Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cde0b8-e1f4-40e4-9236-1f37b51077b3.roa
File: 00cde0b8-e1f4-40e4-9236-1f37b51077b3.roa (raw, json)
Hash identifier: l21NrLfnsR4YPpntlNtmIH4AViisfL7NnO+z5lSQlKY=
Subject key identifier: D9:BA:08:22:CA:E4:5C:D2:51:08:E5:5A:8F:B2:BE:8B:78:A1:6C:FC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FC53F030032CC3AAB068D7097674D25FDC30C81
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cde0b8-e1f4-40e4-9236-1f37b51077b3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f13:4c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c5:3f:03:00:32:cc:3a:ab:06:8d:70:97:67:4d:25:fd:c3:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4b57621146de667aa7d1263b4c520b10a10ebf2ae081d9af4b7d4abbc59b06c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:ac:7b:19:fd:62:e1:db:12:ce:86:2c:c7:
84:8f:6c:90:d3:f7:14:17:0e:17:8c:31:3c:95:db:
54:17:b8:81:96:cf:46:87:a1:0e:a5:02:1c:90:39:
15:d0:eb:c3:cf:fd:b8:3b:04:05:aa:58:5f:77:4b:
19:fd:c9:db:98:48:43:e4:b5:95:92:a9:98:c1:ea:
4a:ea:78:fa:e2:14:4e:af:41:c6:6a:e9:e7:54:cd:
1f:d6:99:4d:2b:db:58:9e:95:f4:0e:6c:37:73:2e:
c5:de:43:54:59:48:ed:9d:c3:7b:26:aa:84:fc:ce:
8a:fd:10:c6:67:c6:e2:0a:ea:33:73:79:c5:b2:20:
11:89:4a:6c:f2:75:fc:3d:6b:9b:95:e2:94:f4:bd:
b6:ae:60:83:22:3c:89:55:eb:7f:94:15:44:ef:4c:
9c:9c:e6:48:69:ef:84:cd:33:c9:1c:63:87:88:55:
33:24:ec:52:31:1e:7a:17:b2:04:c6:ff:53:94:74:
e2:6c:9f:d5:99:8a:0a:b7:c4:a3:b5:8f:ec:23:1a:
f5:3d:7f:a8:1f:19:6a:a2:5f:eb:8e:fa:2f:dd:38:
5f:bb:62:8e:bc:4b:d6:f9:82:5b:fe:40:46:1f:fe:
24:5f:38:82:0a:0d:41:04:fa:07:b9:48:89:ec:7b:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:08:22:CA:E4:5C:D2:51:08:E5:5A:8F:B2:BE:8B:78:A1:6C:FC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cde0b8-e1f4-40e4-9236-1f37b51077b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f13:4c00::/38
Signature Algorithm: sha256WithRSAEncryption
0d:70:99:99:fd:61:2c:ab:aa:df:96:d7:30:05:ed:56:3e:56:
dd:95:a5:89:b2:85:63:ac:5e:0e:89:ab:e0:60:de:e4:fe:26:
6f:e6:2b:45:8c:a9:69:63:90:e0:1d:c8:24:94:d1:d0:30:48:
bc:91:f7:89:48:58:d0:89:1b:a6:4f:60:39:be:a6:91:f7:5b:
c0:7e:cb:26:ed:f2:ae:aa:0d:b8:54:93:16:f9:e6:e6:10:86:
d1:39:1c:a7:18:b0:ed:70:c4:bf:3a:5e:7e:a1:2c:c6:2a:b5:
60:35:92:26:f4:fc:cd:79:99:9a:e4:29:64:e4:14:cd:30:31:
29:3d:1b:f5:7b:c6:fc:0d:2b:d1:0a:2a:5c:91:ee:d3:fc:25:
82:bf:3c:41:35:19:88:47:9c:87:d4:16:7d:70:3f:7f:9c:ec:
0c:40:1e:9e:ea:90:cb:8e:59:35:d6:5e:7e:43:21:86:21:da:
06:22:23:f5:22:d5:2d:71:b6:49:83:ae:58:7d:62:d2:28:bf:
ad:c1:4f:65:77:ae:9b:15:88:a3:6a:20:3a:7c:91:85:ae:70:
7c:1b:3a:c3:0f:01:29:ad:32:ad:3e:e3:64:fb:a9:83:cf:fa:
02:98:ba:e0:00:1c:6f:6c:e8:c7:99:16:a0:04:7c:dc:3a:dd:
c6:13:7c:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:27 2025 by rpki-client