Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa
File: 1ba06761-3f21-4949-897c-ce569d7f3027.roa (raw, json)
Hash identifier: ko7vMse4qR0Vs+J5PnXr5S6ojYpNc5Px3QpWqOMPtik=
Subject key identifier: 68:F5:47:BE:81:4D:27:8D:C5:73:5F:2B:78:59:10:A1:E6:D1:4D:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66A5E0A8FEAD73D17D2E95CF112E2837B01F1DF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:e080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a5:e0:a8:fe:ad:73:d1:7d:2e:95:cf:11:2e:28:37:b0:1f:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=821f8764e211c51fb28999fffeffef68f11fcf826f7d129c3f8572d6ee44025e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:81:00:d2:61:b2:42:77:b9:0d:8b:63:87:
e0:a3:15:f9:cc:56:c8:d8:39:00:fd:0e:0e:ab:cb:
39:eb:40:61:d6:1c:65:91:b6:45:60:cf:3a:08:63:
33:3f:78:b0:62:90:13:66:b1:a8:fd:07:88:25:2d:
65:65:a4:d0:d6:38:17:ec:91:24:91:9f:4a:84:9f:
6f:08:43:c4:8d:2f:09:d6:e6:f7:61:a3:45:3d:2f:
a8:42:e1:95:9e:03:cb:88:75:d2:f7:08:80:4c:ff:
b8:32:26:32:5e:6d:6d:54:88:52:9a:0a:9a:4b:46:
91:8f:54:e9:ee:79:70:d8:cc:15:06:68:e6:7d:07:
e9:b5:f8:92:63:1a:3e:94:ec:a0:94:3b:aa:b5:27:
36:3c:36:ee:e5:11:4a:c9:71:21:38:c3:07:6f:41:
8c:f1:d5:6a:18:a3:ad:c3:23:bf:b8:74:39:1c:98:
53:3e:3b:1f:73:83:c3:6a:aa:27:11:ca:8c:91:1c:
db:af:fe:a6:fd:06:2b:9c:38:1a:41:4b:43:67:6c:
ae:af:c2:68:10:98:11:70:90:f7:a2:ae:ec:3e:1d:
de:24:d5:f1:5a:52:6f:26:f6:95:e9:f8:00:42:dc:
33:c1:9a:ce:a1:6b:41:b7:07:c1:8f:f0:c1:98:24:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F5:47:BE:81:4D:27:8D:C5:73:5F:2B:78:59:10:A1:E6:D1:4D:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:e080::/46
Signature Algorithm: sha256WithRSAEncryption
2c:b2:2b:b5:e0:b7:1e:63:38:56:6c:f5:3d:5e:a8:80:76:48:
0f:28:18:db:fd:e1:6f:50:07:88:f4:27:ab:fd:72:ea:66:94:
a0:32:f6:d9:ca:d4:d8:f6:50:11:7b:4d:87:88:6d:ac:58:45:
63:e2:48:6e:d6:cd:a4:91:31:a8:ba:9e:da:c6:41:b8:2f:51:
bf:f2:ec:c0:9a:59:52:68:26:6b:26:70:88:c7:a0:82:2f:e1:
08:40:02:5b:80:1a:6c:0e:e2:2b:f7:00:8a:bf:9a:d3:8c:6d:
d1:10:6a:9c:74:c3:89:7c:9c:a3:ed:45:ee:e8:75:fc:27:ec:
bf:9b:6a:09:7d:39:f7:90:b3:58:6c:19:67:7e:7a:ff:14:65:
13:de:f1:2e:0b:14:a3:11:33:8b:ce:0d:cf:29:d2:91:8e:01:
1b:3b:b2:05:01:90:4f:e2:b9:21:02:cc:4b:25:79:f7:36:81:
b6:cc:db:14:43:4d:8c:62:84:b3:28:59:c0:8d:45:04:00:b5:
05:4b:7d:c5:53:0a:15:ce:28:60:f5:97:37:ee:3a:28:7e:7c:
dc:b9:8f:2a:f8:5a:13:b4:e3:ab:f4:0f:44:82:9a:46:31:47:
66:68:fd:01:14:3d:85:7c:ea:8c:70:aa:fe:44:7d:0b:5b:2d:
bb:5d:87:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:45 2025 by rpki-client