Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
File: 2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa (raw, json)
Hash identifier: 3OZgQcKwM7djZbhtHDYSqFvZGWs5Lw6nMT2SOz3RyoY=
Subject key identifier: AE:83:41:FA:22:A8:4F:9C:EF:65:9C:8B:F9:DF:CF:C9:C4:30:97:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AAD648E7AF7431DAF318653DFF06A4583B9C04D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f2b:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ad:64:8e:7a:f7:43:1d:af:31:86:53:df:f0:6a:45:83:b9:c0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=350a56aebe2549a861c2f056fd7b7995427c36ad643255d7cca899e1c5c32085, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:44:97:6a:88:87:e0:04:44:30:1d:be:d1:
9d:f7:52:c3:06:21:5d:e3:d2:7f:d1:a6:26:ec:cb:
b6:73:eb:aa:62:bd:7d:6e:01:bc:fd:0a:55:06:28:
ee:19:62:05:ed:84:76:0e:4f:7b:2b:4d:4d:5a:15:
50:42:2f:15:75:40:c3:49:33:22:5c:42:7e:4a:21:
57:99:aa:8b:f1:7c:6f:b6:ec:12:56:7a:a7:cb:f1:
d7:ae:ad:76:ca:3e:cf:34:4c:54:82:70:4a:7a:f4:
87:8e:cc:53:d5:8a:ae:4d:8f:dc:9f:d0:6d:1e:5f:
02:d7:bc:15:0f:4e:36:3d:a5:94:da:c6:2d:54:d5:
7b:3e:79:12:b6:fd:eb:b5:69:2e:f0:05:b1:8e:71:
52:ec:ad:88:f1:82:95:d8:de:0c:6b:80:bd:ac:47:
37:e4:fa:8e:a5:bd:89:0f:6f:dd:65:27:e6:0c:7c:
96:35:64:ac:c9:8d:a7:8d:24:7f:b6:9f:a2:66:5f:
ee:bb:c9:f5:22:45:de:e2:5b:d1:ca:f6:48:a2:5e:
5d:a7:ca:28:98:ed:12:66:d2:44:70:7a:c9:65:12:
da:1d:6f:b5:24:ce:2b:04:a3:3b:5f:f0:d5:5e:51:
d5:e4:30:c2:74:c5:5b:3e:6b:0c:b8:a8:b2:57:e9:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:41:FA:22:A8:4F:9C:EF:65:9C:8B:F9:DF:CF:C9:C4:30:97:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2b:4000::/36
Signature Algorithm: sha256WithRSAEncryption
c3:81:6a:10:11:49:10:12:57:7f:88:8d:78:00:bf:87:12:e9:
82:7d:69:7d:ff:be:3e:b3:64:d6:51:5b:6c:85:c0:8f:51:6e:
14:1a:7b:87:d7:24:8d:08:f9:cc:76:fb:d1:44:d2:9e:80:8d:
75:f0:d8:4b:ae:89:8e:94:d4:a9:b9:b2:e1:13:24:4d:ac:2d:
56:60:ab:a7:9d:ea:af:d0:74:5d:5a:68:67:d1:ed:0b:45:cf:
2b:c6:8e:8b:e4:e4:46:2b:66:de:72:38:bf:a5:ed:bc:f6:b6:
60:73:e1:c5:db:32:2a:69:de:72:91:b1:3b:86:29:2b:6d:46:
89:6f:29:c0:18:f4:32:ab:24:3f:36:90:09:7f:cc:69:4d:ab:
54:69:3b:24:9a:a0:70:a9:19:d9:74:ff:2e:1d:b6:fe:9c:b2:
90:92:e7:ff:46:e7:a3:33:69:dc:c7:1e:a6:c2:f6:79:1e:f2:
6e:82:41:7f:db:06:a8:91:d9:11:98:8a:37:0b:16:71:83:77:
2f:e3:64:ac:05:8f:9b:bb:60:e2:12:b5:6a:fb:71:0f:ff:74:
87:26:01:98:1e:a3:b6:07:91:4e:f3:88:8a:9b:45:61:6d:41:
cf:20:bf:70:a2:44:bd:39:59:a0:ae:22:40:94:67:30:5d:14:
fd:b1:83:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:34 2025 by rpki-client