Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47a7e8a-d613-4325-bd8e-b07f73784e92.roa
File: b47a7e8a-d613-4325-bd8e-b07f73784e92.roa (raw, json)
Hash identifier: 6GXdckAeJripX8IZUkckSrxTWwOY4VuylFcftycpixg=
Subject key identifier: 82:50:79:6D:6D:18:0C:AE:9C:3A:54:16:0A:30:12:9B:6E:92:8C:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30271C738ECD7BFC9B8CCB601CEC6E9569689C7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47a7e8a-d613-4325-bd8e-b07f73784e92.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f60:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:27:1c:73:8e:cd:7b:fc:9b:8c:cb:60:1c:ec:6e:95:69:68:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ed1ea4f62e70ea004d3281c06286612c3871d922147938d8f2f1ffacf405eba2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:4d:7f:1a:2c:2c:76:6f:fb:70:e0:e0:5a:
71:f2:e9:88:9c:96:41:aa:09:69:73:ae:74:47:23:
35:95:08:a4:58:99:18:50:25:45:b2:7a:bc:07:65:
cd:09:f4:9d:41:62:80:7d:e2:af:b2:0f:29:89:0f:
f6:11:fe:6a:b8:22:d0:ac:16:5e:48:95:e8:bb:c6:
f7:06:48:02:ca:51:44:f0:85:b3:e1:95:b1:a8:77:
6b:23:8e:3d:d6:98:3e:12:a9:33:54:61:e3:c2:b4:
5e:86:2c:6b:6c:59:a3:23:b8:c0:a6:0e:c5:d3:84:
8c:a4:29:11:ea:93:45:ea:db:48:71:3a:b2:47:20:
f2:6f:5a:25:bb:a6:18:72:fe:43:ab:23:93:e7:fa:
ba:d3:da:c7:11:00:ef:7e:47:0e:bf:f7:9f:96:49:
d1:88:67:db:90:ab:f4:f6:fb:06:bf:5d:d2:d5:a7:
63:b8:08:17:f1:2a:60:7d:80:7b:7b:ff:72:c1:b9:
cb:8b:83:0c:5d:02:41:24:97:71:13:30:da:e0:eb:
af:be:83:ad:3d:ac:1f:a8:5d:73:a8:e9:62:74:1f:
de:ac:78:7f:f8:53:82:85:39:fc:4c:18:a6:3a:4d:
2a:6b:08:d5:67:d9:fe:a8:2a:3c:1e:f1:f0:0f:a9:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:79:6D:6D:18:0C:AE:9C:3A:54:16:0A:30:12:9B:6E:92:8C:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47a7e8a-d613-4325-bd8e-b07f73784e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:30:23:bc:d6:a3:17:c7:56:ad:e0:29:82:6a:97:ae:2a:92:
11:e2:8a:ea:d9:a4:5e:93:e8:66:d5:d1:6d:06:6e:65:f6:b7:
e4:c0:8f:f1:36:69:7f:ed:92:9f:46:6c:36:31:5d:d5:b0:6c:
03:c3:e6:ec:93:83:9c:86:45:9e:63:ac:c8:62:f9:94:c2:34:
a3:b7:19:a2:c2:ae:60:2b:0f:66:d2:2e:36:67:af:37:1e:50:
94:0d:73:e8:63:ec:e4:4e:95:83:03:6e:18:58:52:0c:d4:58:
1b:f2:6f:ba:8b:2f:d8:22:c7:b4:cf:3e:4c:43:62:81:9b:b5:
13:b8:8f:41:ce:58:e3:4b:22:5e:35:79:d4:06:86:ea:a9:b5:
fc:11:53:58:58:3e:89:94:6f:98:29:35:da:c7:9f:a9:36:67:
a2:84:5d:1f:87:46:45:45:e4:7d:a0:d7:a0:62:ee:b0:40:0f:
14:d6:70:eb:c9:4d:74:18:4c:f9:4b:ac:c4:48:5f:ef:73:50:
40:2c:1b:e9:e3:e3:ba:a2:46:34:fc:95:03:0c:6b:31:9c:e4:
27:dd:d6:69:f6:d4:68:f7:9d:46:c0:9c:2b:61:8d:4d:45:fa:
97:3c:49:c9:f4:ce:f3:a1:84:2b:3b:df:a2:48:be:b5:dd:7d:
1c:da:6d:40
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUMCccc47Ne/ybjMtgHOxulWlonHowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA4MDAwMDAwWhcNMjUwMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDFlYTRmNjJlNzBlYTAwNGQzMjgxYzA2Mjg2NjEyYzM4
NzFkOTIyMTQ3OTM4ZDhmMmYxZmZhY2Y0MDVlYmEyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQdE1/Giwsdm/7cODgWnHy6YiclkGqCWlzrnRHIzWVCKRY
mRhQJUWyerwHZc0J9J1BYoB94q+yDymJD/YR/mq4ItCsFl5Ilei7xvcGSALKUUTw
hbPhlbGod2sjjj3WmD4SqTNUYePCtF6GLGtsWaMjuMCmDsXThIykKRHqk0Xq20hx
OrJHIPJvWiW7phhy/kOrI5Pn+rrT2scRAO9+Rw6/95+WSdGIZ9uQq/T2+wa/XdLV
p2O4CBfxKmB9gHt7/3LBucuLgwxdAkEkl3ETMNrg66++g609rB+oXXOo6WJ0H96s
eH/4U4KFOfxMGKY6TSprCNVn2f6oKjwe8fAPqcAZAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUglB5bW0YDK6cOlQWCjASm26SjBIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I0N2E3ZThhLWQ2MTMtNDMyNS1iZDhlLWIwN2Y3Mzc4NGU5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9gQDANBgkqhkiG9w0BAQsFAAOCAQEACzAjvNajF8dWreApgmqXriqS
EeKK6tmkXpPoZtXRbQZuZfa35MCP8TZpf+2Sn0ZsNjFd1bBsA8Pm7JODnIZFnmOs
yGL5lMI0o7cZosKuYCsPZtIuNmevNx5QlA1z6GPs5E6VgwNuGFhSDNRYG/Jvuosv
2CLHtM8+TENigZu1E7iPQc5Y40siXjV51AaG6qm1/BFTWFg+iZRvmCk12sefqTZn
ooRdH4dGRUXkfaDXoGLusEAPFNZw68lNdBhM+UusxEhf73NQQCwb6ePjuqJGNPyV
AwxrMZzkJ93WafbUaPedRsCcK2GNTUX6lzxJyfTO86GEKzvfoki+td19HNptQA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:41 2025 by rpki-client