Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8315ed5a-fca6-4bad-8857-5d7adaa65a25.roa
File: 8315ed5a-fca6-4bad-8857-5d7adaa65a25.roa (raw, json)
Hash identifier: zi1EHRg04AuzDc4uHRoxmzUOZqONdFzupr2fBh6gQHc=
Subject key identifier: 25:63:A4:0E:1E:38:0E:CE:A8:00:AB:F7:5B:1E:8B:8E:3E:89:DD:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A5BACABEA9F212442B164072FDE80B001B47C13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8315ed5a-fca6-4bad-8857-5d7adaa65a25.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:e040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5b:ac:ab:ea:9f:21:24:42:b1:64:07:2f:de:80:b0:01:b4:7c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=4933d238128e1d4a5639938cd7f8bc85fa072b9a5d496630ff870da1ed5e7c43, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:ab:55:eb:eb:3e:5d:32:9d:54:52:50:e2:
66:fc:88:10:8e:63:a8:4e:bf:58:5f:db:22:b0:66:
86:c4:dd:69:b6:b4:bd:d0:d6:2c:5a:56:6a:44:b2:
69:b3:a6:9e:37:cc:13:b2:79:fd:7d:a8:2d:89:f5:
a5:5a:57:e9:f6:a5:91:af:d4:6c:09:e3:98:fa:63:
11:a5:1b:4b:d7:88:3b:d1:32:94:ce:d9:73:39:ff:
46:dd:bc:92:b7:fe:7e:11:b6:25:10:1a:33:b4:6d:
07:87:77:b5:24:d9:be:3c:de:7a:99:b9:bc:f0:f1:
97:ed:89:7b:2f:48:c0:e7:41:64:89:e4:6d:18:da:
d0:8a:9d:60:fa:72:df:c8:38:8f:80:ce:b8:42:62:
b4:bc:bf:88:4b:34:2a:d6:54:b8:24:2a:07:e3:4d:
d4:21:34:2c:25:ce:4a:4b:d3:2e:de:54:a4:f3:eb:
23:7e:0e:8b:eb:f6:64:bf:73:fa:a4:da:42:88:fc:
7c:32:19:c9:71:47:b8:d7:55:09:b8:f8:c6:56:c8:
0f:db:68:ea:bf:b8:5f:dc:c7:5b:72:e6:14:62:64:
c3:22:79:bc:ca:f4:e3:79:b6:2a:ee:f5:1b:d0:06:
65:e7:ba:28:07:57:33:c8:14:21:8a:c0:14:dc:a4:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:A4:0E:1E:38:0E:CE:A8:00:AB:F7:5B:1E:8B:8E:3E:89:DD:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8315ed5a-fca6-4bad-8857-5d7adaa65a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:e040::/46
Signature Algorithm: sha256WithRSAEncryption
25:4e:ea:40:34:15:e1:5b:ed:11:5a:78:b1:4b:e5:2b:6e:c0:
9c:c0:c9:d1:58:f1:1f:38:72:8a:fb:97:f3:4d:b1:cd:cc:2f:
73:1a:c8:5b:7a:39:f8:b6:6f:dc:2f:46:8b:e7:8e:86:28:a5:
03:3f:4d:ae:4c:74:9c:17:91:a6:0c:51:db:61:0e:9f:3c:df:
a7:78:f8:fd:ec:9f:c2:26:7f:6c:f9:d0:6e:98:85:ae:84:8c:
e9:6e:af:84:09:73:c3:b2:3f:e4:d0:09:bb:d2:9b:f7:74:97:
e1:6d:9f:25:74:84:f7:e8:6d:46:72:5f:d3:8f:d3:3d:80:2b:
ea:63:0f:dc:0c:96:77:e6:21:01:87:a7:85:ef:d9:c6:51:87:
2e:5e:08:7d:82:e5:1e:d7:23:87:4d:43:76:ca:8c:69:6c:76:
a2:ba:88:58:64:d5:70:c4:9d:9d:29:e8:be:bd:3c:72:69:1a:
54:f2:00:3a:5e:36:bc:7e:2d:49:bb:c5:4b:c6:57:ad:05:3d:
29:bf:cf:2f:28:69:fb:15:fd:ff:1f:88:27:0b:2f:61:d8:6f:
30:54:22:c7:fa:78:27:e0:08:1b:be:3c:3b:05:6f:9e:69:11:
c5:af:b8:d2:19:ec:c9:f1:e5:38:95:cb:b5:8b:96:6a:99:a2:
14:00:e0:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:29 2025 by rpki-client