Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa
File: c0ba95f7-f662-491c-8d5f-68532e494cdd.roa (raw, json)
Hash identifier: TCekeN34e6MqI+sUm6beGd8zgGjNsMdoY1kPS6K3RsM=
Subject key identifier: 47:30:05:24:6B:35:44:34:BF:A0:6B:E5:6E:70:15:DF:DA:B7:A9:EC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16D542C93D30A3DEF1E57B273B44A35B1DA45B42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f17:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d5:42:c9:3d:30:a3:de:f1:e5:7b:27:3b:44:a3:5b:1d:a4:5b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a87876e4f66963456e425f0cbb32653d62e8e02cc0abcd6afe0f7b36dbe075a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:9c:d5:fc:cf:83:5a:80:ff:a3:95:d7:81:
0b:b3:75:d6:bf:d6:7a:88:a3:c6:e5:d3:5c:95:c1:
4f:9d:f5:70:73:d9:ce:35:b7:82:a0:0e:59:b6:17:
c0:5b:d5:63:77:e3:5f:85:27:47:d5:c6:75:90:37:
b9:f3:06:3f:ac:d7:aa:86:3a:b5:a6:b9:95:03:f0:
b7:d1:e9:60:9b:a2:24:a3:a5:5e:6d:6e:d3:ce:f3:
d1:18:7c:55:d6:6f:ea:b2:01:41:ae:64:cb:65:ef:
bd:a8:7d:78:bd:a3:b1:68:2d:28:e2:e3:4a:ee:85:
db:1d:b5:05:03:ef:8f:f0:80:7c:2d:a3:c6:8c:20:
06:eb:82:95:e9:68:fa:8b:3f:c6:18:df:4c:dd:3f:
a7:e9:5b:a9:46:12:f0:ee:5f:57:bc:6e:32:5a:79:
33:7e:14:29:bc:7f:38:01:3f:eb:14:b3:7f:4a:c3:
c4:cb:69:9b:8f:fa:5e:00:a2:ff:76:c8:c3:f8:a5:
80:04:9f:16:cf:d7:cb:ce:c7:93:6e:0e:8e:59:aa:
ce:c9:27:3c:bb:87:e5:72:a9:33:b1:ef:29:73:6b:
24:84:65:ee:81:6c:52:5d:70:81:cc:96:9b:95:c7:
8b:b7:f5:6e:cb:d8:82:35:f0:bf:08:03:f6:4d:83:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:05:24:6B:35:44:34:BF:A0:6B:E5:6E:70:15:DF:DA:B7:A9:EC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f17:4000::/36
Signature Algorithm: sha256WithRSAEncryption
17:b7:bc:cd:15:f6:01:e7:42:75:56:c2:5b:e6:ac:54:40:05:
d2:ab:8f:7d:cc:38:6b:d3:50:2b:4c:9a:e7:55:f3:77:8c:31:
62:22:43:98:c3:40:2c:be:81:1c:24:4f:5f:42:18:45:62:ee:
7f:53:48:ae:21:da:31:57:27:7e:e1:d5:74:2e:2a:57:6b:5a:
6a:90:ad:f5:94:e4:e3:d9:9f:d5:4a:cc:38:7b:e2:fa:ff:a7:
e1:07:28:b5:bc:5c:83:d6:22:8f:b4:48:fd:8f:09:a8:87:b0:
43:56:05:06:68:98:a9:0c:8c:67:78:d1:8c:57:b5:ca:d0:86:
cc:49:7a:ef:b4:1d:c1:7a:27:e2:f6:d5:a9:17:ac:2f:73:89:
4f:80:bd:32:ce:1b:2d:12:2c:64:9f:26:8e:74:0a:53:01:f2:
5e:0b:5b:86:e4:14:b5:4e:9c:75:c6:46:71:11:e0:f5:00:3e:
2c:c1:fa:0d:6b:47:1c:26:ad:32:37:1a:8a:4a:d7:50:63:d5:
18:05:25:fb:8c:3a:0d:0b:f5:90:4d:a3:ff:4b:3d:f9:e3:03:
0a:fe:d3:a3:24:fc:cb:c4:a6:60:46:35:9d:7a:45:a7:5e:e1:
dd:ba:9b:de:a5:56:b9:4b:5f:66:de:95:9b:46:94:e4:13:46:
f1:dd:35:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:19 2025 by rpki-client