Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b296392-38dd-4491-8b2d-b792d2159f3d.roa
File: 4b296392-38dd-4491-8b2d-b792d2159f3d.roa (raw, json)
Hash identifier: sQuPyX4hASX6okvR5+0q0xmZBxtJ0r+n337E56V3MIE=
Subject key identifier: 01:94:24:26:D8:34:38:38:41:A5:2C:60:7A:E3:83:50:EC:36:FE:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BDF2DE3B70A5293A374344844CFC95B1BCF362E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b296392-38dd-4491-8b2d-b792d2159f3d.roa
Signing time: Fri 28 Mar 2025 15:21:07 +0000
ROA not before: Fri 28 Mar 2025 15:21:07 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:df:2d:e3:b7:0a:52:93:a3:74:34:48:44:cf:c9:5b:1b:cf:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:21:07 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:93:72:ed:60:ab:a4:7c:48:a9:cb:ff:83:
cc:87:88:24:02:2d:8c:a5:34:2b:ba:2b:e0:29:ff:
36:f7:86:cd:98:f1:28:a5:90:5c:59:33:38:c1:11:
80:ed:b7:59:50:57:f7:df:d0:97:4a:d5:e7:f5:12:
11:7b:f1:19:17:4c:3a:87:43:12:5c:8e:68:e6:81:
17:c9:6c:c0:6c:e5:94:9f:03:cf:6e:d8:8e:6f:29:
d5:6b:cd:85:d2:42:fe:78:2f:75:8e:d4:d3:b6:0e:
01:94:b4:39:48:24:a5:92:3a:14:12:cc:cb:77:b1:
fa:62:b8:7f:83:ca:8d:f7:72:33:b7:dc:8f:1c:50:
b5:18:bd:7e:44:35:ac:79:1c:b7:63:d9:db:cb:74:
ba:18:5e:9c:67:99:32:aa:eb:6f:42:18:48:39:8c:
8c:6b:78:d9:04:b3:33:7d:5b:ba:1e:65:70:07:70:
f0:f3:cf:8f:cc:01:f1:bf:45:4c:8b:40:c9:f6:a3:
9d:15:41:f8:c6:95:4d:02:4e:af:e0:c7:d5:43:4e:
81:4e:56:78:4f:dd:c2:58:93:23:fb:ab:1d:3e:f0:
62:93:c8:a6:21:53:68:1c:8c:d9:07:51:c4:4b:f0:
9f:de:75:c3:4e:e3:a4:59:7e:96:e9:e0:6b:cd:6b:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:24:26:D8:34:38:38:41:A5:2C:60:7A:E3:83:50:EC:36:FE:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b296392-38dd-4491-8b2d-b792d2159f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:1000::/40
Signature Algorithm: sha256WithRSAEncryption
17:41:4f:02:ab:c8:56:12:dd:1c:ae:50:b5:77:1f:f6:af:da:
0b:35:b8:7e:d1:44:eb:63:6c:33:f0:25:02:e4:ef:67:cd:0a:
5d:ed:b1:e6:a5:be:76:4b:4c:11:e6:f4:e1:0f:a3:b5:c0:ed:
7b:d6:4d:85:3f:00:76:8b:09:61:10:05:7f:67:5a:d2:a3:ed:
35:47:53:e9:9a:4c:6e:3e:f3:84:64:ce:34:1e:0f:04:e3:72:
0d:1e:e6:dc:d5:62:fd:d7:1f:0a:30:bf:f5:65:52:fe:d7:a8:
ad:7c:a2:12:cc:01:6c:45:84:1d:d5:b4:bd:6c:c7:ff:a6:a9:
b1:95:d3:eb:a4:cf:df:47:d8:26:9d:6c:87:dd:b9:8f:4c:02:
8d:22:48:bd:f9:4b:93:9c:c4:8a:26:39:7c:e0:d6:1c:f7:aa:
08:17:0e:62:6b:e8:a4:27:1f:89:fb:e0:b3:dd:9b:e8:47:a1:
de:b6:5f:8a:b6:d8:85:8c:f2:d1:48:d5:ec:bc:ba:a2:16:c2:
2b:ca:bc:48:25:4b:1b:74:d9:50:c8:7b:2d:a3:20:9a:0b:58:
ca:e1:5d:f6:ae:7f:97:8b:c8:ae:be:84:47:61:f0:4b:e0:e9:
75:58:b1:a5:35:1a:dc:5d:61:cf:07:e1:8b:9a:e1:43:6a:31:
72:c5:19:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:04:55 2025 by rpki-client