Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72a7c231-dc49-4e1e-8a38-37649f06c626.roa
File: 72a7c231-dc49-4e1e-8a38-37649f06c626.roa (raw, json)
Hash identifier: OGtzGQI2kehyfs3Ol4QIam4vCbB5RyaDDTwMdFaDHL0=
Subject key identifier: 1D:B8:86:56:2F:18:77:89:FB:FA:91:BD:13:39:67:99:CE:D5:7A:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 561BBF409FC137B87493E5E6AE9DD7DE523032DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72a7c231-dc49-4e1e-8a38-37649f06c626.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f38:7480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1b:bf:40:9f:c1:37:b8:74:93:e5:e6:ae:9d:d7:de:52:30:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3225c00f3d68c6ff439205d16b9ab37fbaf0f3efab8f23acdf9761ebac58bee3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:0a:83:32:25:c8:a9:20:3c:19:78:e9:05:
90:95:d0:8d:3b:44:d8:18:ac:73:9f:38:fa:59:04:
57:23:a8:97:ca:c6:0e:22:c5:9f:e2:4f:78:74:55:
64:a0:7b:ed:9f:30:f1:6f:c1:05:c0:3c:fb:19:b9:
fa:1b:de:e0:1c:ba:c2:eb:fa:1d:3c:02:85:75:5e:
d1:22:d4:48:8b:9e:80:a9:97:71:9e:91:c3:2c:7a:
0f:5b:91:b3:b8:3b:d2:98:68:17:a8:44:da:9c:09:
a7:3b:cf:42:a7:50:91:0a:55:d8:34:36:d8:b3:fa:
f3:9a:c7:2a:35:71:d5:ad:27:f7:18:1f:8c:22:27:
de:d7:6a:bd:da:99:5d:61:d1:ca:08:cd:2a:cd:0d:
e6:59:d7:6f:e6:25:15:bf:d3:43:3b:74:f2:4b:2f:
67:d0:dd:db:78:32:3f:53:4d:69:d6:a9:6b:62:fa:
67:90:9e:82:e7:17:78:06:ac:64:4d:69:0f:fd:a6:
52:1f:8a:82:3f:21:16:ba:db:dd:ae:7e:3b:64:3e:
8a:0c:9e:d6:ac:82:6f:c7:2e:f9:cf:2a:e3:13:7f:
d3:d7:6c:22:82:c9:c6:1a:28:cc:5e:83:8b:cf:27:
ac:be:b6:98:2b:f7:7b:87:2a:8c:27:0a:29:62:95:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:86:56:2F:18:77:89:FB:FA:91:BD:13:39:67:99:CE:D5:7A:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72a7c231-dc49-4e1e-8a38-37649f06c626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:7480::/48
Signature Algorithm: sha256WithRSAEncryption
48:1b:d2:07:76:f3:36:c4:36:5b:67:50:62:22:a4:8a:aa:fa:
71:9f:8b:42:35:dd:76:6f:70:14:eb:95:d3:9a:f2:82:1d:16:
5b:2b:3d:11:c8:72:3c:5c:69:04:4f:46:a1:e3:92:42:8f:b0:
f1:7a:ce:8c:01:5d:6f:d1:dc:b7:49:1b:dd:47:f5:cc:e5:c5:
23:73:87:63:5d:d3:a1:1b:73:78:86:2e:c0:28:84:8c:14:6c:
7f:3c:fc:3c:04:c7:97:76:da:33:98:ce:8f:3d:f7:57:4a:10:
c4:97:77:af:4a:e2:d4:ee:b2:9b:1e:1e:c4:89:07:07:48:2b:
0f:21:e2:2a:cf:47:e4:20:93:43:80:52:30:d4:46:36:aa:1c:
c0:b6:ce:11:2e:94:0f:ee:7a:a2:f2:a0:94:f5:85:77:5b:d9:
4d:30:9e:dd:a3:fd:b1:95:ac:36:64:f9:ee:0a:3b:37:f1:51:
98:ce:16:46:a4:56:5a:37:08:9e:3b:8f:69:e5:e5:26:55:c1:
2b:a6:ce:c6:6a:92:86:ab:0d:11:4b:69:a5:59:c5:61:a5:8b:
90:84:ff:f4:56:36:b6:72:3a:05:81:66:c3:c9:7e:bb:0c:cd:
7b:78:d5:eb:60:75:eb:15:04:55:6f:41:e0:be:15:6c:ac:df:
3f:cf:a4:9c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVhu/QJ/BN7h0k+Xmrp3X3lIwMtowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjI1YzAwZjNkNjhjNmZmNDM5MjA1ZDE2YjlhYjM3ZmJh
ZjBmM2VmYWI4ZjIzYWNkZjk3NjFlYmFjNThiZWUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDETgqDMiXIqSA8GXjpBZCV0I07RNgYrHOfOPpZBFcjqJfK
xg4ixZ/iT3h0VWSge+2fMPFvwQXAPPsZufob3uAcusLr+h08AoV1XtEi1EiLnoCp
l3GekcMseg9bkbO4O9KYaBeoRNqcCac7z0KnUJEKVdg0Ntiz+vOaxyo1cdWtJ/cY
H4wiJ97Xar3amV1h0coIzSrNDeZZ12/mJRW/00M7dPJLL2fQ3dt4Mj9TTWnWqWti
+meQnoLnF3gGrGRNaQ/9plIfioI/IRa6292ufjtkPooMntasgm/HLvnPKuMTf9PX
bCKCycYaKMxeg4vPJ6y+tpgr93uHKownCililZc5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUHbiGVi8Yd4n7+pG9Ezlnmc7Veq4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcyYTdjMjMxLWRjNDktNGUxZS04YTM4LTM3NjQ5ZjA2YzYyNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84dIAwDQYJKoZIhvcNAQELBQADggEBAEgb0gd28zbENltnUGIipIqq
+nGfi0I13XZvcBTrldOa8oIdFlsrPRHIcjxcaQRPRqHjkkKPsPF6zowBXW/R3LdJ
G91H9czlxSNzh2Nd06Ebc3iGLsAohIwUbH88/DwEx5d22jOYzo8991dKEMSXd69K
4tTuspseHsSJBwdIKw8h4irPR+Qgk0OAUjDURjaqHMC2zhEulA/ueqLyoJT1hXdb
2U0wnt2j/bGVrDZk+e4KOzfxUZjOFkakVlo3CJ47j2nl5SZVwSumzsZqkoarDRFL
aaVZxWGli5CE//RWNrZyOgWBZsPJfrsMzXt41etgdesVBFVvQeC+FWys3z/PpJw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:25 2025 by rpki-client