Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
File: 186224eb-58a9-4d11-bc6b-39128a803177.roa (raw, json)
Hash identifier: wDymT72rtfpkVjYEEra2GOLA6B+nujKr4AaxR8cIkXA=
Subject key identifier: 47:5E:FD:E6:C8:0D:FB:94:5E:3A:5F:F5:26:37:38:69:DF:71:1A:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12B7332DF4DEEDEF3246E254990A85886245BE9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
Signing time: Fri 28 Mar 2025 16:10:26 +0000
ROA not before: Fri 28 Mar 2025 16:10:26 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b7:33:2d:f4:de:ed:ef:32:46:e2:54:99:0a:85:88:62:45:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:10:26 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:91:bc:3c:11:47:79:84:32:be:3a:f6:b4:
c3:47:51:60:69:fa:df:ad:ff:96:96:44:81:d4:10:
13:30:93:f6:46:53:2d:ba:11:9a:c9:b6:14:54:15:
85:f2:71:bc:a3:03:af:48:14:d4:b3:aa:5a:e7:31:
fc:bf:00:c5:f5:1b:b2:5a:6e:59:a9:ac:57:53:29:
df:40:63:52:65:0f:8b:04:b5:a5:ab:43:7b:70:13:
20:34:8c:ff:75:12:9a:29:25:89:ae:d5:77:41:28:
34:f1:b4:90:55:e7:b1:c2:03:6c:40:11:1b:3b:a1:
e5:97:cd:20:d9:78:3b:f3:5d:14:14:3a:ac:a0:26:
8f:b1:44:f0:43:09:ac:d6:e9:f6:32:4c:24:27:2c:
2c:fd:c1:82:3c:f4:17:f9:7c:ae:26:cb:4e:ef:47:
7a:e9:b3:ef:d1:00:e4:24:3a:8d:56:c9:20:f8:09:
a8:e2:07:ea:9c:15:e2:43:21:22:05:5c:78:c9:f1:
1f:81:1d:1f:d1:8e:be:64:93:52:dc:4a:fd:a0:58:
d6:fe:dc:bd:42:1d:fc:30:7f:e9:6f:ad:63:1b:f2:
82:41:80:5c:fc:38:bb:a0:3d:d8:85:7b:38:13:5c:
c5:cd:6b:f7:b1:f5:f1:93:e1:e3:20:4c:a4:9d:7a:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5E:FD:E6:C8:0D:FB:94:5E:3A:5F:F5:26:37:38:69:DF:71:1A:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:6000::/40
Signature Algorithm: sha256WithRSAEncryption
70:5a:c3:c6:15:dc:e5:0c:3d:62:27:ab:6b:53:4b:03:a5:2e:
aa:45:05:08:00:58:6f:e1:ff:70:cd:39:86:1d:f7:b0:98:8b:
2e:b4:76:44:95:d4:87:c0:95:fd:f9:a3:c0:4f:01:50:4e:99:
e7:42:07:3a:c4:43:a3:f1:17:29:8e:84:27:58:53:f9:e8:22:
96:47:5c:38:85:07:76:64:8d:15:a7:a1:9b:ee:6c:1d:a9:e7:
35:9d:14:34:ef:9b:56:f9:8d:8c:11:c9:b4:65:87:8b:b4:16:
95:dc:b7:d3:b9:9b:12:96:a4:c2:e4:13:e9:cf:6c:69:e6:fb:
19:df:93:aa:cd:9c:2e:8a:0a:19:ee:6d:37:be:a6:20:78:14:
98:3d:ef:e6:64:aa:5a:a3:6e:fc:31:04:53:aa:8d:3e:61:ed:
a3:b7:17:ae:c4:0f:19:9c:36:5d:5a:49:04:dd:04:0f:96:d5:
d5:7d:4d:f8:40:c9:4c:91:22:d1:c2:87:08:92:5e:01:7f:f8:
53:6a:8e:5c:97:ee:5c:fe:05:34:1a:70:64:35:f0:dd:a8:60:
53:fb:cb:9c:a8:7c:68:a6:46:0f:8c:62:de:5f:f5:21:22:ac:
d3:ff:d0:8c:f7:0d:5f:2a:72:f6:d7:48:56:14:af:28:cd:ae:
1c:2f:1f:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:30:54 2025 by rpki-client