Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa
File: 28d15509-4877-4cec-b806-5464e3b5087b.roa (raw, json)
Hash identifier: tOB4jPx5EvHmkrrtz1eph2BYpE9hnTTwOjQS2OvWms8=
Subject key identifier: A1:DF:1E:D7:E3:EE:96:9C:14:E3:66:5C:A3:5C:70:D0:B3:22:DE:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F2BF05764E61750173E01FD61113958FF6D4A18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff6:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2b:f0:57:64:e6:17:50:17:3e:01:fd:61:11:39:58:ff:6d:4a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=5459d241cda7187357e7782316c6ce232f54036ca6729e05a7bd32fd01df4c34, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:ac:bf:df:67:85:c5:3b:9f:b8:83:48:66:
44:9a:51:ba:0f:24:fb:7e:26:83:33:18:ef:de:19:
d4:42:ce:8a:7c:4e:d1:75:98:43:5d:ef:87:df:fc:
9c:72:8b:5a:15:83:8d:0a:33:8f:40:49:a8:cb:41:
14:7f:ee:ef:2c:9c:21:aa:e3:6c:54:bc:1d:25:b4:
94:ab:ad:5a:0f:65:de:85:3e:5d:28:95:5d:06:59:
6f:ff:24:5e:ac:54:65:ec:94:de:c1:3c:64:6b:53:
67:83:e8:c5:2c:4c:6e:3c:78:52:52:88:1f:d0:6e:
7f:c5:8f:d9:37:b6:3f:e5:97:e7:c4:b9:e7:fd:64:
9e:c7:17:48:65:13:64:e2:34:c1:a8:32:42:09:a5:
19:53:e9:0f:6e:b1:5f:da:82:90:10:3b:cd:5e:53:
78:9e:06:63:44:90:03:ad:f5:24:19:fc:0e:1e:fa:
e0:2f:d4:5e:0d:86:21:b1:fc:1b:8c:f7:a7:0d:ac:
1e:3d:de:6d:20:cf:e8:2f:93:62:f3:79:70:e7:cb:
51:4c:a2:32:5c:f9:a5:cf:64:a0:51:13:e2:62:d3:
44:fa:1f:86:8a:2c:f8:0d:61:43:f9:e1:0c:a2:79:
d4:c5:96:d1:96:2f:b5:2a:8c:2e:0a:80:74:f3:05:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:1E:D7:E3:EE:96:9C:14:E3:66:5C:A3:5C:70:D0:B3:22:DE:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:4000::/48
Signature Algorithm: sha256WithRSAEncryption
d2:47:d4:17:41:90:6b:69:f0:5a:ec:18:63:c6:40:f6:72:99:
50:b0:14:31:75:bc:83:da:0e:3d:f3:0c:59:65:1d:3a:39:b7:
93:a3:c6:19:e3:b0:1c:c0:c6:92:af:b6:a5:16:e4:00:bb:08:
74:33:b5:9c:d1:46:1d:ab:b4:b2:69:87:34:a6:ac:50:28:33:
10:cc:e4:83:18:42:eb:4c:67:f1:19:40:90:da:f7:ef:26:07:
d2:aa:7f:84:41:88:fd:60:2a:34:22:47:c7:fe:de:27:bf:84:
4d:c8:e7:a2:f0:b9:ab:75:d6:b6:dd:7f:b8:5f:2c:73:24:3a:
fd:cd:a1:b4:e9:97:4d:e2:f7:15:bd:5a:db:bc:d7:23:b0:ab:
44:c2:c4:bc:22:5a:44:c5:bd:de:68:32:58:ff:ef:3e:7d:11:
28:77:56:ac:f3:0e:aa:b7:20:c1:eb:b6:68:01:f5:d9:d8:28:
b2:a5:d5:cc:f0:0d:a5:ca:10:2d:8b:5d:b5:64:76:2c:c5:86:
50:b5:23:96:73:10:02:4e:4b:d6:79:b2:2a:81:37:bb:10:f2:
0d:e8:91:77:90:37:b3:f4:1c:30:98:7b:0c:6b:b0:dd:3b:27:
63:0d:d3:90:66:c4:98:9b:f5:ff:37:01:37:8c:d9:7a:f1:1b:
07:f7:3d:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:04 2025 by rpki-client