Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa
File: 73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa (raw, json)
Hash identifier: QhXHsdQPK370wqJLzCzttTkxdS+xeVdzbxGYwNt2qwU=
Subject key identifier: 29:28:24:F8:3F:0C:DF:0F:08:03:7A:88:EB:8D:4B:FD:69:38:39:0A
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 281E9F24C17DF69EEAAB4D65769D2BD31820FFAB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1e:9f:24:c1:7d:f6:9e:ea:ab:4d:65:76:9d:2b:d3:18:20:ff:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=e6e08b1e30f92326577f689b77fded3f1eb1c54c4aedb4f6bc69999259c535ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:2d:ff:99:2e:6a:97:17:ee:77:4b:d0:ad:
ee:f9:62:dd:67:86:b4:bb:1d:35:a4:50:e0:0a:93:
7a:a1:66:80:c1:2c:31:f5:6a:4f:be:fb:4f:b3:80:
af:84:e1:e7:3d:71:ad:0b:69:47:d3:15:d7:03:ad:
45:d3:b7:0e:f0:7b:67:ef:31:30:6c:b3:8c:36:11:
1d:ef:7d:3b:fa:87:0a:0b:2e:19:ab:a1:fa:27:8f:
64:34:5f:62:ea:ee:67:6b:5b:87:29:b3:53:84:ab:
60:49:f6:0b:39:e4:93:e4:90:37:44:78:c8:85:c7:
d4:1b:58:01:84:2e:56:10:6c:4b:75:a1:3e:f2:a4:
ca:5c:6a:a0:86:47:d5:b0:ee:14:85:1a:96:c4:4d:
e2:2e:c8:d3:4e:bc:30:9a:10:34:fe:4d:bd:bf:6c:
d1:9c:97:82:ce:77:e4:60:4e:91:4f:ca:56:5e:f0:
6b:2c:35:07:5a:11:4f:93:ce:0e:ef:15:d9:9d:33:
9f:4d:c0:95:e7:ae:5a:c8:4e:51:44:5f:25:94:e7:
cf:1c:e1:a9:60:17:0b:45:10:d1:e9:43:3a:b4:3e:
d0:a3:3d:b0:11:7f:b3:60:62:a8:0c:97:67:ad:d6:
01:9e:05:14:3b:77:97:e7:83:bd:f5:85:c1:52:31:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:24:F8:3F:0C:DF:0F:08:03:7A:88:EB:8D:4B:FD:69:38:39:0A
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c1d::/48
Signature Algorithm: sha256WithRSAEncryption
3e:c1:de:57:b9:8b:ad:d2:eb:14:76:c9:e1:43:4d:61:f7:d5:
50:9f:dd:a2:4d:74:69:ca:85:b3:be:61:9f:42:1d:fc:3e:15:
38:48:17:6b:9f:d0:09:78:47:6f:4c:60:04:8c:32:c1:67:06:
bb:f0:7b:b5:18:52:7b:55:0f:2c:a3:95:5f:7b:bd:78:26:fe:
1f:74:ef:21:56:0b:72:e0:f1:cf:1e:a8:42:fc:d8:44:f9:b9:
5b:58:a1:d5:b5:26:4c:03:05:4e:7e:44:bb:db:51:b1:bf:db:
a3:37:1b:c2:35:5a:7c:61:08:0f:a1:2e:30:ac:b8:d8:4d:c0:
97:de:66:ff:a1:6d:a0:f8:f3:71:f0:37:73:87:eb:d9:ff:2f:
fa:48:ed:64:51:aa:9f:a0:1e:0b:10:18:fa:6e:38:c3:9a:db:
92:96:52:38:24:aa:28:a1:6e:a5:ad:cd:a9:93:36:9e:d6:92:
6c:c7:15:c3:60:ba:6e:8d:89:31:27:23:1e:11:d5:19:ca:4c:
b8:74:7a:1a:67:76:14:98:76:b4:cf:8e:2f:7b:30:24:a0:ec:
78:f1:b9:69:24:71:ac:83:56:8f:0e:cd:93:78:0c:ec:25:d6:
f2:fd:f8:e8:ce:f4:fc:5e:56:46:6f:6d:a1:dc:22:d0:0d:c8:
97:87:13:a3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKB6fJMF99p7qq01ldp0r0xgg/6swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNmUwOGIxZTMwZjkyMzI2NTc3ZjY4OWI3N2ZkZWQzZjFl
YjFjNTRjNGFlZGI0ZjZiYzY5OTk5MjU5YzUzNWZmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgHi3/mS5qlxfud0vQre75Yt1nhrS7HTWkUOAKk3qhZoDB
LDH1ak+++0+zgK+E4ec9ca0LaUfTFdcDrUXTtw7we2fvMTBss4w2ER3vfTv6hwoL
Lhmrofonj2Q0X2Lq7mdrW4cps1OEq2BJ9gs55JPkkDdEeMiFx9QbWAGELlYQbEt1
oT7ypMpcaqCGR9Ww7hSFGpbETeIuyNNOvDCaEDT+Tb2/bNGcl4LOd+RgTpFPylZe
8GssNQdaEU+Tzg7vFdmdM59NwJXnrlrITlFEXyWU588c4algFwtFENHpQzq0PtCj
PbARf7NgYqgMl2et1gGeBRQ7d5fng731hcFSMcBRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKSgk+D8M3w8IA3qI641L/Wk4OQowHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzczYmFmNzdlLTI4YzEtNDdiYS1hNTRmLWIxMGZiNThmNmQ1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADB0wDQYJKoZIhvcNAQELBQADggEBAD7B3le5i63S6xR2yeFDTWH3
1VCf3aJNdGnKhbO+YZ9CHfw+FThIF2uf0Al4R29MYASMMsFnBrvwe7UYUntVDyyj
lV97vXgm/h907yFWC3Lg8c8eqEL82ET5uVtYodW1JkwDBU5+RLvbUbG/26M3G8I1
WnxhCA+hLjCsuNhNwJfeZv+hbaD483HwN3OH69n/L/pI7WRRqp+gHgsQGPpuOMOa
25KWUjgkqiihbqWtzamTNp7WkmzHFcNgum6NiTEnIx4R1RnKTLh0ehpndhSYdrTP
ji97MCSg7HjxuWkkcayDVo8OzZN4DOwl1vL9+OjO9PxeVkZvbaHcItANyJeHE6M=
-----END CERTIFICATE-----
Generated at Sat May 3 11:35:41 2025 by rpki-client