Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae7b6397-da3e-4200-b1ce-12e54cef37a4.roa
File: ae7b6397-da3e-4200-b1ce-12e54cef37a4.roa (raw, json)
Hash identifier: rjBdqmWm5uNXna3MUMIHNsPmUge+Qjs5DR1bquRZ788=
Subject key identifier: 67:FF:A5:D0:19:A4:29:65:1F:B4:A2:26:46:45:EB:93:45:58:36:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B963487968051FD5C8F22DBABBD0144BAEC4477
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae7b6397-da3e-4200-b1ce-12e54cef37a4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:80a0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:96:34:87:96:80:51:fd:5c:8f:22:db:ab:bd:01:44:ba:ec:44:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a81881f61891504d73c9409477eaaa74ee0a3f073439105096d22c9f7cdc38eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:02:bf:e2:f4:7a:8e:1e:82:30:d8:a7:84:
4a:da:e2:d6:be:3e:7f:fc:40:27:8e:55:a3:84:a2:
cd:21:60:0e:df:60:c6:83:8e:79:37:2e:db:7c:0e:
da:7a:21:ef:2a:3e:68:9f:0a:87:13:55:c7:d0:ec:
56:fe:c8:d2:82:3e:4d:54:8c:82:25:10:35:c0:8b:
31:1b:15:b9:29:35:3c:a9:3d:b0:91:b6:fe:6b:32:
cd:bb:c0:26:62:52:6c:36:7a:3e:5c:2e:2d:88:1c:
fb:19:a6:ac:18:28:14:7c:c3:ad:82:2b:59:0a:b2:
05:65:16:8b:ab:53:f1:c8:b5:62:29:af:8f:1e:92:
c3:e4:a9:da:d7:68:da:1c:34:ea:99:10:c4:92:b9:
70:85:98:2a:2c:07:a6:ce:ef:0c:03:6b:d5:8f:6d:
e5:27:f6:48:4a:4b:a5:ae:0c:7f:89:bc:94:48:5b:
61:fa:0a:b2:c8:30:46:88:6d:08:b9:d6:57:46:f5:
36:2b:13:46:49:92:d9:4e:6e:10:36:d9:aa:f9:ea:
15:ed:b8:61:17:32:7e:21:06:e5:b5:b6:95:24:bb:
2a:4b:11:de:bb:fc:f2:91:dd:8f:13:ca:5f:08:b6:
72:6a:cd:f6:18:77:12:7c:ea:49:eb:97:b0:78:d9:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:A5:D0:19:A4:29:65:1F:B4:A2:26:46:45:EB:93:45:58:36:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae7b6397-da3e-4200-b1ce-12e54cef37a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:80a0::/46
Signature Algorithm: sha256WithRSAEncryption
8e:90:b3:07:da:22:d9:40:02:35:13:c8:2b:79:65:b8:a3:76:
6b:2f:4d:be:c3:14:9e:48:a9:aa:ca:73:7d:7f:0b:f6:98:48:
36:fc:dd:f9:a6:80:d4:44:7a:5b:84:b0:be:e5:1b:ac:ab:a1:
29:e4:0f:49:a4:81:d4:42:4e:85:5a:6a:a8:b8:9b:a1:92:24:
b7:be:d4:70:68:ac:54:d5:28:aa:20:4a:5b:90:21:f6:2b:38:
3f:44:25:10:a9:79:95:8a:8b:a9:70:a9:11:84:6e:77:31:ea:
9c:1c:be:45:f7:dd:54:6d:2b:56:a8:77:e6:39:ea:dc:be:60:
72:98:56:03:e0:59:46:d7:1b:3b:2c:43:12:59:48:ae:f6:24:
7e:99:ed:f3:3b:29:57:ff:f5:b4:b5:18:98:e1:48:42:36:0b:
4e:63:ac:ce:a9:c4:c5:c6:2d:da:05:67:fc:30:64:7f:ab:dc:
4b:ab:75:96:fe:df:6d:ae:de:06:06:f3:61:0b:33:e2:f9:ab:
89:c6:08:41:88:24:7b:22:7a:c3:f7:65:4d:6f:ac:a4:13:52:
02:a6:dd:09:7f:39:c1:2e:78:4d:b4:e6:70:ba:54:c5:6c:84:
44:bf:a5:6f:a3:5b:ef:8c:1e:5a:53:60:6c:39:c1:47:50:f9:
a8:51:ac:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:43 2025 by rpki-client