Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa
File: 4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa (raw, json)
Hash identifier: MSry/F4/nN9LSqrbO8kZHuhw3TQRnDgzA+ttZTWvxyg=
Subject key identifier: 8C:CB:E3:26:B0:97:6D:33:3A:DA:86:70:3A:14:2C:77:5C:49:0C:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 734E10C60B92190FA694CC4BA97B04E74BD263C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa
Signing time: Sat 15 Mar 2025 00:11:04 +0000
ROA not before: Sat 15 Mar 2025 00:11:04 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff8:a400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4e:10:c6:0b:92:19:0f:a6:94:cc:4b:a9:7b:04:e7:4b:d2:63:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:11:04 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:df:f6:a3:85:48:c7:2c:17:a1:6e:d8:6f:
0d:ad:28:e2:b4:ba:81:69:52:23:31:8e:0d:90:0d:
0c:be:54:72:fe:6a:65:d5:60:ed:fc:2b:44:fa:06:
03:27:60:a2:80:ec:3a:e6:ad:6d:6d:3c:2f:2d:69:
3d:33:31:a1:d1:37:ed:f2:7c:16:fa:8d:33:26:9b:
99:81:22:bc:6d:30:6c:bf:78:7c:0c:93:f6:be:a5:
9b:e4:e3:e9:c2:5c:eb:a1:97:bd:ed:35:fd:55:b4:
60:12:6b:12:de:3c:02:23:e1:79:f7:2e:65:96:22:
43:c3:2c:ab:37:d1:3a:f9:4b:47:ec:db:b9:24:0e:
fa:55:4f:e3:19:30:56:bd:2e:e5:90:40:af:5c:ee:
d1:44:23:e9:3b:4e:47:11:a0:19:d0:6a:39:51:7e:
58:b2:32:54:cc:49:26:ac:0a:0a:9c:49:ef:20:d3:
1f:55:f1:5a:f0:b3:f5:a3:9a:59:1e:3e:d4:05:bc:
99:8f:0a:14:83:43:ea:4b:66:db:e3:4a:4e:d6:2c:
ac:7b:b7:28:6b:5e:9b:dc:7a:7b:ad:c8:13:03:50:
83:28:26:40:09:02:cb:a0:18:1f:19:c6:97:05:da:
0c:ae:6c:d9:a5:72:ed:ae:29:4e:64:94:d8:62:72:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:E3:26:B0:97:6D:33:3A:DA:86:70:3A:14:2C:77:5C:49:0C:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff8:a400::/40
Signature Algorithm: sha256WithRSAEncryption
15:46:9d:71:4b:4e:a0:05:7e:3e:dc:c1:98:38:8d:52:25:26:
71:27:fc:33:f3:68:69:24:86:e1:74:9d:f6:99:40:b5:19:ec:
aa:2d:b6:39:09:5e:f2:6c:d3:50:33:f2:3b:58:2f:ba:8e:90:
4f:a6:7e:4c:8d:92:ff:a4:f8:dd:8f:61:4f:e3:f2:35:90:d4:
76:a5:b6:cb:8a:3e:b1:d4:5d:2c:02:50:bc:c1:33:0c:ce:2a:
ef:5c:10:1e:6f:98:ab:57:3d:7f:66:92:6f:17:92:23:0f:96:
a3:99:e6:99:66:2f:69:91:8a:bc:75:3c:a4:cf:5f:a3:ec:67:
ca:82:fd:85:fb:88:9f:86:c0:c6:6d:06:16:d1:b3:05:bb:59:
d4:ea:bd:d5:d0:bc:9a:e5:8d:69:c9:56:1d:b7:94:7f:54:5a:
71:28:51:34:75:ef:66:25:72:ab:ae:46:3d:08:b8:2c:05:42:
2e:ac:2c:a9:fc:11:8e:f8:0f:66:ab:ab:8c:ec:64:d3:d6:01:
61:87:41:03:e4:5e:9a:54:59:7b:0d:97:18:63:63:a2:b7:6f:
ae:96:04:50:62:f3:7f:fb:20:eb:96:ec:e0:06:f5:32:8a:c4:
ca:df:7d:44:a7:82:80:1a:6a:c2:ea:6b:62:b7:01:6f:57:c0:
47:01:3b:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:09 2025 by rpki-client