Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
File: b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa (raw, json)
Hash identifier: YnCHAc83JdHNczlwCc8Md12a8Lb7PfWhB/kjEk5Nvhc=
Subject key identifier: C6:EC:AA:D5:45:23:F9:96:BE:BB:47:15:5A:54:5A:9C:A8:A5:24:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B9EDDF67A7DDD72677984477FD66A633FD7B446
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
Signing time: Wed 09 Apr 2025 00:10:26 +0000
ROA not before: Wed 09 Apr 2025 00:10:26 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffa:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9e:dd:f6:7a:7d:dd:72:67:79:84:47:7f:d6:6a:63:3f:d7:b4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:10:26 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=ca5920bb5aa52a1829c2590544886c3dc554bed4b905b6a50c22aff5a34ba8a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:27:b3:ac:58:05:51:48:b3:c2:48:cd:9f:
7d:ab:0b:1d:c7:63:60:d8:30:19:f9:34:5d:25:ef:
52:68:5d:7c:d5:26:ed:fe:3b:1a:ca:36:bd:53:5c:
45:92:52:c6:ab:1b:e2:ad:16:94:7d:be:29:ed:ae:
9c:11:14:0a:b5:8a:a0:b2:35:ff:5f:6b:1c:54:5f:
40:ac:52:65:34:fc:31:4e:1d:5f:81:6f:62:e4:3c:
d4:07:c2:8c:03:db:85:bb:ac:d1:7b:02:49:c5:49:
d9:c2:12:f3:10:bd:24:21:e5:5d:a0:b7:fb:63:32:
a4:a1:75:83:53:36:f1:b7:ad:94:41:6c:04:d2:4a:
32:15:1b:ad:73:f1:df:49:c5:27:c4:79:46:5a:c7:
9c:89:52:1a:92:92:63:05:9e:f2:e8:bf:85:05:f1:
90:06:bb:18:43:26:5c:98:5f:53:47:79:b1:ad:cc:
23:b4:cf:cd:08:a7:da:b3:b8:8d:2c:39:10:81:9d:
5f:22:70:4c:5d:1f:29:10:d6:4e:fc:15:aa:ad:48:
21:a1:28:69:89:89:1a:fb:ed:44:9b:ae:0d:10:21:
7b:98:3c:ac:c0:1f:43:3b:8b:87:04:55:59:5a:5d:
f1:65:0b:21:bd:d7:1e:18:29:7c:34:35:f8:92:12:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:AA:D5:45:23:F9:96:BE:BB:47:15:5A:54:5A:9C:A8:A5:24:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffa:8000::/40
Signature Algorithm: sha256WithRSAEncryption
97:a5:ad:d3:e8:bf:2b:be:af:62:20:ad:4b:90:3a:13:26:44:
82:13:6c:32:70:98:f2:26:91:d4:c2:6b:ac:0c:cb:96:ae:f2:
f9:76:72:14:8c:ca:ed:6a:7a:d8:b4:a3:79:e5:d0:dd:a5:a5:
10:d9:8c:9f:c1:a2:c6:7f:97:78:90:f3:25:f8:15:68:ee:63:
dd:20:9f:8f:0c:ba:7e:de:87:55:f5:a5:03:39:36:a6:4f:7d:
05:2c:ca:bf:6e:c0:7d:48:70:e8:93:45:cb:d6:7c:04:e6:bc:
62:df:41:15:53:33:f6:96:d3:f7:fa:74:56:e0:43:c5:86:81:
7e:08:da:a3:fc:39:d6:58:98:24:e9:14:2e:d0:f2:c1:c2:17:
16:02:e2:a6:7d:2a:86:28:7a:ae:96:b7:1c:91:9a:a8:0e:51:
a7:41:ad:05:0e:d7:a3:51:ed:f1:b6:37:72:4a:23:ef:47:09:
17:3f:20:d2:40:4f:88:03:5f:aa:30:39:ea:68:11:95:ac:52:
9e:65:07:50:09:2d:a2:4d:cb:db:dd:69:d3:27:ef:59:e1:ee:
18:1c:67:72:08:2a:ac:91:ea:82:1b:7e:d6:d2:4d:24:69:65:
f3:27:48:5d:e6:16:4d:f3:a5:38:46:fd:43:1d:83:6a:76:9e:
8d:ae:81:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:19 2025 by rpki-client on console.sobornost.net