39:b0:af:dc:59:9a:1d:a3:e5:80:
64:2a:15:c6:17:e4:7d:a0:6b:0e:2e:81:e8:69:44:07:98:59:
43:eb:28:df:dc:06:4a:86:11:cf:e7:97:79:56:66:a8:2f:fd:
a3:3c:ba:98:86:fe:c5:88:1f:7e:e7:d9:15:8a:ee:c8:ab:99:
17:cf:40:c7:e4:c7:1b:06:6c:64:a3:cd:d0:d8:79:fb:69:a3:
b5:35:ac:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:51 2025 by rpki-client