Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f52ad71b-b094-4b18-89f6-f09c75ec129b.roa
File: f52ad71b-b094-4b18-89f6-f09c75ec129b.roa (raw, json)
Hash identifier: imd5unc9LyB44C4jFnfQFOCyz4cHQ7nbPIwrfOYhUk4=
Subject key identifier: 12:A6:6F:82:26:6B:2D:A1:46:8A:BC:42:91:EA:65:DA:0C:78:B4:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CB1C56EFDADCCB0D407776F89329EECB1B35783
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f52ad71b-b094-4b18-89f6-f09c75ec129b.roa
Signing time: Fri 28 Mar 2025 00:32:07 +0000
ROA not before: Fri 28 Mar 2025 00:32:07 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:a440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b1:c5:6e:fd:ad:cc:b0:d4:07:77:6f:89:32:9e:ec:b1:b3:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:32:07 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:67:c7:b8:29:37:b7:c1:ec:22:a1:4f:42:
21:36:5c:97:4e:d1:31:37:dd:38:08:60:4a:d6:f3:
18:98:4e:b0:09:c6:2f:78:be:bf:52:7b:84:91:9e:
60:c9:c8:b8:01:78:05:94:66:5b:57:ad:c6:4c:23:
80:29:d0:59:d5:3c:ac:8f:c4:ee:50:6b:8b:82:44:
21:76:94:db:10:94:a4:97:a5:1d:46:21:dc:25:e1:
cd:8c:74:ae:1b:84:f7:29:4d:ea:53:8d:e7:d3:a8:
df:2a:6a:2a:19:c2:7c:21:fa:0f:4b:4c:9d:d5:f2:
dc:c9:72:ad:b5:f8:48:4f:11:26:7b:b1:49:b6:35:
1a:83:8a:48:9f:a7:63:c8:a6:83:48:2d:ca:99:bb:
a1:9b:31:24:4b:4b:58:e9:7f:70:d5:9e:0d:5f:63:
f2:de:66:b3:e5:07:08:45:bd:2d:f2:aa:3a:35:f2:
8f:c6:64:93:4a:2e:dd:b7:1a:92:ae:77:9d:f7:3f:
22:6c:11:dc:5d:82:1e:93:23:82:94:38:09:10:35:
7c:47:bc:72:80:f8:10:ca:70:eb:a8:2d:b9:93:3f:
b6:69:b0:0b:30:50:23:82:27:96:cc:0a:1a:25:5c:
83:80:7e:b3:19:90:6c:60:84:aa:05:3f:b9:58:a9:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:6F:82:26:6B:2D:A1:46:8A:BC:42:91:EA:65:DA:0C:78:B4:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f52ad71b-b094-4b18-89f6-f09c75ec129b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:a440::/48
Signature Algorithm: sha256WithRSAEncryption
26:aa:29:ef:ff:eb:38:d2:10:ab:ab:a3:25:5d:9d:07:7d:1c:
fa:31:50:fc:74:55:54:38:ca:c8:9b:3a:03:e5:2d:1a:0b:78:
fb:a5:e5:22:20:99:5b:14:47:8d:0a:c1:4b:d5:f7:1e:15:4b:
2b:15:cb:e0:66:55:48:cc:0c:66:82:b4:e4:c5:6c:84:ea:c0:
91:be:9e:7b:6e:46:e7:8b:99:75:44:bc:eb:db:e3:ea:33:ab:
b8:c7:23:8d:6f:3d:ef:04:61:d5:4b:56:75:49:e0:12:e3:4c:
34:08:34:f0:d9:10:5f:41:62:d4:9d:0e:51:2a:b0:61:f2:1e:
ae:9c:7c:ad:15:a3:5b:14:c7:b6:c0:3a:cd:0b:a1:8b:08:3c:
65:5c:c9:9c:91:ee:e6:b7:a1:54:70:ce:86:df:c7:de:5e:5b:
74:f9:01:06:62:3f:79:ba:87:ca:0e:b1:82:e7:b8:3f:35:4e:
2e:99:b4:0a:44:21:58:2d:8e:07:14:fd:75:8d:24:b6:33:2a:
0a:a5:7f:10:72:60:f3:a9:1d:86:62:02:ce:58:08:0e:10:97:
d6:e5:91:09:49:f1:a4:05:f6:2b:70:ad:e4:54:d0:50:73:00:
54:6e:d6:83:e8:82:10:d1:31:64:6f:79:7c:39:36:2f:2e:1e:
d3:df:91:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:50 2025 by rpki-client