Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa
File: f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa (raw, json)
Hash identifier: liXHKXspJP4gFwsdIlBvM29vhbK/3fNcflsivi75Wj0=
Subject key identifier: 43:A6:31:7E:F6:16:85:1D:22:B3:31:A4:B0:C3:CA:54:B3:D4:2B:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2CE798F397CBF896B96B6D0A2C0066000B700935
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:98:f3:97:cb:f8:96:b9:6b:6d:0a:2c:00:66:00:0b:70:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=8e4c50aacd57e0067416ec9bfed81b83d8bb4aca30fbadf663a2b139dfec184b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:e7:41:94:23:94:64:62:6d:d1:68:e4:a2:
d7:50:70:8f:e4:2e:a4:cb:1f:18:fa:44:31:fa:4f:
9d:6b:bb:77:36:75:11:93:0b:21:bf:7a:ca:bb:a5:
fa:ae:1b:99:c8:26:17:c3:c9:15:3a:81:71:ca:11:
3f:25:7a:bb:ac:0e:34:6c:97:00:74:4d:d2:b4:b1:
16:47:19:88:f5:c0:83:97:04:dc:4d:02:9f:bf:fe:
a6:03:a9:b0:2c:2e:0f:1d:2f:06:0b:07:fd:1c:b4:
69:bc:46:43:a1:c1:3d:8d:29:3d:64:f6:2a:46:47:
d1:1b:95:33:d7:d0:51:a6:d5:4d:09:2f:85:2b:fc:
24:26:84:f4:22:7f:00:1c:39:dc:66:a2:31:c2:3e:
f4:8e:28:68:9c:2f:a2:5d:6d:b4:52:c8:10:4a:b3:
64:fa:cb:79:51:c0:05:66:a0:73:1b:e9:61:64:19:
7a:61:50:26:7d:31:f1:83:05:0d:f0:8b:88:d9:15:
0f:d9:3f:ae:52:43:17:4d:a5:69:bb:c7:14:08:39:
01:84:de:40:fd:4f:be:c8:e9:65:f0:b3:c3:53:1d:
8c:bd:aa:04:75:48:68:3a:57:a9:de:b5:dd:0b:52:
2b:22:aa:b3:12:bb:7d:2c:69:5d:f3:a5:97:0e:b8:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A6:31:7E:F6:16:85:1D:22:B3:31:A4:B0:C3:CA:54:B3:D4:2B:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:0b:5c:45:b0:be:ad:ac:d7:df:3e:4b:ae:ab:7d:fd:ce:43:
b0:2d:da:7a:39:f5:c5:8e:a8:c8:96:55:15:60:88:55:43:85:
61:e1:06:5e:1a:7e:c4:2a:de:3c:55:8f:5f:af:7b:13:d4:8f:
04:0c:fd:a7:64:0e:c2:36:b5:3e:2a:b3:e5:31:bf:5b:54:2b:
e0:0e:b9:ec:b7:fd:87:24:88:4c:ab:b6:c5:46:0e:aa:07:94:
ba:7a:6e:53:cb:7a:94:ca:da:d0:96:48:73:46:e3:ea:35:28:
aa:19:d1:23:3a:aa:d9:ef:b2:9d:a6:a4:e1:98:15:73:d0:c8:
06:e6:38:86:aa:5c:e7:86:e1:cc:9e:d8:6a:94:50:33:dc:06:
51:f4:14:8d:c6:85:c1:7f:ef:49:06:1a:8a:11:9a:d5:17:ec:
29:a4:fe:e1:31:c0:dc:26:a8:7b:02:c0:b5:af:43:ec:9d:b0:
bb:c8:c0:26:48:ab:7c:bd:ab:e8:6d:40:84:3e:4b:b9:13:9e:
d5:1d:7a:72:cd:63:78:4c:1d:be:d6:23:93:d2:06:6a:93:ac:
30:fd:f3:1d:10:e1:8d:ba:42:06:ec:5f:f8:cc:4e:53:55:55:
1e:69:85:56:de:de:2a:df:a1:30:7d:65:e1:4b:58:a7:9f:cd:
ef:bc:2b:15
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULOeY85fL+Ja5a20KLABmAAtwCTUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTRjNTBhYWNkNTdlMDA2NzQxNmVjOWJmZWQ4MWI4M2Q4
YmI0YWNhMzBmYmFkZjY2M2EyYjEzOWRmZWMxODRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCDwudBlCOUZGJt0WjkotdQcI/kLqTLHxj6RDH6T51ru3c2
dRGTCyG/esq7pfquG5nIJhfDyRU6gXHKET8lerusDjRslwB0TdK0sRZHGYj1wIOX
BNxNAp+//qYDqbAsLg8dLwYLB/0ctGm8RkOhwT2NKT1k9ipGR9EblTPX0FGm1U0J
L4Ur/CQmhPQifwAcOdxmojHCPvSOKGicL6JdbbRSyBBKs2T6y3lRwAVmoHMb6WFk
GXphUCZ9MfGDBQ3wi4jZFQ/ZP65SQxdNpWm7xxQIOQGE3kD9T77I6WXws8NTHYy9
qgR1SGg6V6netd0LUisiqrMSu30saV3zpZcOuENrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQ6YxfvYWhR0iszGksMPKVLPUK1MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y4YjAyZGQwLTljYWYtNDlmYi05YWUwLWRiZjRmNGRiM2IzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//EMAwDQYJKoZIhvcNAQELBQADggEBAIwLXEWwvq2s198+S66rff3O
Q7At2no59cWOqMiWVRVgiFVDhWHhBl4afsQq3jxVj1+vexPUjwQM/adkDsI2tT4q
s+Uxv1tUK+AOuey3/YckiEyrtsVGDqoHlLp6blPLepTK2tCWSHNG4+o1KKoZ0SM6
qtnvsp2mpOGYFXPQyAbmOIaqXOeG4cye2GqUUDPcBlH0FI3GhcF/70kGGooRmtUX
7Cmk/uExwNwmqHsCwLWvQ+ydsLvIwCZIq3y9q+htQIQ+S7kTntUdenLNY3hMHb7W
I5PSBmqTrDD98x0Q4Y26QgbsX/jMTlNVVR5phVbe3irfoTB9ZeFLWKefze+8KxU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:30 2025 by rpki-client