Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa
File: a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa (raw, json)
Hash identifier: aSCN7u+R1B2RNvC9UhLDGF93XtDbxTsaiwlozDuUfjw=
Subject key identifier: 83:C6:99:88:18:6A:C6:DC:57:2C:C6:64:02:59:A7:1C:51:36:63:CB
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6123055A0C07279F63B25B933F6359A02E43FF79
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:23:05:5a:0c:07:27:9f:63:b2:5b:93:3f:63:59:a0:2e:43:ff:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=42a486fa3e765f98c39470608e03e1a77e4190fc139fa9f49e990081b61addaf, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:03:4b:2b:0d:af:79:c7:e8:0b:22:1c:31:
94:8e:2a:1a:21:ad:52:53:46:43:ac:31:5a:8f:bf:
ba:82:b1:1e:4d:52:62:75:31:a5:66:a6:61:b8:f1:
8a:c9:15:1a:69:11:11:88:cc:da:e3:ea:27:ed:a5:
8c:32:5f:b1:8c:cc:ff:15:0d:da:10:d2:71:ef:33:
7c:d8:40:7e:21:1f:13:3a:15:db:03:f7:a0:59:c8:
d7:f0:e7:1c:c4:b8:3c:f9:f1:f0:c2:06:68:fb:95:
ed:5b:bb:19:09:57:2d:74:8e:00:00:0b:46:27:0a:
1d:f3:4e:bc:78:fb:fd:7e:5a:5b:c4:be:11:23:03:
d3:79:33:18:db:86:2e:ef:d5:b6:0e:f1:f3:c2:86:
77:27:e9:6d:06:9a:88:3f:30:8d:93:07:5a:77:87:
4d:f7:fd:fb:4b:29:e3:0d:d8:cc:19:5d:df:b4:c5:
63:34:94:29:80:e9:dc:e6:a5:20:0c:c0:d8:d5:b7:
e6:bc:b7:d5:dc:62:4c:93:5e:05:1b:57:d8:54:d5:
c9:cc:c8:64:25:1b:8a:19:6c:76:aa:ed:a2:18:3e:
52:d6:79:9c:a6:a3:76:fa:fd:3f:82:77:e5:6f:50:
1a:c5:fb:07:f2:80:f9:32:3b:bf:d8:50:e8:8c:47:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:99:88:18:6A:C6:DC:57:2C:C6:64:02:59:A7:1C:51:36:63:CB
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0e::/48
Signature Algorithm: sha256WithRSAEncryption
1c:42:f3:a3:f8:d3:95:d2:cf:98:48:44:c6:69:7b:e2:18:d8:
4f:1a:72:ae:62:9e:39:fc:2b:c2:26:7f:81:fe:11:6d:4e:32:
7f:d1:14:57:0a:64:3b:ec:1e:b4:fd:8f:2c:71:c5:7b:a3:9d:
45:fd:38:85:eb:84:5a:80:7c:9c:ce:db:31:8e:43:33:e9:3b:
91:c5:30:2d:8e:94:a0:a9:87:33:cc:1a:03:b7:87:0f:9d:f7:
f3:37:01:30:47:f9:4a:7e:f4:8f:42:b5:66:c7:9a:30:f3:d4:
a2:62:63:ba:a3:a7:ca:79:3e:ec:63:e5:6d:c0:92:9d:e9:12:
dc:12:f4:1e:27:56:cf:2c:a5:34:61:d0:f0:56:00:91:51:a3:
d1:5d:bf:17:5a:36:db:f2:49:59:f5:55:03:b9:e5:7f:df:dd:
28:d5:0b:88:fd:7e:4f:24:c4:8e:98:3c:b5:40:b5:ac:31:a0:
78:df:41:93:3d:4f:7b:89:a5:d2:3a:9d:db:33:85:77:96:d8:
e4:52:60:21:c5:79:df:93:49:d8:f2:73:b4:8e:9d:bf:63:2b:
a2:6b:ff:6b:c5:18:03:b2:29:2b:94:e8:c9:a5:92:4d:2a:d2:
16:c8:0e:92:0f:da:c2:d7:e7:85:b3:f8:cd:64:72:fa:07:35:
3e:ba:92:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:30 2025 by rpki-client