Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
File: a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa (raw, json)
Hash identifier: iDQwdVGKnrX3MYWNp6Yh3IxOMWCW75618sFRlTWnLow=
Subject key identifier: BF:16:9D:4B:B9:CF:01:A2:2C:49:F5:B6:F0:55:4E:CB:C8:C4:C8:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 575D850208FE77E079B98BA00C7A55EC311A2FD4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f32:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5d:85:02:08:fe:77:e0:79:b9:8b:a0:0c:7a:55:ec:31:1a:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=e96a3db047a5cd3098ebaeffad1f1327bcc1cf94b8b16698eec9cde384554c2d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:12:fd:a6:b7:ce:b3:97:9f:ee:6d:ad:b7:
95:06:5e:20:8e:d5:c9:0f:9f:e9:4d:bb:26:c6:47:
27:2d:9f:3c:77:9a:c7:16:26:73:52:3d:9e:24:57:
49:f8:9b:73:13:5c:d4:38:69:76:40:10:68:62:08:
4a:70:5a:bb:60:97:eb:1f:b7:ba:46:5b:68:5c:fc:
33:0f:2e:10:e5:db:a2:56:34:ce:ac:18:b5:a3:30:
0e:a1:73:fa:ea:0a:a0:67:7f:1d:13:52:f3:41:fc:
29:b7:bf:04:55:e0:c3:85:28:4e:c0:a6:8c:b5:d3:
33:d7:86:10:39:40:9c:88:98:92:11:76:f8:24:fe:
82:70:86:59:f1:44:5c:73:ff:35:35:82:44:53:73:
66:e8:fd:44:6c:9c:10:89:c4:10:21:e8:04:4d:43:
ee:97:81:db:f0:73:58:24:4f:26:5c:0a:05:9c:70:
9c:36:d5:41:c3:f9:8c:79:f9:3f:f8:f7:d8:d5:e6:
58:a6:6f:7d:69:2a:db:0c:1d:03:70:67:6e:cc:5c:
ac:b0:26:08:83:aa:99:e2:a2:f7:b5:13:96:16:f6:
8b:9e:04:0e:83:db:c2:9d:89:6d:b9:99:1e:b7:98:
06:f9:e9:cd:98:c2:5e:75:d7:83:1b:0f:e0:4b:c7:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:9D:4B:B9:CF:01:A2:2C:49:F5:B6:F0:55:4E:CB:C8:C4:C8:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:5000::/40
Signature Algorithm: sha256WithRSAEncryption
94:cf:e6:10:1a:6c:0b:ec:f3:68:0c:11:ee:eb:26:2b:05:5d:
9e:23:d4:0d:16:59:8b:f8:14:48:dd:e7:16:af:69:1c:f8:37:
2f:3a:02:da:70:47:c5:a4:60:95:2c:1f:b4:21:3f:71:80:3a:
39:f6:5d:b9:1e:94:38:b2:a1:2f:92:6c:82:46:30:1b:5f:eb:
52:00:73:15:2f:2d:ea:20:09:d3:4c:06:19:82:d1:fc:97:93:
38:24:11:66:94:6e:bb:a2:0a:55:55:a4:78:42:3c:02:2f:cc:
0c:bb:4a:86:2d:ff:49:59:d6:57:88:a7:aa:cc:17:c8:21:8a:
05:d4:57:8e:97:eb:f6:f8:75:0b:a0:b7:b0:a3:00:ae:59:97:
e2:24:67:ba:69:7a:6a:18:9e:f0:0d:5a:3c:2c:f0:81:f8:98:
d3:9b:b2:c0:1a:2c:3f:94:03:cc:d6:7f:08:84:77:2d:cd:98:
a6:14:63:11:08:79:1c:7a:9c:a7:45:f7:2c:61:54:8c:47:4d:
fa:1e:4d:69:11:62:20:0d:a2:b2:90:60:02:eb:b9:6e:f1:01:
33:24:44:eb:40:f4:5d:5c:88:77:29:7f:ab:d6:c3:9e:f8:f1:
1f:47:1a:de:1c:e4:42:74:6e:f1:50:8c:2e:05:4e:bf:40:89:
07:76:08:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:35 2025 by rpki-client