Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fea5607-c572-443c-b898-45d0b37fddbd.roa
File: 5fea5607-c572-443c-b898-45d0b37fddbd.roa (raw, json)
Hash identifier: xRfiRok5kjVz6yVfFn4lBtCQ6V64sJBQHjchSy5xppw=
Subject key identifier: 9A:54:42:76:97:8F:C9:68:DF:44:BE:58:AD:46:BD:22:BA:51:9F:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57DBA1B096029F4EEB3AD8304CC4FC40549DCC4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fea5607-c572-443c-b898-45d0b37fddbd.roa
Signing time: Fri 28 Mar 2025 15:51:39 +0000
ROA not before: Fri 28 Mar 2025 15:51:39 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:1080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:db:a1:b0:96:02:9f:4e:eb:3a:d8:30:4c:c4:fc:40:54:9d:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:51:39 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:68:a7:78:32:5c:c3:dd:1a:32:56:55:24:
3d:40:02:a8:2e:2c:c2:45:60:d2:b7:1f:a0:92:67:
eb:60:94:0e:05:f2:ca:6a:25:4b:fc:23:68:23:24:
e9:e8:b8:41:9b:7b:11:ca:5c:65:3e:1a:35:39:45:
57:5c:cb:bf:8b:5e:bb:83:d2:96:a7:c7:13:f5:a4:
b7:75:0a:fb:bd:d2:1d:3c:71:a8:18:65:b7:df:42:
2d:8c:d5:d2:78:75:c2:ff:da:39:7d:77:ac:72:38:
48:04:bf:54:9d:31:14:23:ae:ff:6c:bc:13:cc:64:
9e:21:54:74:ac:1e:de:2a:f4:f7:0d:82:84:a7:0f:
b5:0f:13:4e:17:3d:90:55:e6:50:54:9e:af:42:b2:
82:0f:eb:81:38:22:66:b1:41:d1:b5:8e:8e:0c:23:
b8:a2:b2:a3:b6:d4:cd:ea:55:80:87:da:25:d3:ca:
4c:d1:95:12:b4:c1:82:d3:66:cc:b1:e0:a6:bb:1e:
4d:fb:47:97:74:e7:49:b4:bd:a7:c8:1a:b7:36:c2:
ea:2d:9b:34:9b:4d:88:78:71:1c:bd:4d:65:94:31:
ff:bb:d3:ea:ca:94:d8:98:3e:3b:6f:2e:24:25:27:
06:37:75:ac:2a:85:6a:a5:c0:74:bf:ac:08:00:8e:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:42:76:97:8F:C9:68:DF:44:BE:58:AD:46:BD:22:BA:51:9F:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fea5607-c572-443c-b898-45d0b37fddbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:1080::/46
Signature Algorithm: sha256WithRSAEncryption
37:26:46:87:85:52:9e:22:a1:c2:89:4f:63:5b:08:1b:f0:4a:
de:15:3c:1b:6e:11:68:42:e1:04:d8:c8:0e:4f:d3:41:8e:cb:
49:8c:49:99:90:16:b1:6d:01:67:c1:cc:1c:4e:d3:c5:b6:11:
21:9b:67:ef:98:f4:ca:fe:ee:35:79:89:e2:26:13:28:fe:69:
87:12:b3:5a:57:cd:77:2a:db:63:83:23:cb:d0:d6:8e:51:c3:
0c:17:06:bf:4a:0f:80:7f:37:df:68:c6:8d:bc:12:76:1d:c1:
06:26:45:bc:46:43:34:ed:af:cb:32:44:f7:7c:85:6d:86:e9:
de:66:9f:95:2a:77:fa:8c:6a:d4:3d:62:58:c7:5d:3b:ea:81:
3f:e9:f1:d1:96:c0:bf:9b:86:7c:de:e7:e2:ae:c3:7d:12:c9:
f6:5a:dc:7f:c8:4a:d9:26:0d:3c:2a:39:44:06:ae:bf:12:42:
eb:07:73:bb:6c:a5:02:f3:60:60:1c:57:92:fa:89:e2:6d:a5:
b3:12:8a:a4:ff:87:ae:51:59:48:3f:ee:aa:b9:e6:fa:b2:9e:
31:f4:55:75:7b:b2:0a:7b:82:aa:43:94:96:f5:a8:d5:27:f0:
e0:a1:f0:e6:32:b6:c1:46:c0:f0:21:6d:6b:e7:7e:70:6c:70:
a6:b2:3b:3d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUV9uhsJYCn07rOtgwTMT8QFSdzE4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU1MTM5WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMDZmNTkzNTQ0OWJkYjBmZjVmMjhhMjgzNzdkZmVlZDAz
YTQ5YzZmZDNmMzdkMGZiOGNkNjljNmJlYjVhYjVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJJWineDJcw90aMlZVJD1AAqguLMJFYNK3H6CSZ+tglA4F
8spqJUv8I2gjJOnouEGbexHKXGU+GjU5RVdcy7+LXruD0panxxP1pLd1Cvu90h08
cagYZbffQi2M1dJ4dcL/2jl9d6xyOEgEv1SdMRQjrv9svBPMZJ4hVHSsHt4q9PcN
goSnD7UPE04XPZBV5lBUnq9CsoIP64E4ImaxQdG1jo4MI7iisqO21M3qVYCH2iXT
ykzRlRK0wYLTZsyx4Ka7Hk37R5d050m0vafIGrc2wuotmzSbTYh4cRy9TWWUMf+7
0+rKlNiYPjtvLiQlJwY3dawqhWqlwHS/rAgAjuzlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUmlRCdpePyWjfRL5YrUa9IrpRnyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmZWE1NjA3LWM1NzItNDQzYy1iODk4LTQ1ZDBiMzdmZGRiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/7EIAwDQYJKoZIhvcNAQELBQADggEBADcmRoeFUp4iocKJT2NbCBvw
St4VPBtuEWhC4QTYyA5P00GOy0mMSZmQFrFtAWfBzBxO08W2ESGbZ++Y9Mr+7jV5
ieImEyj+aYcSs1pXzXcq22ODI8vQ1o5RwwwXBr9KD4B/N99oxo28EnYdwQYmRbxG
QzTtr8syRPd8hW2G6d5mn5Uqd/qMatQ9YljHXTvqgT/p8dGWwL+bhnze5+Kuw30S
yfZa3H/IStkmDTwqOUQGrr8SQusHc7tspQLzYGAcV5L6ieJtpbMSiqT/h65RWUg/
7qq55vqynjH0VXV7sgp7gqpDlJb1qNUn8OCh8OYytsFGwPAhbWvnfnBscKayOz0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:41 2025 by rpki-client