Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
File: 403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa (raw, json)
Hash identifier: g2/DOFC36mzH1dGAXHQCQevjt4iBI05OQK81nQrGQqo=
Subject key identifier: C7:8B:AD:EB:BB:45:0C:17:8B:11:C9:48:22:70:0F:70:16:5F:5C:DC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 06F8DD6C4ED09308B5614E501F5AEF5DE291F6A5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c0b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f8:dd:6c:4e:d0:93:08:b5:61:4e:50:1f:5a:ef:5d:e2:91:f6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=3df5be3c150520249ce29a8f32a48c8832cccaa4ec053f83fc67acb6ba3a3457, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:ec:9f:72:41:f0:de:50:4f:3a:f3:cb:dc:
48:bf:da:9b:43:7f:b0:dc:39:5f:2c:73:e4:73:65:
3a:b0:47:b1:b0:87:2a:92:9c:d6:d7:e4:00:34:9a:
56:2b:78:e8:b6:49:8b:6e:80:86:ab:29:38:59:f8:
e7:aa:81:76:75:16:f5:8e:55:c3:17:66:3a:6e:67:
7c:33:7c:c1:d7:62:5a:56:32:b7:71:3e:2d:13:84:
ed:64:21:d7:3d:88:46:8a:49:d6:78:ef:36:ed:87:
4d:3a:31:03:6e:73:00:e7:aa:a1:4a:da:73:e0:d1:
bf:30:6b:4a:cb:c3:29:c5:78:05:44:77:ee:6c:a2:
a5:22:33:0a:68:d6:e5:28:87:a2:95:03:4c:7f:64:
7c:3e:d1:ba:af:34:b7:c0:e6:56:7e:32:b5:28:f8:
1d:89:f8:e4:7b:bc:15:90:ce:67:56:cb:36:2b:d5:
be:c5:b4:fb:db:e9:9d:1b:1f:d2:16:be:01:68:d5:
93:a8:4c:53:71:e7:b2:d0:09:21:30:dd:40:92:61:
2f:3a:ef:bb:19:5f:46:1e:c2:e4:21:04:75:7c:2c:
62:f5:9b:80:20:3f:d8:72:85:a5:9d:b5:4f:df:6a:
9c:c3:2c:84:f7:87:ed:09:fc:49:74:06:fd:6b:e5:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:AD:EB:BB:45:0C:17:8B:11:C9:48:22:70:0F:70:16:5F:5C:DC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0b::/48
Signature Algorithm: sha256WithRSAEncryption
16:d0:a5:74:10:83:9a:9c:45:51:92:80:59:5d:7e:52:ab:b6:
5b:49:81:c1:a1:88:d5:1a:bf:59:11:d3:85:96:0d:99:32:76:
58:7d:a7:9d:2a:88:dc:0c:6b:99:17:f9:36:c4:29:8a:48:9c:
2c:17:19:64:96:b1:94:48:65:0a:6a:e5:6b:10:13:e7:c4:83:
30:83:33:67:71:5e:f9:5e:f0:c0:d8:6e:3c:66:34:3d:47:4f:
03:1d:05:24:98:bf:d7:bb:5f:19:91:25:e2:4f:20:52:49:c2:
6f:42:80:6a:69:bb:8c:da:87:55:d9:b2:91:9e:35:fd:0f:b9:
36:90:60:dc:7d:a8:8d:66:0e:1d:42:bf:ef:10:fc:a7:80:6f:
06:7c:3d:f3:98:7a:bf:8f:ab:84:50:49:4c:40:12:3d:9d:33:
79:fa:af:62:b8:ea:46:29:ac:55:73:63:d7:1d:58:2a:f8:3a:
89:ed:87:99:e8:99:63:76:81:7e:21:7f:4b:7d:36:18:76:ee:
5d:d2:af:de:d4:71:dc:f5:6e:ca:11:56:84:c7:f7:be:30:db:
07:a4:08:68:3c:d1:b2:bc:78:10:41:e0:f0:d4:7d:85:1f:ad:
7e:93:8c:89:b1:ce:c6:13:8b:47:5e:b8:71:d8:d0:d6:e3:8c:
4d:d7:cc:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:44 2025 by rpki-client