Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa
File: 5ab304f6-e1e5-467a-88a2-103320530506.roa (raw, json)
Hash identifier: qisPRrmGtcop3wGvhCkfd0ZGZsz36MoSUaio0Zpb4gw=
Subject key identifier: F6:03:FA:11:E5:BC:34:D8:82:F7:31:21:F5:D4:56:A7:77:D5:D7:69
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 545093B376E34DC402464FD4A5FEE3F4227FB145
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:627::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:50:93:b3:76:e3:4d:c4:02:46:4f:d4:a5:fe:e3:f4:22:7f:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=ecbdef392eb0ff814fdfbd971e8ab56d3e19d443a81ce9ed645f7fb31ccb23dd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:71:9c:56:6e:36:c8:6e:dd:34:ff:2c:b3:
e5:4e:53:be:4c:c7:e7:e7:df:9a:1c:84:ac:0c:09:
d5:6b:27:22:9d:d8:dd:76:05:59:21:d0:dd:93:2a:
51:91:18:5a:32:b8:3e:3c:c4:52:f9:e2:5e:44:86:
eb:59:f5:98:de:a9:bc:47:11:7b:20:65:2f:60:22:
d7:e9:b9:d2:39:97:c3:df:f6:d4:21:72:43:2f:5b:
78:ea:be:eb:4d:30:6b:10:f1:86:3b:08:50:71:ae:
d3:da:ad:32:c5:a0:48:5b:72:a5:8f:3c:8e:84:b3:
7e:a3:28:48:41:e7:1c:66:ea:dc:97:3d:57:7b:94:
86:13:8a:64:2c:f7:2c:38:6e:36:89:ff:8c:f1:95:
99:c5:36:39:79:8e:a5:2e:ae:af:6b:eb:21:7b:95:
fa:d2:3b:49:d0:45:fa:7d:7a:35:fd:06:a1:ab:8c:
3c:36:3b:df:d2:1d:c8:53:4e:79:91:33:8c:49:bd:
83:ad:cc:8d:90:81:d9:0d:b9:91:9c:1e:30:a2:42:
46:ee:92:a7:b9:91:2d:46:c9:8b:de:d6:c0:81:1b:
8a:e1:45:06:83:9d:d5:9f:0e:4f:83:ab:89:fe:ba:
de:3b:5f:6a:a2:96:a0:ac:65:42:a8:f9:82:0a:45:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:FA:11:E5:BC:34:D8:82:F7:31:21:F5:D4:56:A7:77:D5:D7:69
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:627::/48
Signature Algorithm: sha256WithRSAEncryption
71:fc:24:35:98:f5:c1:80:19:58:1a:ec:2d:12:b0:af:be:15:
7d:de:56:bd:e7:5c:1d:00:cd:42:65:be:df:5a:e4:d2:25:cb:
cd:da:58:22:ac:0a:56:ef:6d:1e:4e:d7:da:10:5c:a8:0f:e5:
9f:e5:9a:eb:ee:3b:6a:0d:f3:aa:8d:24:0d:57:79:e5:8d:3f:
d3:6d:91:c7:9c:d4:53:68:b9:ef:f8:ae:93:09:be:d0:02:89:
d8:e5:80:47:fd:a0:5d:42:bd:67:8a:ac:50:55:0f:f9:0b:f0:
8b:03:35:cc:78:72:f5:c1:30:35:65:df:66:16:67:94:2c:7c:
e1:3c:bb:31:ac:d4:6c:28:78:98:d4:d2:be:7c:79:b3:f3:60:
05:17:88:84:0b:d7:d6:85:5b:95:4b:53:60:1e:7f:1d:65:49:
84:16:6a:91:eb:ac:53:d2:3a:bf:6d:64:49:5e:1f:0a:d4:61:
24:da:4e:0f:b5:96:54:5c:fc:aa:9d:2c:54:10:82:03:7d:a4:
fb:f4:6e:c3:80:d3:75:68:40:dc:a2:95:80:d0:a5:1d:3a:b6:
4b:51:fa:10:22:99:a7:42:de:6a:26:5e:cf:8a:a1:37:be:d6:
f6:5c:60:ac:a9:ff:e7:38:52:88:0a:81:6c:bd:36:d8:13:91:
c6:66:1a:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:46 2025 by rpki-client