Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa
File: af984960-fb9e-452a-9faf-e307203c1b94.roa (raw, json)
Hash identifier: Is1vnrRwRqTFGclE41zKv2s802s9GHfKnzHPXyd4zyc=
Subject key identifier: 25:FE:DF:AB:96:AD:FE:F5:EF:01:C1:CC:A9:9C:48:A3:37:23:9E:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: D1C027AFAE8AB244DE887C2232D656682CBB26
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa
Signing time: Wed 29 Jan 2025 00:00:00 +0000
ROA not before: Wed 29 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f32:8000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d1:c0:27:af:ae:8a:b2:44:de:88:7c:22:32:d6:56:68:2c:bb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 29 00:00:00 2025 GMT
Not After : Mar 5 23:59:59 2025 GMT
Subject: serialNumber=03570d69b06f22ac92ba28039ef923bebf0d5ba65cb4e6ad075915842b9b0a08, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:48:b6:fd:0a:99:a5:28:79:36:fe:3c:92:
53:0c:62:4e:c0:5b:b6:72:01:30:ac:4a:42:67:75:
8e:c8:af:de:30:86:74:25:07:04:31:33:b2:f5:d8:
e6:d9:e6:2b:9a:e9:6b:dd:57:be:7a:52:9e:8b:bb:
74:c1:09:3a:f3:5e:f6:25:55:85:14:00:a7:f3:a8:
89:24:98:f5:4c:5e:d1:0c:82:9e:93:dd:dc:a1:8e:
9e:91:8b:d4:72:5a:24:c3:c6:4c:d2:ff:b2:ce:c5:
2c:02:6b:2a:a3:0c:2b:14:00:50:bc:7c:6b:ba:da:
20:29:9c:d9:63:4d:d6:0b:b6:1b:38:9a:7b:03:78:
87:e8:54:49:4a:05:b1:65:c9:4e:e4:c9:8b:50:27:
94:ae:e0:37:7d:b7:1d:65:39:d5:b6:be:13:10:08:
61:45:f4:9a:80:75:e8:36:0e:48:97:92:55:96:8b:
e0:c2:b0:07:f5:40:f8:ff:8e:21:6c:a0:a5:08:3e:
53:92:b2:dd:55:cc:84:9c:7d:ac:82:3a:70:99:e8:
20:f2:e5:58:c2:94:b3:e0:79:43:36:4a:8c:0d:0a:
b7:d9:a8:c8:7e:51:5c:c5:cc:6c:2f:bd:45:8e:9c:
79:f0:1f:7b:e2:29:b8:3a:ab:fc:66:0d:ee:0b:d7:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:DF:AB:96:AD:FE:F5:EF:01:C1:CC:A9:9C:48:A3:37:23:9E:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:8000::/39
Signature Algorithm: sha256WithRSAEncryption
d4:96:09:40:a3:a0:44:0f:8c:c0:ea:26:e3:f7:95:f6:d6:85:
bc:e8:20:bc:ca:42:df:1e:d9:07:7b:8a:e1:4a:4f:7d:6b:d8:
7b:c4:6f:4f:3f:12:8c:e0:5f:1a:06:bc:56:bc:3c:d9:5d:31:
19:48:a1:7b:5b:dc:3e:11:6d:09:1c:a9:d2:e7:b6:f3:3d:e7:
5e:c6:42:2b:3d:d7:86:59:72:22:bf:47:ed:1e:0f:6e:99:40:
4a:e6:5f:b6:d9:00:1d:20:d0:bd:14:bd:71:24:f2:c3:b8:d7:
11:16:44:43:01:87:04:0e:ab:97:00:c1:7e:c2:dd:34:fc:e4:
7b:46:fc:2c:89:4a:6f:c1:01:da:fa:d2:a8:76:c9:09:91:fc:
27:b4:33:13:a6:e3:a0:65:9b:78:a9:05:80:3b:7e:6f:1d:1c:
e2:60:c4:9a:bc:bc:56:06:bc:46:40:d7:28:73:19:06:f2:63:
07:0b:19:b4:0a:1d:1f:af:25:0d:fe:da:39:1b:f2:83:97:0d:
80:2f:72:21:0e:37:31:80:6c:ab:f2:b3:41:d1:98:19:a2:f3:
d8:27:11:22:61:ca:9c:3f:42:56:08:bb:c9:9e:71:16:19:5b:
bb:bf:79:c0:c3:9c:c8:27:bd:fa:1f:8d:b4:b4:72:42:86:f8:
19:25:ef:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:18 2025 by rpki-client