Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/271e21d3-7150-47c8-982a-f53b364d1cec.roa
File: 271e21d3-7150-47c8-982a-f53b364d1cec.roa (raw, json)
Hash identifier: IPjDiR5VVdBKBxce1QzBmRaInxvCf/EPCkZxiHPX+NM=
Subject key identifier: 8D:25:B6:2D:BC:AE:F5:85:9C:21:11:F9:37:58:A6:86:FA:8D:DC:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30E1ACD7DDEC8F5F70D9E6558FBC78B72DE72494
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/271e21d3-7150-47c8-982a-f53b364d1cec.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e1:ac:d7:dd:ec:8f:5f:70:d9:e6:55:8f:bc:78:b7:2d:e7:24:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=1314a3315f1bebe70764c117f4b33fe7879aa665b13b36e2a6fc37f580038a20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:c8:29:8f:a9:e1:dd:70:12:70:8c:83:2a:
77:41:46:d3:dd:19:4c:29:ed:ba:e9:65:ed:da:e5:
c2:82:1d:35:0a:bb:7b:5a:fb:2f:30:ee:4a:7e:57:
26:a0:cc:19:2c:c5:bf:db:09:db:2a:de:ec:48:58:
45:b4:b1:7e:ac:4a:70:59:a4:d4:16:0f:49:e9:04:
7b:79:ca:c4:c6:bd:d3:87:2d:93:9f:e8:97:85:79:
2b:e4:34:6a:44:2b:e9:d6:63:52:fe:0f:74:9a:e0:
3a:92:fd:75:ed:cb:93:da:e9:5c:14:71:42:fa:de:
15:33:44:d6:e9:f3:c6:44:b4:f5:70:35:e2:01:b3:
94:37:99:60:16:59:2d:80:7f:71:27:8c:e0:b6:e9:
35:a8:3f:e7:41:8b:07:3f:44:8b:e5:95:e4:b8:14:
c0:66:51:76:e9:47:c7:15:ef:18:da:ab:d9:fb:47:
1e:f0:29:cd:84:41:69:c9:c4:0b:93:44:95:8c:ed:
38:b3:63:3c:7d:27:6d:c4:95:a1:37:0e:1a:39:03:
2b:f9:92:e4:6d:0f:41:67:df:55:cd:30:d0:cb:14:
90:56:5e:49:e7:fa:88:11:42:39:42:9b:dd:ed:b4:
81:6d:fe:0f:ca:f2:3e:ec:b8:05:48:69:88:55:f9:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:B6:2D:BC:AE:F5:85:9C:21:11:F9:37:58:A6:86:FA:8D:DC:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/271e21d3-7150-47c8-982a-f53b364d1cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:4080::/48
Signature Algorithm: sha256WithRSAEncryption
8b:5d:b5:9d:4c:76:bd:b5:5c:df:90:f0:e2:5e:14:c8:34:74:
53:b5:7d:37:de:16:c9:cf:94:f1:c0:73:cb:9f:02:17:cf:02:
4e:80:04:f4:83:f2:3c:c4:fc:df:18:36:90:05:8b:10:d7:1e:
9f:c8:d7:98:b6:8a:72:aa:47:0c:c3:e4:bc:a2:4a:98:e4:17:
4d:62:ea:8b:b7:05:0e:3d:36:c2:b7:41:47:a9:ce:db:06:f2:
d0:0b:7f:b3:bd:da:51:7d:74:da:53:1d:e3:a2:eb:de:89:52:
54:e6:9b:b1:c7:bd:68:7b:c5:91:bb:24:61:5a:88:8e:9b:b9:
45:a3:c1:85:e9:c5:23:b9:74:03:d0:4c:c2:19:fe:37:fd:49:
72:ee:34:d7:2c:c4:32:24:ef:6e:96:83:7d:b8:18:19:0a:59:
b5:94:d7:08:33:d7:c0:57:39:25:47:eb:be:fe:e4:64:e3:b1:
ed:82:45:37:89:37:e3:74:23:14:0b:a2:c7:cc:59:6c:92:b4:
2d:b5:e8:87:d2:74:b5:25:da:02:77:79:c9:bb:d7:b1:4b:4f:
e3:3e:ad:29:c2:bb:b7:6d:ee:c3:a0:1f:f9:c4:70:b1:69:73:
ec:39:99:ee:2a:50:ec:60:04:17:08:08:94:40:0a:f8:b6:61:
ca:6b:4b:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:17 2025 by rpki-client