Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cb6cefd-286b-439b-ae39-bf2b3410abe8.roa
File: 7cb6cefd-286b-439b-ae39-bf2b3410abe8.roa (raw, json)
Hash identifier: Pennp2D/UPJlKnjVEPzY9GiSje/lAAX+RV0teQGf8Lc=
Subject key identifier: 32:E7:84:8A:77:2C:3C:E7:1C:4D:40:B4:E1:E1:8C:10:16:F7:27:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F11F1C992EC38CC930DD87157EFF173E0BFB352
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cb6cefd-286b-439b-ae39-bf2b3410abe8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2f:4800::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:11:f1:c9:92:ec:38:cc:93:0d:d8:71:57:ef:f1:73:e0:bf:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2a32f61269cd5bcf95bd5cce8918a7cc70e845d0075e480582ec76fee8ac5b39, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:9c:dd:cc:a8:bb:63:48:19:f0:de:30:fc:
e6:92:25:92:db:03:96:0e:fb:21:51:a0:ca:63:61:
c5:eb:0f:99:ac:3c:65:7d:1c:92:5b:66:fc:11:80:
f4:7a:15:14:3d:2b:e9:cb:33:22:15:19:f8:2d:f0:
86:59:8e:45:d2:a8:60:cf:ea:de:b0:13:7b:ba:df:
69:b9:f1:c3:1b:0e:a7:94:0c:86:b9:8a:c3:5a:a8:
fe:cb:b3:c2:d5:a7:0e:04:8d:e3:ef:c8:1e:e2:c5:
9f:b1:1a:94:86:6d:24:c1:5c:7c:d0:9e:08:6c:60:
20:7f:37:f1:64:cc:21:15:04:72:42:8e:57:7d:53:
12:04:e1:20:5f:c6:26:61:78:cd:5a:1b:30:90:d2:
1c:d9:15:13:b1:f0:b0:c5:39:d3:26:de:d1:b5:7a:
6e:37:a2:31:c6:08:3b:c2:11:ac:b2:fa:4a:84:d5:
0b:ce:20:96:c6:bc:b3:59:da:13:af:8b:a1:e1:3e:
0c:35:90:b9:a9:34:69:05:fe:0f:65:a0:1c:09:6a:
d5:53:c7:48:07:9a:cf:33:93:a8:64:a4:ec:bb:29:
de:95:0b:16:6c:58:9b:69:f9:ae:71:ba:b0:35:b2:
12:19:3a:10:b6:00:3b:d2:ad:d6:ec:bf:11:5e:84:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:84:8A:77:2C:3C:E7:1C:4D:40:B4:E1:E1:8C:10:16:F7:27:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cb6cefd-286b-439b-ae39-bf2b3410abe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2f:4800::/37
Signature Algorithm: sha256WithRSAEncryption
15:2e:01:ec:19:72:9a:62:14:44:65:54:ef:a7:81:8c:26:2e:
6b:06:6a:a7:ab:62:b6:72:4a:b6:d7:70:29:8b:f1:04:3b:9b:
ab:35:4f:5c:77:9c:31:90:24:46:62:2c:e5:f4:9e:9e:74:47:
da:46:cb:89:80:06:d3:bd:26:7e:24:04:7d:f7:75:ac:3d:d4:
bd:0e:b1:2e:35:56:51:ac:a0:d2:41:d5:56:26:f5:70:90:50:
69:ed:ce:2e:68:bb:b7:e8:3a:7f:1e:89:9f:f0:33:75:8b:5e:
82:28:5e:d7:a5:2c:dd:96:cc:f2:ef:f4:3b:c9:43:ee:5e:c0:
4d:23:62:6d:62:6f:1f:40:1f:eb:a0:c4:df:a7:c5:c6:e7:fe:
c2:6c:07:9d:66:52:be:8f:cc:c2:ed:db:1b:08:6a:40:46:a6:
cb:90:f1:05:72:52:dc:cf:c0:0f:48:e6:42:93:a7:3c:bd:40:
0e:f7:ea:e5:7c:8c:e2:f4:c4:9e:b2:8a:ab:fd:76:c4:56:32:
60:9b:64:e6:eb:f8:55:ee:ae:73:19:ba:ad:72:7d:2f:f8:f1:
a2:b8:4d:52:30:52:ec:3d:bf:70:fa:52:fc:87:c2:5f:a7:b3:
14:41:41:93:0b:e7:a5:8f:6c:b3:ae:06:24:5c:6a:94:8b:91:
f8:07:85:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:40 2025 by rpki-client