Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b3e168-0fa7-4da6-8746-4089ce7254f1.roa
File: 79b3e168-0fa7-4da6-8746-4089ce7254f1.roa (raw, json)
Hash identifier: A4KDXXldkT3O9SUeNg4SWnM7JM/O9AwRXhbAtOcLets=
Subject key identifier: 4C:80:F1:7C:DE:C7:DD:68:DA:D4:24:E6:62:EB:A9:EF:5C:33:E9:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 192CC0BB2E40C8483C546D517B05653DE10EB925
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b3e168-0fa7-4da6-8746-4089ce7254f1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f15:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2c:c0:bb:2e:40:c8:48:3c:54:6d:51:7b:05:65:3d:e1:0e:b9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3f5f70a4d8dd478322a825258c61cc6c3c4520243450c8232ca26c3d3234425e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:30:06:6e:33:33:47:81:c9:12:b2:d6:93:
30:68:32:ac:89:37:83:17:9c:9c:88:e2:b3:c4:f5:
50:74:07:a6:90:30:cb:5c:c4:cc:24:64:c9:33:50:
a7:2f:e2:20:2a:23:47:f5:e7:0b:c5:e7:72:bc:4b:
3d:be:db:fa:a2:f1:7e:c9:a5:3b:69:98:75:db:96:
2d:be:8d:4d:a7:b6:51:85:8b:b2:41:b5:55:14:32:
04:5a:18:48:30:40:f7:28:4c:0d:b0:39:3b:8a:03:
44:03:ef:28:f5:1f:99:c3:0e:7d:b8:44:84:db:c1:
d9:58:2a:8b:5a:9d:3c:62:b1:bc:15:36:58:0b:3a:
f4:b3:03:d4:24:76:d9:af:4c:72:49:45:ca:e4:c7:
d5:88:ce:30:9a:82:17:99:02:87:83:72:d9:41:44:
60:dc:fa:20:ae:69:88:7c:4f:fc:cf:a6:91:02:b8:
57:1b:e1:ca:9f:cd:00:a6:a8:2d:4b:9b:94:c2:25:
3d:3f:e6:e7:00:08:0e:02:20:a1:8f:63:18:24:fb:
ff:78:06:0e:da:4a:0b:44:95:55:a6:97:68:45:22:
e6:68:85:ae:f5:36:69:55:60:10:ae:0e:6d:a5:ec:
cc:a0:e7:41:12:de:29:c4:c4:dd:28:df:99:72:12:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:F1:7C:DE:C7:DD:68:DA:D4:24:E6:62:EB:A9:EF:5C:33:E9:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b3e168-0fa7-4da6-8746-4089ce7254f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:400::/38
Signature Algorithm: sha256WithRSAEncryption
d5:6b:b9:14:96:9b:1f:92:36:45:75:24:27:57:95:79:b8:a3:
a3:16:1c:89:02:f6:2c:9a:70:f9:c4:a6:d5:32:30:f5:8e:ed:
5f:8f:7a:f3:e0:58:fe:de:64:e5:e4:20:96:98:b0:e7:4d:c6:
b7:f8:ce:ef:c2:24:7f:cb:f6:67:cd:6b:80:87:87:84:1b:67:
eb:27:5d:f2:22:22:bc:66:f9:27:7b:3d:0c:c9:ce:17:2e:1e:
50:d1:e5:11:fe:72:4d:ee:de:40:ff:ca:1e:c5:fd:dd:95:df:
06:47:d8:27:64:5b:89:b2:fe:69:b1:4c:cd:60:22:99:8d:ea:
0e:ee:11:ca:29:28:6b:67:20:96:88:ef:f8:9b:16:6c:69:60:
76:9f:b5:41:11:ab:d8:3d:06:8a:d2:c6:cc:a7:37:eb:58:42:
08:70:96:1f:cd:7d:d7:d4:2a:06:dd:77:09:60:bb:04:98:f1:
f6:c1:1e:57:67:ac:b6:a3:33:ed:96:c6:73:48:b7:cb:3c:6f:
0a:4f:06:cf:7b:63:ee:c2:d1:61:f2:8e:87:44:54:27:cc:e9:
29:10:e0:e6:86:20:df:8e:94:8c:ac:5a:fd:39:c8:62:2a:08:
a2:40:84:f5:05:d6:dc:2d:8c:d2:f6:60:49:3c:29:c2:b8:bc:
cd:c2:68:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:11 2025 by rpki-client