Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/777a9208-f45b-4a4b-9889-9e76109bfd60.roa
File: 777a9208-f45b-4a4b-9889-9e76109bfd60.roa (raw, json)
Hash identifier: EQmCURoE8yqVM1Kl2OUH0kglbVOYlHctEftOO7C1i44=
Subject key identifier: 8E:F3:15:35:D4:29:36:25:51:E3:66:2A:CC:29:2B:F3:B5:F2:03:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7111F617A2E734DB26788A7543F3365CAD89D39F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/777a9208-f45b-4a4b-9889-9e76109bfd60.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff7:5080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:11:f6:17:a2:e7:34:db:26:78:8a:75:43:f3:36:5c:ad:89:d3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=21537eb97cb81e7d2253335012b660ae745101a9227d438c8d9fcb9144262032, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:29:68:a2:0c:84:12:a3:f0:ec:3b:83:f0:
5e:0d:c5:a1:50:33:11:fc:d8:06:8b:24:37:b2:86:
ce:45:5f:b8:0a:38:e1:29:7b:19:f0:b5:4b:b4:36:
a3:ef:81:78:a7:00:0d:b4:7d:ca:78:21:f3:36:1c:
fb:05:cc:d4:72:fd:fa:c4:39:7c:5b:79:a3:72:a0:
53:7a:09:69:71:c1:78:3e:4c:2f:56:87:e2:0c:f4:
72:e2:bd:89:f2:b9:ca:59:0f:37:37:10:4b:8e:a0:
e6:65:16:68:f3:d9:b2:4d:63:94:b0:49:24:4b:43:
6d:e2:24:f8:7d:88:33:37:42:84:e4:7e:98:6c:e4:
4d:19:bb:b5:85:03:1d:fc:06:0d:ba:3c:14:c9:7f:
e1:39:22:a1:0e:91:88:39:88:3f:69:dd:8c:04:71:
c2:6b:7e:cf:19:74:8e:bf:39:30:9d:87:6a:b4:d9:
99:14:76:99:41:e4:aa:3a:03:58:ef:1d:e9:10:ac:
da:e0:03:cb:a5:e2:b8:a9:99:db:86:76:8c:40:f0:
a4:38:34:fc:66:75:1f:49:9c:35:da:0a:f1:b0:ef:
7b:90:57:c8:35:c8:35:dd:83:1f:c3:e1:5a:7a:c5:
45:59:a0:40:16:fa:51:58:02:29:30:8f:44:61:c0:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:15:35:D4:29:36:25:51:E3:66:2A:CC:29:2B:F3:B5:F2:03:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/777a9208-f45b-4a4b-9889-9e76109bfd60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:5080::/46
Signature Algorithm: sha256WithRSAEncryption
c4:73:7c:61:57:ab:f3:86:1e:d3:ff:5f:30:f7:c1:f3:5e:1b:
8d:64:f5:c7:0e:b2:e0:b3:15:dd:cc:04:41:2c:e1:e1:e3:f7:
8f:6d:c7:6c:f9:2a:b8:64:ac:9c:6c:0c:7d:83:30:c1:0c:71:
f6:f6:cf:82:9a:07:1c:e2:3b:ff:20:5e:b2:d0:86:40:a2:5c:
a0:9a:0d:d3:b8:b3:dc:30:e6:09:13:f5:21:5f:1e:a7:a9:d6:
14:a9:87:87:92:f2:13:a1:83:39:ec:4a:42:f4:93:00:81:97:
b0:f1:86:31:25:47:ec:e7:5e:e1:9c:29:88:7b:b6:bb:9b:21:
d0:2a:d6:ca:8f:86:fb:d9:1a:83:d4:8e:b2:06:9f:18:79:b5:
e8:eb:76:df:16:da:6f:77:48:7c:c3:e7:43:72:ee:98:ad:e2:
61:d0:6a:29:8e:ef:9c:e3:6f:21:c3:9e:d8:63:2b:8b:b7:5d:
4e:71:a6:4c:20:bf:98:97:3f:bc:45:20:a1:ce:f3:a1:e7:a8:
12:ea:dc:56:15:1f:32:6e:38:9c:20:5b:d6:b7:c3:36:2f:28:
65:47:c6:68:84:66:b7:0d:de:67:71:f9:6f:3f:b0:d8:12:33:
ab:99:42:1e:af:a7:1d:5c:15:38:52:a0:a2:a7:ae:ea:51:15:
28:81:75:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:32 2025 by rpki-client