Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa
File: 8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa (raw, json)
Hash identifier: azMMVhg2w4dA7zW1m1C8btcCflLBF99Dhhf1wJwlvAc=
Subject key identifier: CC:33:EF:FD:7C:1C:61:2C:F2:C7:97:B6:FC:0A:A5:C8:25:B1:B0:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EAA109AA340A6F859E2036374EE81B086B59C51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:aa:10:9a:a3:40:a6:f8:59:e2:03:63:74:ee:81:b0:86:b5:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0c85b45a56e146bd851ed79dc231a3c214c1677e77a1c49b914c5412d3ebff53, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:03:68:5a:70:73:5a:96:9a:a9:0b:6b:2d:
b5:0d:d2:60:ff:66:d6:0b:2a:47:37:91:59:6e:1d:
d7:7f:02:e5:99:6b:29:82:a5:35:7d:5d:27:92:c3:
ac:61:55:ee:e8:ec:60:94:66:b9:b9:b5:ae:0b:03:
30:10:b8:b9:7b:fc:45:a4:41:42:15:cc:4e:a1:e1:
0e:29:39:1c:02:be:87:9b:9e:46:9b:07:8b:90:ce:
0a:db:50:ff:1e:15:d0:73:11:3e:c0:a2:d5:ec:5b:
92:60:fc:75:85:ca:27:f7:eb:d7:0d:01:9a:93:3f:
1f:3b:96:94:54:8c:ba:d8:8e:9d:95:84:d4:91:3e:
d7:c1:1b:d4:b7:04:d0:8d:b5:a8:07:72:e5:cf:3a:
04:34:d7:a1:e7:1d:c7:ec:9b:e7:19:3d:ae:fe:4e:
46:0c:ee:12:45:01:bd:76:f5:87:a1:7f:07:54:50:
ab:20:11:ea:03:06:9e:18:a6:90:b6:1b:94:6f:44:
84:4f:b0:d6:51:fe:a0:fa:7c:b8:67:e8:11:e7:3e:
f1:29:69:be:87:7c:31:11:dc:7a:15:f3:9b:b0:96:
98:04:b1:8f:fc:82:48:23:16:8a:63:bd:eb:23:9b:
1d:56:22:8e:8a:e2:92:7a:ed:51:c4:98:d2:75:ff:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:EF:FD:7C:1C:61:2C:F2:C7:97:B6:FC:0A:A5:C8:25:B1:B0:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
11:13:65:47:df:a8:a8:98:1a:fb:ac:3f:bb:b9:ea:ee:02:23:
e8:c7:61:f5:0a:20:5a:bf:0e:91:75:d5:55:53:31:01:e5:35:
2c:3f:79:1f:56:89:de:8f:a6:08:ee:83:70:c8:ea:a9:00:06:
a1:d6:ce:ef:ff:07:d4:38:a8:34:1a:d4:4b:fb:a3:d9:d9:a9:
65:b7:bb:15:60:51:25:13:98:15:ac:2c:a7:0b:b5:21:72:11:
18:eb:58:52:0b:d4:c1:7d:d9:21:e1:d0:ab:66:af:79:f6:f4:
a2:31:26:ec:b7:ed:57:52:6b:11:02:9a:e2:84:68:b0:8a:67:
78:b6:13:fe:51:52:cf:68:2b:dc:5b:ea:fe:eb:da:6b:5d:ac:
c1:78:fb:33:58:b2:1c:68:4f:06:72:f3:25:58:c9:df:2a:d4:
22:ed:de:60:1e:8a:ab:8e:83:53:db:12:ac:1c:b8:11:af:a7:
65:fe:77:b9:da:47:5c:77:76:e6:0e:8b:89:8d:e3:a6:c3:fb:
97:96:2a:9e:2b:4a:ed:43:bd:68:01:4e:a0:0d:ed:36:70:d5:
bc:28:28:a6:97:37:ff:c0:df:23:93:23:37:0f:2a:d7:4a:67:
32:99:6b:d0:b0:02:63:6f:8f:76:1b:00:57:7e:bd:45:bb:4a:
74:96:02:d7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULqoQmqNApvhZ4gNjdO6BsIa1nFEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYzg1YjQ1YTU2ZTE0NmJkODUxZWQ3OWRjMjMxYTNjMjE0
YzE2NzdlNzdhMWM0OWI5MTRjNTQxMmQzZWJmZjUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcVgNoWnBzWpaaqQtrLbUN0mD/ZtYLKkc3kVluHdd/AuWZ
aymCpTV9XSeSw6xhVe7o7GCUZrm5ta4LAzAQuLl7/EWkQUIVzE6h4Q4pORwCvoeb
nkabB4uQzgrbUP8eFdBzET7AotXsW5Jg/HWFyif369cNAZqTPx87lpRUjLrYjp2V
hNSRPtfBG9S3BNCNtagHcuXPOgQ016HnHcfsm+cZPa7+TkYM7hJFAb129YehfwdU
UKsgEeoDBp4YppC2G5RvRIRPsNZR/qD6fLhn6BHnPvEpab6HfDER3HoV85uwlpgE
sY/8gkgjFopjvesjmx1WIo6K4pJ67VHEmNJ1/9P9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUzDPv/XwcYSzyx5e2/AqlyCWxsGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhiZmNkMjNiLWJhMmEtNDU2Ny1hMTcwLTQxY2VmMDhhMmExZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/0EMAwDQYJKoZIhvcNAQELBQADggEBABETZUffqKiYGvusP7u56u4C
I+jHYfUKIFq/DpF11VVTMQHlNSw/eR9Wid6Ppgjug3DI6qkABqHWzu//B9Q4qDQa
1Ev7o9nZqWW3uxVgUSUTmBWsLKcLtSFyERjrWFIL1MF92SHh0Ktmr3n29KIxJuy3
7VdSaxECmuKEaLCKZ3i2E/5RUs9oK9xb6v7r2mtdrMF4+zNYshxoTwZy8yVYyd8q
1CLt3mAeiquOg1PbEqwcuBGvp2X+d7naR1x3duYOi4mN46bD+5eWKp4rSu1DvWgB
TqAN7TZw1bwoKKaXN//A3yOTIzcPKtdKZzKZa9CwAmNvj3YbAFd+vUW7SnSWAtc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:54 2025 by rpki-client