Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a14f544-138e-411e-91fb-8d41e76bd0dc.roa
File: 2a14f544-138e-411e-91fb-8d41e76bd0dc.roa (raw, json)
Hash identifier: 3hvcamppR7ipKAULJDFaCAnXfcg1cbIpnUbG7ARy6RI=
Subject key identifier: 60:41:0C:01:96:CF:AF:E7:96:EA:31:19:E5:30:FE:B8:77:1E:7B:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13E9DC8EF307C8915C8BBC1403F158F290E49BD0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a14f544-138e-411e-91fb-8d41e76bd0dc.roa
Signing time: Fri 28 Mar 2025 16:11:09 +0000
ROA not before: Fri 28 Mar 2025 16:11:09 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff5:7400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e9:dc:8e:f3:07:c8:91:5c:8b:bc:14:03:f1:58:f2:90:e4:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:11:09 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:8a:39:e3:92:11:9f:54:67:6d:b0:67:38:
21:89:3c:29:37:e7:02:c1:e3:e0:45:a8:5f:37:cd:
cd:ce:3b:58:29:39:40:80:bb:9c:7d:20:37:cc:16:
8d:cf:85:bd:6d:4e:73:18:aa:9b:15:f7:e7:0e:c1:
a5:6d:34:c3:8f:6f:eb:19:11:8a:41:89:c0:47:8d:
a5:43:c0:c5:f5:de:c5:08:fc:33:4e:18:30:88:38:
3b:d3:f2:61:58:05:6a:c4:a9:c5:77:f7:40:6a:35:
e1:97:39:bc:df:1d:1e:25:4e:b2:39:ba:d5:d1:d2:
a5:f9:3b:41:03:a1:47:b8:44:60:bf:60:d6:8d:88:
3f:04:de:68:09:02:b5:d9:08:08:a2:cb:9f:50:25:
e6:0a:7a:9b:2c:09:52:29:f3:1d:2e:76:69:6b:5e:
92:e9:0f:29:7f:c6:f9:99:87:b4:96:06:7f:bd:4b:
bc:fe:dc:d8:87:52:e5:fb:3f:6a:bc:73:81:7e:eb:
1f:67:56:a2:e8:6b:a7:0d:44:02:9b:95:6e:d9:e5:
16:b9:24:38:d1:7e:96:f0:67:c4:0b:40:80:40:7f:
28:c2:6a:4f:74:7e:63:d9:ca:ac:cc:77:79:6d:83:
59:3e:a1:4b:8f:e3:a4:3c:91:64:c1:62:b5:13:be:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:0C:01:96:CF:AF:E7:96:EA:31:19:E5:30:FE:B8:77:1E:7B:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a14f544-138e-411e-91fb-8d41e76bd0dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:7400::/40
Signature Algorithm: sha256WithRSAEncryption
a1:3d:ee:29:11:b1:cb:c6:7e:7f:06:49:dc:f9:51:25:13:15:
3c:b0:bf:7a:3e:4d:f0:df:ea:0d:e9:aa:22:12:0f:22:1a:f6:
d4:9a:26:de:3c:c0:70:d6:aa:c7:5b:81:26:f8:da:1b:84:d0:
0e:89:1c:05:33:49:91:75:19:13:fa:b9:16:9d:1e:78:36:a3:
06:b9:09:25:00:08:f2:70:07:9d:95:8f:79:7b:46:80:a6:9e:
11:0a:e7:9c:d4:ae:c3:9d:cf:a7:d9:c1:4b:59:9d:01:cb:a7:
84:fd:73:37:8d:01:d4:a9:8b:c4:4e:7a:4c:0d:81:27:fe:fd:
c7:5f:fd:0e:98:ae:86:53:9b:43:b6:a4:b7:0e:6c:87:b8:e6:
ff:fa:fc:b8:c7:09:ef:30:e3:b0:70:36:d2:3f:a8:e5:02:27:
7b:c5:7b:f9:71:01:4b:63:4d:6d:02:6c:0b:0e:76:c8:f0:5f:
56:89:60:7d:08:e3:12:0d:f1:d4:c5:7a:87:fe:d6:77:54:66:
49:1d:8d:25:f7:4f:86:6b:db:62:eb:fd:e7:cb:82:05:41:b5:
36:93:59:1d:ca:e9:6c:12:99:83:97:3a:9d:88:58:df:51:54:
ae:16:41:e7:43:83:12:1e:59:fa:9b:6a:56:04:bf:47:6b:d4:
45:e3:00:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:09 2025 by rpki-client