Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa
File: e838ff70-6a69-4c82-93ca-6ef1672659e1.roa (raw, json)
Hash identifier: s7awiHgwtvXLfR7eWfCF2cQ6EcIe79TxmQW1JflO22c=
Subject key identifier: A8:78:1F:36:2B:47:38:F2:8D:D9:E6:89:2F:D4:56:A9:8C:CB:A3:E9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76BEAC9129A6D2FA011D514FD9D93C6B34325474
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f14:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:be:ac:91:29:a6:d2:fa:01:1d:51:4f:d9:d9:3c:6b:34:32:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f6ee895700667a0f8ac978b0322e45d0f0da7af1d5548700cde089b167d261a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:be:d3:0a:5f:a7:d7:d8:f8:cf:dc:4d:cb:
8e:ed:d2:3c:08:8f:c4:90:75:f5:a3:af:6e:90:90:
00:77:dd:2e:82:1d:e2:74:64:56:ce:e5:8b:3f:ca:
06:33:dd:14:d7:02:88:bf:0f:27:69:12:93:7d:81:
07:cd:c9:8d:0d:2c:23:85:63:14:f2:14:68:2b:e0:
cf:c5:da:93:a8:5f:a8:b4:46:4e:86:9b:f2:3b:24:
67:14:45:0e:51:98:b8:f1:99:2f:46:d3:bf:92:81:
ff:1d:fb:13:fc:b0:64:9c:f9:c9:af:26:4a:da:b7:
0b:7f:7e:26:45:42:31:bb:9c:21:00:f8:3e:b2:84:
a4:f3:21:fd:92:43:f7:79:c0:25:2c:a7:06:de:8c:
88:ab:51:37:aa:0a:23:3b:c6:e3:c0:11:0a:10:b4:
cc:06:9d:cd:43:9c:98:65:93:1c:8b:35:0c:c8:d0:
53:df:19:fd:c4:84:43:4c:94:f9:1d:fe:75:73:43:
2c:65:2f:6b:6b:5b:89:03:c8:c1:66:8c:13:78:7c:
02:e7:7a:84:fc:f0:98:ef:e0:13:0e:43:47:f9:fe:
b4:91:1c:ba:7f:1a:41:b5:1c:be:c7:da:b7:e4:9a:
38:35:1c:ea:43:49:7c:78:2b:b7:b8:0b:ab:1e:32:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:1F:36:2B:47:38:F2:8D:D9:E6:89:2F:D4:56:A9:8C:CB:A3:E9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:4000::/36
Signature Algorithm: sha256WithRSAEncryption
9b:24:6d:32:32:56:e1:5e:66:47:88:08:d8:2e:aa:c2:ac:a6:
50:f0:9f:7e:de:74:8e:47:09:7f:6d:e3:1e:43:c2:71:8d:14:
e7:f8:b5:99:49:6a:23:3b:43:7d:03:58:0d:3f:96:84:ad:67:
4f:cd:17:82:62:2e:61:64:39:f5:58:1e:49:64:12:1f:57:00:
02:ac:83:51:30:4f:53:38:3d:b2:c4:51:f9:bc:5d:9a:d6:0f:
14:f6:c6:ea:c0:18:fc:b7:8f:82:67:40:49:25:a5:4a:60:06:
38:71:ef:18:a2:0b:a4:83:ea:99:6f:82:0e:7b:6d:21:0c:5e:
e5:46:26:92:6d:b8:b4:f0:21:88:6b:43:69:fb:55:1a:b1:18:
00:d5:ae:86:5d:15:fc:fe:7e:16:cb:0a:64:93:fe:0b:08:7b:
2f:4f:bd:9c:c8:5a:d9:09:91:d9:56:5d:69:f6:eb:d2:29:cc:
1a:e5:ed:a1:c6:87:0e:d0:31:16:53:e8:7e:a6:7a:0c:53:46:
80:99:84:d1:44:11:63:75:7b:06:f7:4d:54:67:68:75:e1:1d:
aa:1b:e1:c6:cb:9d:00:12:5c:85:89:b6:7d:09:cb:03:b8:a2:
03:40:79:ea:99:5f:ac:13:16:01:74:c4:56:84:64:be:98:13:
92:57:72:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:49 2025 by rpki-client