Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa
File: f5342ecb-711b-446c-8167-0d2a93e65bea.roa (raw, json)
Hash identifier: Awt9k1ENQGG7Xz0kYA17TGR5Hxgi1JI9UwHzxbS5/Dg=
Subject key identifier: 23:BB:F9:86:B9:17:D4:F9:74:DA:10:29:16:A3:4C:0B:DF:C2:2E:A0
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 11C867C4B4843691B9966400F33F195786C78A39
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa
Signing time: Mon 17 Mar 2025 15:30:17 +0000
ROA not before: Mon 17 Mar 2025 15:30:17 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:c18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c8:67:c4:b4:84:36:91:b9:96:64:00:f3:3f:19:57:86:c7:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 17 15:30:17 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:08:4b:ca:47:2d:0e:27:b1:01:d5:22:81:
46:66:61:e6:13:c5:32:7c:6f:93:9a:b1:47:00:e0:
e5:79:a5:52:c8:d3:c6:fd:80:a0:73:0d:5d:b6:83:
d0:f7:56:e3:08:98:a7:a6:52:e7:e4:77:4e:b1:27:
9b:0a:e4:b3:56:eb:e4:be:99:4d:a1:2e:4c:5d:8b:
9a:20:07:fc:dc:46:0a:ee:64:df:d8:44:d1:bc:d4:
a8:86:d1:2a:4d:69:d1:43:e1:fe:98:6e:f7:4f:1c:
f6:ef:2f:c4:5f:ba:ad:31:ed:09:4a:8a:ff:24:86:
86:be:5d:7c:d1:4c:78:b9:31:cd:30:be:80:7c:19:
20:a0:ed:66:1c:e6:b6:3d:a8:1f:4d:6f:e5:d8:2c:
64:2d:9d:2d:c4:34:18:b5:af:5d:56:16:4a:2e:c0:
68:84:32:77:67:95:df:a3:bd:c3:fd:89:1a:68:07:
ef:88:db:3a:ab:30:f2:e3:24:9c:b6:45:10:d1:c8:
12:d4:00:d3:ed:d2:e5:33:c2:ed:85:fb:69:91:a4:
74:b2:a3:e8:f7:fd:bc:06:2e:5b:7a:2e:55:65:e5:
a9:b2:05:99:b5:07:27:2a:50:2f:50:10:98:b6:7d:
bf:c6:aa:11:8e:3f:b0:f4:79:2f:42:4d:47:21:a6:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BB:F9:86:B9:17:D4:F9:74:DA:10:29:16:A3:4C:0B:DF:C2:2E:A0
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c18::/48
Signature Algorithm: sha256WithRSAEncryption
92:68:c1:5f:fd:82:cb:9e:2a:48:c7:63:87:ab:d1:14:81:d1:
cd:ff:52:ec:4b:ed:de:aa:c0:ee:a2:0f:e4:d5:4a:e9:5c:ea:
4b:49:77:f2:1f:f3:ea:06:01:f5:60:44:6a:ad:95:3d:99:45:
20:bb:02:63:a2:3f:85:23:50:4a:4d:00:59:c1:e1:cd:1a:47:
ad:6a:b2:8c:4e:74:a2:f6:3d:35:8b:6c:17:dd:12:29:e0:79:
b0:1f:e5:ec:24:55:2d:6c:32:22:37:21:b0:73:8b:ce:4a:08:
40:80:fc:31:78:f1:c8:8e:74:4b:84:b7:65:ab:4e:fc:0b:d4:
cb:32:f1:48:bd:b8:eb:ae:fa:9e:f5:85:8b:97:cb:35:4b:3b:
ea:7e:87:fc:ea:ef:3f:44:ce:a5:60:34:98:09:18:59:86:2e:
95:6f:a3:af:32:32:0f:c3:39:fa:b4:86:84:5d:e1:96:97:68:
36:a6:81:5d:29:12:85:56:1e:6d:9c:24:16:cc:3d:5b:90:d2:
98:eb:e6:b3:e3:00:38:db:f3:89:e2:c3:06:ea:3e:6c:1e:d3:
d2:89:32:7b:8d:bf:72:33:d4:fc:ab:8d:af:10:b0:6f:10:4d:
3d:db:e2:a8:93:46:c4:5b:d4:21:76:cc:d4:3d:6e:75:ea:c8:
d4:26:a0:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:49:59 2025 by rpki-client