Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa
File: 9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa (raw, json)
Hash identifier: qrWDOOQXeCJahw+z7f8jWMTdcA645yzYwuJg+bY2KfM=
Subject key identifier: 5A:08:C4:62:3A:95:3C:98:F0:27:C7:FD:77:BC:18:2D:E6:C1:B2:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D0F524AE3CE4B94539B470BDDB60DFFF30E9EB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:60c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0f:52:4a:e3:ce:4b:94:53:9b:47:0b:dd:b6:0d:ff:f3:0e:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=9de4ee980e8c2361006ef6d9a337aad30f8911439df29d672f2cbc90edd90094, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:5a:37:3f:4b:85:97:9f:68:38:d1:8b:1d:
f2:2e:8d:e4:d6:45:52:8b:54:fe:08:ce:13:ef:e0:
23:e4:b0:20:fd:93:50:3f:28:a6:5c:c3:62:83:06:
08:0c:a0:e9:6b:ac:02:5d:c7:5c:f2:cf:d9:3b:7d:
cb:04:c5:cb:7b:9d:c3:fa:0c:be:bd:f9:1c:ea:8e:
fd:c6:b7:d7:ab:ec:5f:af:75:b9:8b:d7:e7:da:eb:
99:66:cf:79:ae:ea:c3:9c:21:cf:35:75:8e:73:57:
95:a9:26:24:02:e0:91:55:66:72:30:c5:6e:98:43:
ee:86:4f:62:bc:3d:1f:79:c8:c8:28:72:45:15:98:
03:b8:b4:27:4e:92:9b:24:43:3d:3b:46:c3:9d:c2:
aa:04:1e:69:9d:8e:68:5b:ae:22:42:18:7d:a3:c1:
fa:ab:e2:46:e7:2d:b0:4f:e8:07:48:7e:1a:f1:e6:
e5:77:b5:30:7a:92:80:b4:fb:11:52:40:99:06:6e:
09:e5:f7:06:f8:e6:2c:4a:51:66:f5:1c:10:3e:d9:
d0:59:e1:b0:8e:de:a3:36:cb:3d:4d:e8:8b:37:d4:
13:66:10:7f:e1:7d:44:bb:c9:20:14:7b:a9:ad:fe:
8b:cd:fe:5e:fb:f9:10:dd:08:c8:9f:52:c5:e6:02:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:C4:62:3A:95:3C:98:F0:27:C7:FD:77:BC:18:2D:E6:C1:B2:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
c2:3c:22:cb:83:2b:18:b7:13:ac:7f:34:64:f7:cd:f3:56:ce:
df:a9:c5:c3:c5:e2:e7:c2:25:c5:d3:5e:70:44:ed:3e:91:c2:
aa:b9:11:85:d9:93:62:33:47:9c:dc:ef:77:d2:b7:04:a0:70:
74:e4:59:36:40:c8:4b:e8:dc:91:4d:84:58:71:0c:79:11:21:
9a:7c:80:f7:da:99:0a:e7:ba:37:4a:cf:4c:85:48:bb:34:f9:
3f:16:f1:b6:8a:04:db:94:40:ec:2a:87:64:db:f0:cf:67:0f:
33:ae:88:70:36:8e:b9:4c:63:46:66:60:72:9b:93:12:e6:54:
a6:18:4a:b9:b1:a4:1c:2c:8a:17:e4:ff:30:2c:23:e7:10:17:
77:5a:02:92:35:77:a1:34:7c:14:1d:4c:16:45:50:b9:67:b7:
73:3b:09:68:43:00:9b:d9:fc:4f:4e:ef:3e:66:ad:ce:04:42:
ef:fb:99:a0:0c:44:c1:83:f5:82:98:ab:df:af:6b:d6:44:ac:
e0:65:12:08:5b:42:d4:4c:a1:f1:5c:ca:1d:99:92:28:e9:09:
d9:79:97:d7:6b:54:94:18:90:51:23:60:23:af:39:ac:c0:c5:
eb:0c:02:9b:ce:3d:36:85:e4:58:36:a3:10:75:82:67:4f:89:
9d:bb:c1:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:49 2025 by rpki-client