Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa
File: ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa (raw, json)
Hash identifier: Md0Jwqs5bx5mHlsBDBx08UMl7WWUp5tSvqgWCNeAgAE=
Subject key identifier: 17:27:3E:52:60:4C:03:95:29:23:6B:D0:E1:99:3A:FC:8D:27:3B:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6842D160568EB75010CB049AA0CC42CBFFC68FAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffa:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:42:d1:60:56:8e:b7:50:10:cb:04:9a:a0:cc:42:cb:ff:c6:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=fd355b832443c924c958cb1d7d47a20fc1107c39791a1a6f2a22571a27761938, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:31:58:60:09:38:ff:5d:d2:85:b2:0b:d9:
cf:50:77:22:01:ef:fa:cf:99:8a:c9:1d:43:fe:d9:
bd:e0:1d:1e:5e:bc:d7:fb:5f:65:87:97:a6:db:31:
b1:2e:0b:9f:28:3b:a3:67:bb:f9:03:a4:db:da:5c:
50:36:cb:15:db:c3:fa:69:29:aa:d6:c0:4d:74:64:
bf:23:14:58:d1:51:34:ef:5b:48:4e:c0:57:cd:f0:
72:88:a7:4f:ce:e4:e8:df:76:44:98:ed:39:81:6c:
03:d5:fe:3c:ca:a4:78:db:50:6c:80:15:66:8c:5f:
7e:37:60:bf:5e:a8:8e:d2:d4:1d:e8:79:c5:a8:c4:
92:a6:a7:98:8e:6c:1d:dd:ad:85:7a:a9:78:4d:fd:
46:ae:27:50:f1:bc:3a:0b:e4:64:99:3c:42:6a:b2:
81:e1:32:d4:5c:07:55:2e:a7:60:cd:9f:34:97:a6:
28:f0:aa:2d:38:17:b8:a4:08:62:13:9a:d6:4f:53:
a9:d1:50:1e:6b:bd:92:40:8c:a4:b7:aa:03:7f:e7:
2c:d5:2c:e4:93:14:ba:02:8c:d7:a9:29:0e:b7:8d:
f5:24:dd:6f:9b:af:43:37:b1:0c:ae:ef:db:39:09:
4d:b0:c6:69:80:2e:a0:33:51:f4:a1:88:dc:8b:ae:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:3E:52:60:4C:03:95:29:23:6B:D0:E1:99:3A:FC:8D:27:3B:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffa:4000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:f8:1a:49:b1:75:a9:1c:a8:f5:a4:f0:c4:10:bc:63:79:51:
bd:08:fc:31:5c:6b:fa:a3:20:2e:f0:9e:a7:c8:aa:bc:11:ff:
88:de:09:c2:ba:20:3d:e8:ef:e7:68:98:be:09:89:7e:f9:4f:
15:65:99:68:f1:40:4a:55:3f:19:fe:92:f1:91:86:a2:03:da:
cb:9d:ab:43:d8:c2:d7:8e:a4:ed:96:28:e3:9d:10:81:f0:1f:
f8:2e:d2:e0:a6:1d:c1:b4:10:c2:4a:9b:df:c0:2a:1a:45:ed:
ed:60:7e:81:d4:47:42:69:85:7d:55:3f:23:b7:b0:20:78:96:
3d:e6:ce:6d:ac:38:41:eb:4c:e3:6e:cf:3c:f7:6b:aa:c0:34:
91:da:17:dc:ff:cc:0a:2a:6c:cb:ce:25:70:dc:d2:c9:1b:8b:
ec:91:dd:db:10:bd:a5:c6:fd:41:08:91:5d:00:e5:06:e8:1f:
2c:bc:e9:ef:9d:01:3c:c4:17:9c:c2:a3:ed:ae:bb:ca:11:57:
8a:28:36:09:0e:ff:ba:2a:f1:4d:37:15:d3:b9:18:ff:50:9f:
00:90:c5:0b:f1:30:2e:01:75:10:14:4b:4a:73:c5:10:2d:04:
e9:83:15:3e:61:f8:9e:19:f9:a9:4e:b8:04:45:a2:bf:77:2f:
cf:c2:57:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:08 2025 by rpki-client