Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa
File: 4dac6043-34e0-4357-a5ac-4587a0261982.roa (raw, json)
Hash identifier: sn7aKbSZfqVZ5RTtHzA8hEu41GG+2LjNYqLIWGIIkIo=
Subject key identifier: 28:4D:CD:4B:C9:42:5B:ED:8E:63:D6:B5:39:1D:70:BA:D7:87:0A:20
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 431C19954C46058D62EB7A556EFEDC92ACF4257F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:396::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1c:19:95:4c:46:05:8d:62:eb:7a:55:6e:fe:dc:92:ac:f4:25:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=27105786d47e043a6239887dad1883f61ae5fa3552d1946befe94f6f171f04e0, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:e2:f5:df:e1:94:54:61:a9:dd:5a:d8:f4:
0e:29:45:07:c4:24:45:32:cb:f1:8e:ac:15:2c:73:
ac:a4:52:b1:f9:6f:a1:b1:2a:80:ae:e8:45:63:f2:
10:4b:a7:9a:70:51:66:65:34:43:71:ab:cc:11:33:
12:a7:4a:4c:be:6f:39:16:64:89:a6:27:f3:08:9f:
8d:8b:ae:4f:09:21:49:95:a2:0d:73:78:f1:b5:b7:
da:60:c2:2a:a6:b3:84:da:d3:d4:6c:94:d7:e1:69:
83:b6:a7:2e:40:ae:63:05:a6:27:9d:f1:91:ba:1b:
44:43:6b:6a:e7:65:fa:17:36:6d:37:b2:da:e6:34:
0e:67:49:70:34:88:88:1f:47:e2:e0:3f:ef:f6:3e:
1d:4c:fd:5b:bf:92:14:fb:e1:4f:fa:45:35:3f:46:
fe:f1:87:26:5f:21:18:30:e0:6d:af:c9:82:9a:5e:
4f:e4:a2:8a:7b:94:55:5c:e1:ac:f5:aa:a0:4c:5f:
e4:a3:3c:36:50:8b:ef:bf:42:7a:2d:39:65:b4:5e:
f7:3b:b5:e5:60:53:a7:2d:42:c5:3f:98:a7:36:d0:
23:ec:42:3c:e6:58:cf:f0:cb:de:66:89:ff:fe:b7:
e2:be:6f:8a:5f:d0:14:5c:e6:13:2d:f8:6a:ce:ae:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:CD:4B:C9:42:5B:ED:8E:63:D6:B5:39:1D:70:BA:D7:87:0A:20
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:396::/48
Signature Algorithm: sha256WithRSAEncryption
28:3d:f1:25:3c:53:1d:f8:c2:80:79:8c:d8:76:46:91:da:93:
52:2b:c8:4a:05:e5:f8:19:48:e9:b8:88:0e:0e:56:49:5b:2a:
dc:bc:41:b6:be:f4:1d:3a:17:79:c2:72:e9:a8:43:0c:00:c2:
8d:6f:eb:a8:0f:f8:b3:eb:e1:dd:93:6c:f0:2f:95:0d:16:56:
07:46:66:4a:c9:5e:af:76:ee:78:8c:44:19:64:c3:7e:88:98:
88:c0:9b:f0:d8:f4:1f:92:42:62:05:1c:58:73:65:1a:d6:71:
da:ef:d7:c2:b2:e8:01:7c:52:45:23:e3:d9:0d:2d:31:b8:66:
bd:b5:bb:b6:68:5c:e1:c6:4b:8c:7e:49:f5:b4:bf:73:ca:e5:
1e:47:72:12:e1:73:01:f2:bf:f8:cb:13:09:2c:b2:d9:3b:99:
51:87:b6:21:78:ab:f2:e0:1b:af:3a:ac:ba:d2:a6:cb:54:aa:
12:3e:39:95:d7:6e:c1:2a:92:0a:eb:7d:6f:1c:06:eb:cd:e9:
7e:a2:79:2c:19:ef:d8:ce:60:45:57:16:d8:9c:ec:75:51:d3:
08:f2:0e:0b:4a:7e:93:f8:ca:82:bd:05:bd:ec:f1:5f:73:dd:
e2:10:1e:2a:cd:41:c9:fc:02:b9:32:b9:7f:a2:93:8e:4b:18:
51:58:c1:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:35 2025 by rpki-client