Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d64b8d65-3449-415f-b371-492909995065.roa
File: d64b8d65-3449-415f-b371-492909995065.roa (raw, json)
Hash identifier: ZdUwifvPZNx/LC6K0cmSK5W7b50hPB5hHkDQLa2FKqE=
Subject key identifier: 28:E4:6D:73:29:37:46:20:B9:35:4E:80:F0:45:7C:C2:5F:FE:6A:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6872E63E6476016E2AD2C1627326D8BB9282F03B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d64b8d65-3449-415f-b371-492909995065.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:c0c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:72:e6:3e:64:76:01:6e:2a:d2:c1:62:73:26:d8:bb:92:82:f0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=16ba1196cd5d868d046aa096d64bf5443b6a2e6c5f86620b008d4fbbb890eebc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:97:8c:0e:bf:7d:dc:f0:8e:e1:c0:1b:e6:
f5:12:32:02:b1:c7:81:17:22:06:33:c3:96:31:61:
30:6a:61:44:d8:8a:fb:de:8b:05:a0:08:2e:30:1b:
f8:ef:bc:5f:02:24:5b:24:f6:8d:21:43:47:a5:08:
79:db:6e:00:a8:b0:6f:eb:c1:9d:6b:86:d0:3f:c1:
ee:47:62:c8:0b:1f:d9:c5:a4:4f:d4:a2:d1:63:50:
ae:f4:68:ce:cf:8d:2b:e0:d6:33:19:7e:52:ac:79:
3c:6e:cf:c9:79:0d:24:34:45:c2:cf:49:b6:dc:17:
49:a8:67:ba:10:78:85:0a:9d:b6:e2:bc:70:b7:5a:
09:a0:9b:50:76:36:d0:50:62:a4:38:14:7e:d2:f8:
72:0c:bb:48:4d:01:35:0e:68:29:68:6e:b6:66:43:
40:92:3f:5c:fb:be:b7:8c:48:8e:9e:0d:c8:40:7c:
45:e8:cc:5e:25:1b:c4:96:27:d9:53:2b:ba:e3:6b:
e1:69:8e:a5:97:43:7c:e9:9f:c6:71:b4:a9:f9:44:
55:d7:0f:78:8f:7c:fb:ba:b8:48:7b:ce:95:da:cf:
38:65:de:2b:32:2c:d9:16:52:46:a4:28:3d:02:04:
a4:51:c2:b4:62:91:5b:c1:c9:14:95:17:31:f8:84:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:6D:73:29:37:46:20:B9:35:4E:80:F0:45:7C:C2:5F:FE:6A:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d64b8d65-3449-415f-b371-492909995065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
69:2e:57:48:a9:16:e6:9c:e0:88:ac:8f:dd:00:20:4a:ae:c3:
4d:83:6e:89:9c:69:2c:49:cf:75:27:34:3d:17:57:02:ba:c8:
02:a1:88:0b:b2:2a:c1:49:5a:32:81:27:3c:c9:ba:71:69:5d:
01:62:e6:3d:c2:ec:43:72:02:5b:93:6f:2b:29:6c:13:99:1a:
21:e3:31:c9:9d:5b:f1:ab:68:5c:df:4e:54:a4:5c:ae:ca:b1:
18:3d:b4:c8:6d:6c:33:a8:b7:ce:fb:39:42:a9:b5:d9:81:a7:
0b:98:da:02:a9:05:f5:a4:67:40:b8:97:6c:1f:3d:2d:d4:b0:
ff:2b:04:e8:0b:fe:52:4b:d1:30:88:a4:0c:8c:c9:71:e5:75:
2f:6a:6d:e0:7e:3f:80:82:40:32:b3:fb:c7:f5:84:0f:18:b7:
5c:80:92:c7:ca:1c:28:28:81:a4:7e:ba:c3:e8:33:17:1e:ba:
7e:ef:49:5e:2a:53:91:07:8e:e2:1b:9b:67:81:0e:ec:f4:11:
f5:f9:e5:d0:4d:84:51:16:a4:08:17:36:38:8e:20:36:9e:59:
16:02:55:7f:25:28:9a:25:e8:d4:80:fc:42:f8:a1:39:c5:d9:
29:40:ce:cf:80:7b:d1:b9:e9:3e:7d:5e:ff:b4:a0:c9:1f:4d:
b3:07:1a:c4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaHLmPmR2AW4q0sFicybYu5KC8DswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmJhMTE5NmNkNWQ4NjhkMDQ2YWEwOTZkNjRiZjU0NDNi
NmEyZTZjNWY4NjYyMGIwMDhkNGZiYmI4OTBlZWJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtjJeMDr993PCO4cAb5vUSMgKxx4EXIgYzw5YxYTBqYUTY
ivveiwWgCC4wG/jvvF8CJFsk9o0hQ0elCHnbbgCosG/rwZ1rhtA/we5HYsgLH9nF
pE/UotFjUK70aM7PjSvg1jMZflKseTxuz8l5DSQ0RcLPSbbcF0moZ7oQeIUKnbbi
vHC3Wgmgm1B2NtBQYqQ4FH7S+HIMu0hNATUOaClobrZmQ0CSP1z7vreMSI6eDchA
fEXozF4lG8SWJ9lTK7rja+FpjqWXQ3zpn8ZxtKn5RFXXD3iPfPu6uEh7zpXazzhl
3isyLNkWUkakKD0CBKRRwrRikVvByRSVFzH4hAMvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKORtcyk3RiC5NU6A8EV8wl/+arkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q2NGI4ZDY1LTM0NDktNDE1Zi1iMzcxLTQ5MjkwOTk5NTA2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB9pwMAwDQYJKoZIhvcNAQELBQADggEBAGkuV0ipFuac4Iisj90AIEqu
w02DbomcaSxJz3UnND0XVwK6yAKhiAuyKsFJWjKBJzzJunFpXQFi5j3C7ENyAluT
byspbBOZGiHjMcmdW/GraFzfTlSkXK7KsRg9tMhtbDOot877OUKptdmBpwuY2gKp
BfWkZ0C4l2wfPS3UsP8rBOgL/lJL0TCIpAyMyXHldS9qbeB+P4CCQDKz+8f1hA8Y
t1yAksfKHCgogaR+usPoMxceun7vSV4qU5EHjuIbm2eBDuz0EfX55dBNhFEWpAgX
NjiOIDaeWRYCVX8lKJol6NSA/EL4oTnF2SlAzs+Ae9G56T59Xv+0oMkfTbMHGsQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:45 2025 by rpki-client