Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
File: 280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa (raw, json)
Hash identifier: W3OnVhw3YA8wuNYszyATpTPBySQRcYd4i0PACPDpfR8=
Subject key identifier: B2:0D:5E:93:88:20:BE:EE:52:AF:E6:DE:F3:A8:C0:D2:CC:4B:B9:CC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 22EFBBEAA4D638911AF2B9B88A7026914BB72141
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
Signing time: Mon 17 Mar 2025 15:40:14 +0000
ROA not before: Mon 17 Mar 2025 15:40:14 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ef:bb:ea:a4:d6:38:91:1a:f2:b9:b8:8a:70:26:91:4b:b7:21:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 17 15:40:14 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:43:5e:f6:1e:e9:3f:00:67:56:8b:cd:59:
ea:a1:6a:e1:79:fe:b9:2f:dd:c5:65:30:4e:54:68:
a6:3c:6e:81:70:cf:e3:86:10:d1:72:cf:46:bd:62:
d6:87:c0:b9:ad:d0:f9:50:0b:fa:b8:ed:33:68:cd:
45:33:02:a3:9d:4b:4b:6a:44:09:1e:ad:a7:e5:19:
84:a0:d7:47:69:49:cb:dd:4c:c3:30:81:06:83:4d:
a4:cc:56:bd:6f:56:40:49:64:35:50:28:53:80:48:
7d:0f:c1:ea:db:b6:9c:98:71:87:e0:65:33:55:af:
6b:84:13:75:93:4c:4a:72:53:e3:18:95:c2:fc:6b:
c7:01:05:00:ed:7b:df:43:22:8c:b1:ba:5a:7d:ec:
32:49:35:d5:b7:a2:93:82:e6:8a:2d:72:5c:32:4f:
d2:24:fe:3e:3e:c1:1d:9b:6e:6d:7e:41:76:1e:bf:
4e:2c:3a:d0:7d:76:38:28:2d:51:e1:3a:06:64:d7:
8a:f8:1e:98:02:01:83:8a:57:7f:68:7c:02:d7:d0:
86:a0:51:d4:f0:ef:d4:94:80:e8:92:34:f9:29:9e:
c6:36:33:6f:7a:d9:1d:1c:6f:11:f4:58:31:0e:5e:
84:82:0f:38:1e:be:74:97:64:b1:f3:89:8f:1e:e3:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:5E:93:88:20:BE:EE:52:AF:E6:DE:F3:A8:C0:D2:CC:4B:B9:CC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f001::/48
Signature Algorithm: sha256WithRSAEncryption
25:70:6a:ff:4f:bf:90:9b:23:cb:1a:57:44:ee:88:64:5b:80:
47:67:79:e3:a7:57:1e:6d:2a:8d:15:05:a8:6b:7b:2a:26:49:
11:8d:de:0d:d1:a9:5e:ad:54:72:ed:f1:f0:d9:b3:92:a8:9d:
97:cd:28:15:09:0f:22:e4:78:d5:d8:bd:68:26:5b:36:62:17:
8d:9e:cf:0d:0c:15:31:0d:ed:03:c0:c4:b2:bd:37:d3:e4:a3:
58:2b:fe:95:96:23:bf:4f:9d:de:76:bd:9e:97:e1:8b:2d:04:
0b:17:8d:05:87:03:a4:b0:de:03:a7:d5:89:a3:7b:61:86:55:
8c:3f:e0:62:aa:d8:d0:72:b7:68:2e:22:e4:67:71:6d:63:a5:
ac:bd:44:28:f2:59:1d:32:63:67:b0:47:d1:7c:d5:58:72:ab:
53:4c:f4:69:44:a2:00:28:33:ce:a8:ea:2b:cd:d6:d5:ea:a6:
49:20:94:1a:0d:10:fa:a4:51:83:1c:25:f1:4f:b1:34:b1:42:
25:d6:6d:1d:a1:dc:c5:4c:20:7e:97:6b:6a:a0:1a:39:c6:16:
66:b3:e5:a2:f4:ef:a2:c6:55:77:2a:96:be:71:3f:9a:78:00:
8e:92:a2:99:30:4f:ad:46:f7:7b:50:a5:19:b8:19:c3:60:28:
8a:dd:e0:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:11 2025 by rpki-client