Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1db2d3cb-1919-4667-8a60-3817c3f42245.roa
File: 1db2d3cb-1919-4667-8a60-3817c3f42245.roa (raw, json)
Hash identifier: Wnrtd1di/NqhgrlUYlf/EQ+Hx9dQkcXJBvbQ9KVeCOA=
Subject key identifier: F2:BA:F1:8D:EA:CF:D9:90:71:FB:67:60:02:D0:15:35:77:8F:C0:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A155741DA4EC2D490B62A9E636FCA5BCEFC6818
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1db2d3cb-1919-4667-8a60-3817c3f42245.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fff:50c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:15:57:41:da:4e:c2:d4:90:b6:2a:9e:63:6f:ca:5b:ce:fc:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=421c93f4983318d969d7c888400b9f9410b031fe3141406ed5a95c11a2b1c06b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:be:27:89:0b:73:65:06:db:d1:a5:b8:eb:
04:62:3c:a3:87:07:2c:45:c9:ce:4f:9c:f5:62:ad:
cc:37:d0:b2:4f:98:88:8c:c6:3f:30:2c:06:4b:98:
f5:77:30:c5:5a:3e:0a:1b:a8:40:6c:35:ff:e3:be:
4f:a0:b6:0a:9d:32:9f:44:a9:e1:f3:9a:8e:7a:19:
4e:f1:61:b7:d3:d6:d2:90:97:d0:56:7b:f3:5a:5c:
06:3b:07:c5:db:9a:eb:89:f9:b2:30:85:55:57:72:
eb:43:7b:cf:75:79:a4:22:4d:d1:7e:b1:a9:ba:b4:
f4:bb:d5:60:29:48:0b:72:b2:1a:be:ab:b1:ad:71:
56:75:90:85:a8:b0:60:6d:3f:0d:bd:82:e3:f4:6f:
a5:9d:b5:63:87:e0:c3:71:aa:d4:db:76:9c:28:65:
94:61:ee:cc:2a:81:7d:5d:cf:4a:0b:67:02:73:23:
75:82:9e:7e:f3:4d:82:ce:fa:8c:0b:b4:24:0d:92:
c5:b8:55:b3:1a:38:6d:de:36:e2:1b:ef:0c:ca:d9:
4a:28:7f:59:d9:d0:80:4a:7c:d8:c5:77:01:c6:a5:
13:0c:0e:b1:ab:6a:47:1e:fa:fa:fa:ca:85:b9:4e:
01:b1:e1:55:eb:9b:03:24:c9:04:db:ad:43:6c:03:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:F1:8D:EA:CF:D9:90:71:FB:67:60:02:D0:15:35:77:8F:C0:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1db2d3cb-1919-4667-8a60-3817c3f42245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
c4:5c:e4:cd:0a:0d:7e:e4:58:c8:5f:ea:7c:25:56:42:c7:1c:
9f:53:f9:26:73:28:21:68:b1:7f:5c:af:d7:2d:a0:74:a2:42:
a8:af:3e:58:13:e6:d7:09:7e:89:e6:d6:27:bf:f6:fb:cf:bf:
ab:c2:c2:b9:0c:00:19:18:66:8a:bd:9d:b3:89:45:85:d7:7d:
80:a0:41:37:a2:15:4d:9f:f1:ef:dd:13:a7:cd:9a:27:41:46:
01:fc:5d:12:6b:92:e5:92:fc:08:e0:00:6a:1f:7d:29:74:27:
a5:5f:c0:45:ad:7f:32:e8:7a:76:32:ba:48:84:6a:7a:b1:08:
a8:bd:60:5b:bd:de:cb:5a:f4:22:fb:5a:af:cd:d7:a3:81:c5:
91:83:e2:8b:36:ba:3d:1e:08:62:41:14:4b:e2:4f:85:b5:00:
1a:af:b7:b8:97:37:9b:91:00:b9:f1:22:bb:f9:df:29:be:0d:
6d:81:7d:b8:52:aa:95:b4:cd:45:97:d4:af:09:bc:9a:84:a1:
5a:b0:76:d9:e9:40:9c:0f:4a:c7:2c:0d:d5:e0:15:19:c4:f3:
ae:5e:75:a5:9a:27:43:bc:fb:a2:50:59:54:02:4d:71:98:fd:
d4:ea:69:06:85:3c:fe:4f:a3:56:82:04:d0:d3:1d:1d:0c:be:
28:76:bb:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:17 2025 by rpki-client