Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09274a6e-c594-40a2-a399-215fd591cb1a.roa
File: 09274a6e-c594-40a2-a399-215fd591cb1a.roa (raw, json)
Hash identifier: 2w939dNIpWzG4jNsnLEOmFO8NAivo3ccZhSDBh5sr6k=
Subject key identifier: 1E:BD:77:A7:67:78:75:0C:DF:F9:C3:26:30:A3:FB:6F:C6:0E:79:E8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7B11F93FAC8C7821A1004672EE369F8D9183C23A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09274a6e-c594-40a2-a399-215fd591cb1a.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:ae00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:11:f9:3f:ac:8c:78:21:a1:00:46:72:ee:36:9f:8d:91:83:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:4b:14:4f:b2:92:15:ca:55:97:a8:68:f9:
c7:7f:c1:b1:07:33:11:cc:3e:ce:03:b3:9a:f1:d1:
64:c6:86:a1:8c:80:40:ce:69:a5:84:05:d7:bf:44:
33:ac:7d:a1:75:b9:f7:29:52:cb:e3:6e:89:76:6d:
29:0b:d6:96:ce:6d:e1:08:db:7a:80:72:f9:da:c6:
18:91:1a:2d:61:fa:de:ea:7e:81:ec:b7:ad:5d:d9:
4e:7e:74:3b:07:d3:58:33:8d:18:87:d4:a7:83:1f:
d9:63:3b:7d:2b:d7:76:f1:e6:40:76:3f:57:19:f7:
b1:ca:96:70:2a:a9:4f:be:c1:97:08:4c:17:91:da:
30:8b:15:60:8d:dc:5f:22:d9:0d:10:ec:a2:b1:29:
03:25:cd:00:d5:07:29:99:4c:b4:75:90:cb:33:f6:
47:96:df:1c:e6:9d:57:eb:83:37:6e:8a:92:34:a3:
ed:b3:ef:99:50:ab:88:07:7d:02:a7:15:3c:64:c3:
98:2b:07:c7:70:b2:c8:07:e6:8b:4b:e7:3f:fe:0e:
ca:fd:51:12:ca:8c:04:83:cb:84:13:20:33:4c:f2:
06:7f:b7:6c:2e:b6:c2:e4:5a:10:f7:d9:23:0d:ae:
94:4a:f0:5e:5a:5f:ae:36:33:43:4d:7d:a0:53:44:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:77:A7:67:78:75:0C:DF:F9:C3:26:30:A3:FB:6F:C6:0E:79:E8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09274a6e-c594-40a2-a399-215fd591cb1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
c2:8a:31:1c:ba:76:c4:10:75:49:66:b9:7f:85:62:ea:4d:08:
8b:4c:4c:aa:e4:06:54:ca:51:fa:98:2b:3d:48:e2:1b:1c:1e:
6f:3c:f7:c1:18:4a:b0:87:be:3b:46:39:09:aa:d2:e9:fd:ca:
47:40:ab:04:8d:0d:b1:80:3f:4f:c1:e8:62:34:c6:a7:cd:d8:
56:5c:e3:dc:a4:38:06:6f:00:2e:73:47:3e:4d:b4:6d:d4:b7:
c7:2c:33:18:ec:6c:f5:54:5c:0d:17:d8:41:46:c0:0f:d3:87:
e1:9d:83:4e:b8:ab:c9:03:ba:64:b6:34:fa:f0:b7:ef:9c:28:
c9:8c:80:bf:1d:bd:c3:67:86:69:51:b1:d6:d8:0a:1a:06:84:
d0:f9:e4:1a:53:68:02:e5:46:61:8f:6f:5b:78:1b:31:32:62:
60:a4:4f:9a:0b:6c:26:d2:e9:2a:86:5e:3a:0a:bd:5e:f8:aa:
39:90:89:cd:52:a7:3f:a8:3d:19:95:1a:1f:f8:74:22:bd:9c:
16:1d:7b:a2:5d:3b:76:69:53:4f:ab:ee:55:86:39:d0:66:a9:
27:3b:62:72:a5:13:35:e3:f5:af:1e:fd:d8:02:e1:e2:3d:f8:
bb:68:e7:d1:4c:70:88:ce:7b:16:b9:53:2b:64:56:aa:92:f9:
17:50:19:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:30:43 2025 by rpki-client