Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa
File: 0ab67b7d-0a4f-4571-a30b-9102eb413093.roa (raw, json)
Hash identifier: XXvOrMGi/fwBaBDkBzhTswaIOFNAKPzZhJYsEJOWFJg=
Subject key identifier: 9E:CC:DA:DD:6E:9C:4A:44:F3:C0:2B:A4:A5:AE:7D:44:AA:B3:D0:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C3970ED90ECF056626DA513F5BE2094E1DC8103
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa
Signing time: Fri 28 Mar 2025 15:51:38 +0000
ROA not before: Fri 28 Mar 2025 15:51:38 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:39:70:ed:90:ec:f0:56:62:6d:a5:13:f5:be:20:94:e1:dc:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:51:38 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:71:9e:26:16:c2:e7:15:4f:ad:9f:24:54:
03:1d:8a:b6:9b:a2:50:b9:e8:0c:70:64:a6:47:2b:
23:f7:a1:e4:4f:06:a9:4b:17:6d:6d:5e:72:c2:7c:
56:2a:ba:42:44:b7:b6:db:42:b6:ee:12:dc:4a:fb:
bc:1f:88:1b:b9:08:d1:5d:e5:ba:e8:a4:31:dc:4e:
2c:eb:fe:b7:7a:8d:57:12:32:1c:4f:05:2a:d7:0f:
da:1b:0b:7d:7e:27:01:a6:8b:5c:b2:8b:a1:94:a5:
4e:19:f8:52:87:b7:7c:16:0b:f2:00:d3:7f:ab:22:
b9:76:d7:7e:1d:54:2d:37:fd:e0:a3:14:01:f0:35:
a4:bd:9e:0b:81:e2:05:12:d8:fa:eb:27:d9:c9:1b:
50:1b:5c:76:5d:15:4b:35:08:77:75:b1:dd:00:75:
6c:8f:9f:a0:2c:75:6d:97:4d:bd:da:aa:53:fd:af:
e0:09:e6:2a:1c:96:bd:15:b3:2d:73:95:cb:e4:ae:
2a:bf:d6:11:49:8f:bf:98:5a:e4:7a:8f:b1:a1:52:
a8:91:ec:60:e2:b4:ba:ea:95:f7:bf:df:0a:48:b5:
ca:78:09:1b:67:b9:51:89:bb:9f:82:0b:5f:0b:a0:
35:53:61:0e:a2:51:f4:cc:db:34:bd:d6:69:23:d4:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:DA:DD:6E:9C:4A:44:F3:C0:2B:A4:A5:AE:7D:44:AA:B3:D0:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:1000::/40
Signature Algorithm: sha256WithRSAEncryption
06:af:16:e1:91:e3:2d:ea:8d:c7:94:a9:80:1e:45:37:0c:1b:
78:92:a5:68:00:a5:d4:24:b6:d7:0b:38:65:48:0b:54:90:49:
55:5d:02:93:78:d5:6b:d4:c2:1e:37:fa:8a:c4:6a:df:ac:77:
41:c0:6f:ee:b9:7c:bb:be:a3:fb:aa:57:70:85:cb:92:03:a3:
da:86:72:5b:87:aa:fe:79:f0:a5:66:3b:1d:9a:15:5e:d5:e0:
d9:2f:c3:db:97:a2:45:a7:b6:db:18:2b:df:7b:d5:c7:5a:b8:
9a:40:48:41:39:06:ea:0e:27:fc:1d:56:03:d9:9e:74:9e:78:
b2:8e:15:3d:49:34:67:d2:f3:fa:6b:6b:21:33:a8:f0:68:1f:
dd:61:38:15:ba:0e:f7:39:b8:da:1e:1d:ec:d8:8c:52:8f:dc:
1b:b4:2a:65:f2:f1:e2:e1:b4:f1:c3:1e:b0:c0:6e:9a:e1:32:
63:cd:2f:41:04:63:85:8b:45:bf:2b:57:50:00:68:22:7a:d3:
ff:7b:94:fe:37:ab:0c:54:a2:18:82:1c:d6:fd:d6:27:e8:01:
58:08:c3:89:5d:ac:ba:77:3f:6c:6a:f3:9f:b1:56:33:a4:fd:
d2:9a:60:f4:ae:38:06:dc:39:c3:92:46:3f:58:65:29:71:69:
b5:25:37:b7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPDlw7ZDs8FZibaUT9b4glOHcgQMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU1MTM4WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDRlNGRkMzE3N2I3MWMwMGNiZWZkYmM4NjE0OWVhODFk
ZGQwMTU4Y2UwMzY5MjE3ZDFmMjBhMzk3ZmVjNmU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCY5XGeJhbC5xVPrZ8kVAMdirabolC56AxwZKZHKyP3oeRP
BqlLF21tXnLCfFYqukJEt7bbQrbuEtxK+7wfiBu5CNFd5bropDHcTizr/rd6jVcS
MhxPBSrXD9obC31+JwGmi1yyi6GUpU4Z+FKHt3wWC/IA03+rIrl2134dVC03/eCj
FAHwNaS9nguB4gUS2PrrJ9nJG1AbXHZdFUs1CHd1sd0AdWyPn6AsdW2XTb3aqlP9
r+AJ5ioclr0Vsy1zlcvkriq/1hFJj7+YWuR6j7GhUqiR7GDitLrqlfe/3wpItcp4
CRtnuVGJu5+CC18LoDVTYQ6iUfTM2zS91mkj1OKRAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUnsza3W6cSkTzwCukpa59RKqz0FIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBhYjY3YjdkLTBhNGYtNDU3MS1hMzBiLTkxMDJlYjQxMzA5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/7EDANBgkqhkiG9w0BAQsFAAOCAQEABq8W4ZHjLeqNx5SpgB5FNwwb
eJKlaACl1CS21ws4ZUgLVJBJVV0Ck3jVa9TCHjf6isRq36x3QcBv7rl8u76j+6pX
cIXLkgOj2oZyW4eq/nnwpWY7HZoVXtXg2S/D25eiRae22xgr33vVx1q4mkBIQTkG
6g4n/B1WA9medJ54so4VPUk0Z9Lz+mtrITOo8Ggf3WE4FboO9zm42h4d7NiMUo/c
G7QqZfLx4uG08cMesMBumuEyY80vQQRjhYtFvytXUABoInrT/3uU/jerDFSiGIIc
1v3WJ+gBWAjDiV2sunc/bGrzn7FWM6T90ppg9K44Btw5w5JGP1hlKXFptSU3tw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:12 2025 by rpki-client