Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/62ab21c1-eee4-4f19-b601-b4ac226e932c.roa
File: 62ab21c1-eee4-4f19-b601-b4ac226e932c.roa (raw, json)
Hash identifier: 55t1CmhPCArEpRIM0BQVZHqsFrUWVaa+2LICbEFHLBo=
Subject key identifier: 88:15:11:9F:14:21:50:BA:5C:C2:9B:09:87:41:DA:A1:0E:D9:7E:53
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 293E684E8131203D3F14977F88A343C763656E04
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/62ab21c1-eee4-4f19-b601-b4ac226e932c.roa
Signing time: Fri 07 Mar 2025 00:50:22 +0000
ROA not before: Fri 07 Mar 2025 00:50:22 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:309::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3e:68:4e:81:31:20:3d:3f:14:97:7f:88:a3:43:c7:63:65:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 7 00:50:22 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:77:fa:46:8a:68:f8:ee:3e:d5:47:25:85:
27:71:d6:9b:1a:77:ae:ef:6c:6f:ce:b9:5b:3c:b8:
cd:97:b7:9d:66:34:87:83:26:f7:54:e6:7d:b2:58:
3b:c1:98:37:40:2d:5d:2e:71:18:8b:cf:06:a9:c0:
81:c6:01:b9:10:88:8b:8c:20:b0:f3:1e:e5:73:f4:
31:ab:67:2d:d0:42:48:41:87:53:1f:7b:c1:0d:7e:
0f:f4:cc:b2:96:91:64:bc:6f:d5:fd:a9:26:e6:f5:
46:61:ff:86:61:d3:e5:8a:68:d1:9c:f4:a6:ce:f1:
01:dc:9f:ad:0e:06:64:32:d0:56:3b:61:ea:6a:a7:
57:f6:2b:b7:45:2b:3b:41:a3:24:29:68:a9:9b:e1:
f0:06:6b:a5:27:11:11:a5:c2:a2:12:ae:c3:53:01:
dd:e1:23:da:e3:00:68:ff:c2:02:6e:8f:77:aa:e8:
11:e6:5e:6e:6e:81:39:0b:61:05:4f:ef:9c:3a:a5:
99:ac:6a:62:fa:e4:a1:9c:47:88:6d:0f:99:ca:4c:
97:04:11:e9:be:f4:23:5e:30:e6:1e:07:41:fc:23:
8a:12:cc:56:75:c1:ec:22:78:3f:a7:ee:9f:9f:b4:
0b:79:a5:aa:07:3e:95:85:55:ae:41:46:1d:15:e6:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:11:9F:14:21:50:BA:5C:C2:9B:09:87:41:DA:A1:0E:D9:7E:53
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/62ab21c1-eee4-4f19-b601-b4ac226e932c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:309::/48
Signature Algorithm: sha256WithRSAEncryption
80:0f:32:59:e0:d7:bf:78:9e:2a:72:97:e9:6f:86:fd:d9:78:
8c:fd:79:ac:18:7f:c7:89:34:1c:00:c7:37:86:28:61:70:48:
80:22:bd:6b:00:68:cf:a5:50:82:e8:66:e8:af:92:20:04:c0:
85:51:c8:6e:21:8f:bc:ef:ed:81:ea:82:a6:b2:07:47:f1:fa:
39:55:11:ba:24:3f:b2:3e:21:ac:f2:4a:78:13:3c:0c:0e:bc:
54:9d:a4:9b:67:eb:29:ab:14:bf:3d:0d:88:d4:fa:66:21:ad:
e7:3b:d7:59:92:ab:b6:13:99:3a:03:de:f3:47:1c:fa:a4:df:
01:8a:49:ea:15:20:b3:3a:3b:96:18:6b:3d:9c:3b:13:69:04:
0c:e3:b2:3d:76:8a:4a:72:c2:af:99:19:b8:a6:ce:17:73:f6:
47:87:c5:d0:bc:dd:58:a2:ac:f6:95:4a:3f:48:8b:17:7e:c3:
17:2a:2d:dc:55:37:1b:72:58:c2:37:9a:0c:b3:b1:2a:60:20:
b6:08:ac:c8:e3:5f:be:58:1d:40:05:b5:53:16:51:e0:29:57:
da:35:7f:61:e9:79:c6:51:04:bf:95:fc:46:5d:78:2b:9e:14:
f2:dd:dc:3d:3f:ab:39:47:9e:1d:1a:ab:3f:09:8a:16:0d:69:
8e:6e:e4:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:40 2025 by rpki-client