Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba246b04-d249-4ede-8fae-18c9119be727.roa
File: ba246b04-d249-4ede-8fae-18c9119be727.roa (raw, json)
Hash identifier: Xaj103/hxCpJRIr4V7em3ltUAhNpddJGV4U9gWwc1Cc=
Subject key identifier: 23:DA:93:58:44:B5:9E:FA:B8:8B:A3:4A:74:C7:6F:14:38:08:F6:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0EA8A5D27C295533C2DC170401502BAF97E62CF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba246b04-d249-4ede-8fae-18c9119be727.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:50c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a8:a5:d2:7c:29:55:33:c2:dc:17:04:01:50:2b:af:97:e6:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6ad2118cee57fdde39148d49d08c43e392046a75172ef0ecbf4c0950ac7b95ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:c8:58:cb:92:7f:3f:09:2a:d3:1d:80:6f:
b6:28:ef:9b:62:69:ea:ad:f4:9e:e6:92:f5:ab:5e:
76:e9:29:87:8c:11:a9:c3:6a:ad:d9:4e:4b:54:70:
14:e0:89:06:d3:18:b6:72:8c:28:6c:7a:5f:11:1e:
11:86:6a:fd:20:4e:b2:b6:f5:05:78:c0:eb:2e:00:
9f:9f:a1:35:aa:e6:e5:25:53:05:b7:1d:db:2d:36:
20:80:6e:3e:b0:1b:ef:7e:c6:d8:b8:c9:a2:7c:d9:
0e:40:7d:02:61:cb:d9:19:c6:b7:a1:4c:c6:a9:bd:
a5:fb:cf:ec:41:2a:5e:44:a7:e8:45:91:2c:22:3b:
0e:b4:8c:af:5a:45:b5:8a:ca:3f:d3:f5:01:f0:b9:
2c:72:69:88:25:96:89:b2:52:b1:8a:94:ae:f7:ed:
34:8e:76:10:08:9b:58:f6:be:21:c1:c5:e2:6b:54:
a1:f7:1a:bf:19:18:51:da:2c:83:91:49:2c:0c:7d:
73:f9:2c:ee:35:24:1c:91:ae:21:a7:5f:00:6d:3a:
78:dc:c3:8e:a0:ca:ef:09:d8:40:4a:f8:b2:9c:07:
75:ad:b6:a7:38:6b:ff:f8:02:a1:47:a9:da:7f:07:
98:9a:7f:77:f6:34:e8:18:c6:b2:b2:70:f6:02:88:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:93:58:44:B5:9E:FA:B8:8B:A3:4A:74:C7:6F:14:38:08:F6:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba246b04-d249-4ede-8fae-18c9119be727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:f1:cb:2e:43:e1:d7:8d:d8:bd:57:37:79:9b:fd:25:44:df:
2d:9a:d5:d0:aa:47:28:f9:ec:c6:5b:ad:05:10:f2:6a:76:89:
4f:ea:6b:c1:bc:d4:4d:26:7c:04:11:49:cf:95:be:b6:7e:32:
51:a0:16:3d:be:5b:95:94:6a:f4:85:c8:65:b9:0e:a6:1d:e9:
c9:dc:30:db:8b:e5:a5:ba:d8:a5:4a:ba:cb:a8:58:cf:01:e5:
24:70:63:1f:43:13:8a:cc:cc:b1:2e:2f:11:5e:85:fd:18:b6:
45:9e:31:93:b5:d2:9d:7f:13:af:9f:bf:73:d1:99:7c:97:3b:
44:ab:ef:f2:6c:a6:02:40:39:be:4e:fe:af:84:c1:83:d0:be:
83:7e:a9:ee:45:2f:29:9f:31:cb:92:97:6b:38:58:89:c5:18:
a3:3a:39:ea:d2:0e:02:65:6f:53:93:31:cc:51:7a:b2:1a:19:
ac:13:c0:a5:6c:bb:59:b4:2b:73:9d:1d:c0:9b:11:b5:b1:c9:
2c:86:f0:bd:a7:00:a5:dc:49:3d:fd:95:3d:f5:8c:fb:04:8d:
24:dd:ed:06:9c:df:c6:e4:5a:b7:62:91:86:e1:a2:c2:b6:27:
5c:90:c3:55:d8:5a:52:24:7a:4b:a0:70:c1:41:19:de:41:c5:
5b:c1:d8:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:15 2025 by rpki-client