Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc0d9e-8319-421b-96a9-fce7851d3980.roa
File: 11fc0d9e-8319-421b-96a9-fce7851d3980.roa (raw, json)
Hash identifier: vYvbfS3q6uGP5I2UZIsZ4z+UsRO6dXfJ+QlG8kqCTMM=
Subject key identifier: CD:BE:34:35:C3:50:86:E7:4A:A7:25:29:8A:53:B6:F0:61:3A:AD:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2514496C3472EE44A283B4E7175D5A9285669753
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc0d9e-8319-421b-96a9-fce7851d3980.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:80f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:14:49:6c:34:72:ee:44:a2:83:b4:e7:17:5d:5a:92:85:66:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c0a4d90948022407635a9d58510b81ee4ef329983e29bca718f8874c599cf60f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:37:35:54:a9:cf:9b:a3:2e:99:d4:45:75:02:
8f:b9:27:d9:fc:9e:a5:8f:04:69:5d:e5:9b:b7:66:
c5:2d:ac:a8:f0:4d:d2:bb:06:cb:64:7e:29:b4:48:
9b:e3:31:6f:ea:3b:64:73:c9:6b:7c:49:33:8a:90:
f7:fb:0e:9d:63:9a:d7:c2:19:dd:78:b7:49:6d:72:
2a:2d:1f:34:59:a1:86:67:2a:1e:dd:92:7e:a5:66:
bb:15:66:77:9f:76:46:6a:66:85:16:1d:3b:92:96:
df:d9:56:66:40:89:c7:96:b2:ad:d9:56:95:3a:19:
ba:81:22:75:83:f4:ed:d0:4d:7b:61:fd:e4:32:71:
ff:65:b2:ce:b1:a7:df:56:30:f4:0f:76:81:7c:72:
ba:cc:1d:3c:37:a3:bb:10:b7:62:0a:01:4d:07:7e:
c2:11:61:2e:cd:eb:ab:b6:23:4a:42:6e:fb:9e:14:
bc:97:02:71:e2:0d:58:0f:55:f3:79:27:a7:aa:f1:
0c:0f:d3:0b:e3:8d:ff:45:8f:48:92:d1:d9:f9:10:
c5:c7:62:8a:15:a3:c8:1f:a1:ac:66:03:b2:b4:44:
3c:e5:12:32:69:95:ec:91:e2:ee:54:ac:56:b7:84:
6a:97:01:7c:ac:92:94:de:86:e6:a7:1b:6e:1e:e8:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:34:35:C3:50:86:E7:4A:A7:25:29:8A:53:B6:F0:61:3A:AD:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc0d9e-8319-421b-96a9-fce7851d3980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:80f0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:78:ba:08:6a:ff:bd:f6:50:b3:d8:a4:5c:05:49:05:9e:19:
a3:c6:83:c1:cf:fc:ac:47:9c:f7:54:94:44:94:50:68:8f:e7:
e6:84:b6:27:89:dd:a5:21:91:da:8c:f7:d6:30:c6:62:e3:c2:
51:24:80:ec:1e:51:69:bf:02:af:4a:70:90:06:9b:94:44:d1:
20:68:0b:39:cf:d7:3f:4d:90:b6:49:d6:b2:eb:d4:73:7c:23:
f8:cf:80:f7:fd:d7:1b:a2:17:45:2d:5c:c7:ca:72:71:76:fd:
39:0c:df:95:38:f8:78:65:89:0e:07:ef:51:59:86:e5:eb:ba:
6d:b2:32:02:46:ae:fe:97:3d:a6:35:70:a7:ec:95:4f:a2:b2:
29:42:0a:44:7d:06:c7:3d:34:67:85:29:03:ef:6d:18:09:db:
98:09:1d:51:e1:01:e2:80:14:65:da:d6:07:24:9e:4e:95:72:
f2:9f:4d:66:f0:56:0d:44:68:63:43:54:f2:c6:10:7f:8f:a9:
f6:0c:44:40:ed:3b:e3:7c:f8:3a:b8:61:0c:0f:ba:58:64:46:
51:fc:0b:80:bd:ea:5b:77:26:84:97:32:b6:15:eb:0e:11:62:
23:76:f0:1d:37:a1:16:70:fa:29:1f:e9:26:30:26:73:15:74:
ad:4b:cf:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:51 2025 by rpki-client