Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
File: b6c99ca5-333b-4905-96bb-8272aaedfc25.roa (raw, json)
Hash identifier: oohpPbsMYYaXzSKa2sN54atHB6VgxHv9IPaEqYNbZPo=
Subject key identifier: 14:65:5F:E1:AB:EE:B2:42:72:F4:9F:75:08:7D:79:92:4A:8E:23:29
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2871E7B06E3FE2E3CA83CBE0C80205ED1E7A571A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:397::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:71:e7:b0:6e:3f:e2:e3:ca:83:cb:e0:c8:02:05:ed:1e:7a:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=6c153b831cc730873acf7e1272a76805e0f302902fb708819d8d3bbb9406b7f3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:22:86:17:75:27:63:f3:03:b9:a0:c5:23:
ee:29:57:9e:9c:83:44:9e:6b:fe:ba:30:5d:7e:24:
1e:65:a8:25:12:35:47:93:36:11:be:5b:e0:f6:7e:
e5:76:92:75:28:63:fa:9b:5f:d1:77:54:ce:0e:a8:
b8:5c:20:26:97:e4:51:56:13:52:b4:97:c2:70:fe:
2a:32:d1:69:a1:30:cd:a0:31:69:89:ad:de:c8:db:
4e:79:77:6a:63:0e:68:a4:ea:ae:29:f7:3a:ce:94:
0a:54:8b:89:dc:ae:7d:4f:cc:28:7f:78:48:f3:21:
86:05:1f:b4:b8:93:94:c1:f1:74:76:7c:65:97:2e:
08:c1:c7:0e:8c:ec:3e:3b:2e:f8:37:c9:57:18:c4:
11:34:12:68:d3:18:63:3c:8d:ff:73:8a:7b:b8:a8:
44:e2:5b:c8:d1:fa:e0:f3:34:91:e7:dd:d7:05:47:
e0:09:50:eb:64:cd:7e:5f:85:49:30:87:15:43:0c:
24:c5:09:ec:7b:35:08:25:42:bc:94:ca:e8:0d:ca:
11:40:42:d2:67:ee:99:73:91:63:a2:ce:e1:da:21:
76:25:76:3d:c9:0f:fb:05:1f:57:cb:88:84:45:07:
9f:dc:84:76:5e:97:fd:41:b9:fc:2e:7b:d6:ef:ac:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:5F:E1:AB:EE:B2:42:72:F4:9F:75:08:7D:79:92:4A:8E:23:29
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:397::/48
Signature Algorithm: sha256WithRSAEncryption
a7:da:01:68:ae:d5:12:82:19:65:66:bf:21:8f:83:20:e3:08:
4c:d4:4f:56:56:7c:d6:72:d2:7c:28:05:04:99:da:0e:2e:0e:
69:0c:f1:fc:9e:18:48:b4:0e:dc:a0:3b:b1:9f:ae:af:ca:09:
19:74:26:78:4e:bb:ce:c4:19:92:5d:c0:88:ff:6c:47:60:ca:
7c:5a:2e:3d:6f:c8:d9:d8:92:83:5f:55:0f:8b:cb:5f:22:f1:
a0:b3:e7:15:c7:aa:20:0e:5f:af:c1:9a:bc:1e:7b:6d:8b:9a:
4a:35:69:3c:3b:31:45:31:91:f9:48:d6:4a:ac:58:f8:09:79:
1e:be:98:42:90:98:9a:cf:38:b6:32:52:20:46:ad:5f:6e:a9:
2a:53:05:4d:35:45:7d:85:a8:51:5a:09:8a:9c:8d:43:17:92:
19:e1:01:75:8e:0a:24:27:37:08:10:a6:f7:4a:94:a8:2e:cb:
41:92:47:01:9e:17:bd:f7:d8:bb:6d:3e:38:43:f5:cd:71:30:
b8:c6:ed:2c:7d:61:a3:68:11:f3:9f:08:5b:67:ea:00:36:23:
bf:14:f4:41:6f:79:3e:23:fc:b6:5e:ba:bd:05:f2:cb:4f:f5:
f9:cc:4e:55:ca:00:8b:a9:d9:f5:30:34:30:13:8c:80:bc:97:
ba:a6:4e:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:48 2025 by rpki-client