Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa
File: c1babd71-0375-46e5-9fa3-1e46d231571f.roa (raw, json)
Hash identifier: 0LqlWVq2sLoWh9qeCtwlF1GVfhBf0CSBJbM72Asxx6Y=
Subject key identifier: 03:61:1C:8B:E9:79:5B:8A:28:AA:08:BA:39:57:BA:8F:CC:27:74:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33D20088802B963C03C998742DFB4BFDA6C11692
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d2:00:88:80:2b:96:3c:03:c9:98:74:2d:fb:4b:fd:a6:c1:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=66c6025bf4a11d0c80a3cc68e31ad05a3b8acd50b1823e52d969fdcf3bfd6ace, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:e4:88:72:64:0a:e1:d5:e0:ba:da:4e:99:
ae:fb:fe:bb:1c:33:a9:df:d9:10:ff:d5:09:a0:d4:
f8:0b:0d:14:b0:9f:bb:69:aa:2c:84:3b:d9:86:3d:
30:23:6a:0e:38:e2:19:c3:0a:db:4b:65:bd:17:5e:
4c:ec:32:35:1f:dd:da:13:fc:1f:5f:73:75:bf:1f:
c6:71:d4:f5:87:3c:05:37:18:9b:1b:d9:3a:0d:f4:
53:e5:7c:21:0a:bd:18:1a:3f:b8:7c:5b:14:b2:f9:
5d:74:cc:5e:f3:3a:bb:9f:b7:6c:83:84:be:ce:23:
13:50:93:39:a3:3f:aa:0b:57:1b:a9:96:30:61:6e:
b7:88:cc:7b:c4:4c:de:b0:b3:af:2a:09:57:f6:94:
91:89:8f:7a:00:c3:7b:33:4f:cb:9e:93:1a:8f:76:
33:6e:5d:a4:6b:5f:ba:c2:23:f1:a1:95:7c:6d:97:
67:32:a4:32:cd:98:5b:fb:f0:5b:66:2d:d4:05:b6:
95:c4:57:54:8a:12:44:9a:78:67:85:f5:82:89:d4:
46:73:f9:11:88:2f:35:43:7c:36:87:5b:b1:4c:7d:
9c:c3:33:0e:be:02:d5:86:da:65:84:5a:3f:3a:40:
69:b0:d8:0f:28:e9:4e:cd:b6:00:04:61:00:0c:f8:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:61:1C:8B:E9:79:5B:8A:28:AA:08:BA:39:57:BA:8F:CC:27:74:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:2080::/48
Signature Algorithm: sha256WithRSAEncryption
2f:92:9f:4a:d2:e4:4f:65:40:8d:75:17:8a:e3:9c:95:fa:a9:
7d:00:42:37:a2:48:e4:8f:b6:c4:0a:0d:b4:d4:cc:84:3f:5a:
78:13:57:55:b1:a4:c8:23:cf:5f:c6:2f:40:0b:3e:d1:eb:3c:
b3:34:41:fa:27:ef:24:ec:66:f0:59:98:68:06:49:e8:85:a2:
6c:8a:b8:5f:32:89:b4:d0:db:64:aa:21:51:5a:a8:35:39:9b:
0c:cf:82:20:bb:1e:58:39:54:e1:63:7a:9a:90:03:65:ee:e6:
5b:19:72:22:b0:f0:88:31:1a:70:d3:30:68:3d:0d:21:bb:46:
36:47:b4:55:a0:2c:59:62:b8:5a:78:6c:e5:4c:a2:5e:a8:68:
90:c1:15:47:e2:3a:ac:4d:0f:b3:43:03:2e:b4:f3:c5:d3:f3:
20:8f:81:47:b4:d6:54:a5:cd:05:e3:f8:68:1f:06:06:8f:e7:
92:47:52:ab:95:5a:d7:ad:0d:f0:5b:f3:0e:64:14:bd:9a:39:
98:7e:75:53:52:4f:c4:32:80:fe:a6:34:7c:10:f0:6e:03:ba:
1f:b2:55:a1:a2:a1:7d:8b:6f:9d:b5:4e:f3:2e:56:af:e4:8a:
53:99:8f:87:ff:6c:7e:1f:8e:30:d1:5b:21:db:4e:82:a5:36:
ba:c9:6e:25
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM9IAiIArljwDyZh0LftL/abBFpIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NmM2MDI1YmY0YTExZDBjODBhM2NjNjhlMzFhZDA1YTNi
OGFjZDUwYjE4MjNlNTJkOTY5ZmRjZjNiZmQ2YWNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCevOSIcmQK4dXgutpOma77/rscM6nf2RD/1Qmg1PgLDRSw
n7tpqiyEO9mGPTAjag444hnDCttLZb0XXkzsMjUf3doT/B9fc3W/H8Zx1PWHPAU3
GJsb2ToN9FPlfCEKvRgaP7h8WxSy+V10zF7zOruft2yDhL7OIxNQkzmjP6oLVxup
ljBhbreIzHvETN6ws68qCVf2lJGJj3oAw3szT8uekxqPdjNuXaRrX7rCI/GhlXxt
l2cypDLNmFv78FtmLdQFtpXEV1SKEkSaeGeF9YKJ1EZz+RGILzVDfDaHW7FMfZzD
Mw6+AtWG2mWEWj86QGmw2A8o6U7NtgAEYQAM+HKjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUA2Eci+l5W4ooqgi6OVe6j8wndOUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxYmFiZDcxLTAzNzUtNDZlNS05ZmEzLTFlNDZkMjMxNTcxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AIIAwDQYJKoZIhvcNAQELBQADggEBAC+Sn0rS5E9lQI11F4rjnJX6
qX0AQjeiSOSPtsQKDbTUzIQ/WngTV1WxpMgjz1/GL0ALPtHrPLM0Qfon7yTsZvBZ
mGgGSeiFomyKuF8yibTQ22SqIVFaqDU5mwzPgiC7Hlg5VOFjepqQA2Xu5lsZciKw
8IgxGnDTMGg9DSG7RjZHtFWgLFliuFp4bOVMol6oaJDBFUfiOqxND7NDAy6088XT
8yCPgUe01lSlzQXj+GgfBgaP55JHUquVWtetDfBb8w5kFL2aOZh+dVNST8QygP6m
NHwQ8G4Duh+yVaGioX2Lb521TvMuVq/kilOZj4f/bH4fjjDRWyHbToKlNrrJbiU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:00 2025 by rpki-client