Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec49a5c-1e35-45e2-9f13-e810d3852f27.roa
File: aec49a5c-1e35-45e2-9f13-e810d3852f27.roa (raw, json)
Hash identifier: mPGvu5FMsB3PtD1mjTQDUCT76xdYie4e1BaLuhBIH48=
Subject key identifier: 34:6B:FF:91:1A:66:B0:42:06:61:41:F6:96:4A:49:1A:52:30:14:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B5184B854D6CB7F84517250D921001C751AFE04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec49a5c-1e35-45e2-9f13-e810d3852f27.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:e040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:51:84:b8:54:d6:cb:7f:84:51:72:50:d9:21:00:1c:75:1a:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=42f550d4a61fa1ed801c11cef53d9d550a39ef648eee2e93d757e4dd416a50fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:63:fb:10:88:b5:82:13:19:a4:b5:19:ee:
c6:4a:8e:23:9a:c6:51:70:74:a8:b0:6c:52:2d:34:
39:05:ba:da:9c:d4:2c:72:5e:9c:70:6c:17:78:a7:
c0:92:0a:a1:47:0b:29:54:02:ec:9e:1e:29:c7:e6:
b3:49:6b:54:07:4e:e6:2b:fc:ff:cd:00:f7:e8:bd:
53:93:4b:b5:1d:6c:45:c9:f9:a1:c7:4f:d5:0e:7d:
19:fd:29:87:9e:b4:86:d6:de:28:2a:8d:36:25:db:
71:79:a9:ae:05:99:9e:5c:34:03:25:6e:e3:3d:02:
a5:a8:28:02:9b:bf:a7:65:69:cd:c4:7d:31:51:d3:
45:4d:5f:1f:b5:2a:22:25:df:a9:25:e0:8b:95:f9:
9d:f0:bf:26:7c:a6:40:6e:25:52:84:56:58:59:cb:
39:19:dc:c5:0b:d3:03:fc:1a:ee:15:b8:99:73:85:
c1:aa:50:ce:3c:e8:92:4e:45:7a:93:9d:3f:be:ac:
4c:38:d6:a6:d6:ff:c5:a3:1f:6c:e7:f1:79:5f:aa:
ee:27:43:80:0d:63:17:7f:40:a5:5c:55:32:e8:91:
45:a6:95:28:87:82:d3:cf:de:96:9e:48:78:ed:34:
bb:3b:d1:bf:f6:e4:dc:ca:50:d4:27:5a:d9:e1:91:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:FF:91:1A:66:B0:42:06:61:41:F6:96:4A:49:1A:52:30:14:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec49a5c-1e35-45e2-9f13-e810d3852f27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:e040::/48
Signature Algorithm: sha256WithRSAEncryption
64:07:68:33:58:31:a5:d4:a6:ec:6e:2a:9a:91:3d:0a:8b:00:
d8:29:20:1d:cd:6d:2e:e5:cd:82:8e:f5:1e:73:2e:48:5c:b9:
c4:97:a9:4c:30:0e:30:0a:ac:2a:9f:14:3a:f9:48:5c:5d:56:
34:fb:86:26:2b:73:a6:96:18:28:0c:a9:07:99:80:b3:e8:08:
9d:e7:1c:71:6d:f3:97:bd:3b:31:a2:21:34:4c:9d:b3:cd:2d:
55:d7:94:f8:52:69:2c:37:75:43:48:1d:21:21:f5:e1:b6:1e:
18:11:9a:c2:8f:b6:83:5e:06:e3:22:34:0b:cb:f0:08:d2:ec:
09:0c:65:d0:3d:18:4d:1e:a4:f3:26:4e:0b:d0:ca:8b:6c:6a:
37:71:a2:36:3e:8b:3e:32:51:ea:30:00:60:f0:30:3d:71:b1:
45:04:7c:dd:41:83:eb:00:9f:56:a0:8b:03:1e:42:b3:32:ec:
4f:e6:6f:2b:ce:9e:c0:53:12:bc:57:6c:0d:19:21:e0:fc:8c:
66:37:82:81:1d:53:2b:3a:aa:98:52:75:18:7a:bb:13:73:58:
d4:6f:49:67:56:34:d9:75:19:63:e7:52:5d:56:3a:6d:e7:24:
0a:98:14:7e:ed:38:23:b2:8b:38:b1:18:03:9e:dd:cf:da:7c:
ea:a1:ac:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:06 2025 by rpki-client