Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f40aa3f-2702-44df-96d3-c95e3159f70c.roa
File: 2f40aa3f-2702-44df-96d3-c95e3159f70c.roa (raw, json)
Hash identifier: sKVX8jLfWKqpU+sZ/3yiofS4U5mO/URg+T82m4iqv+w=
Subject key identifier: CE:33:0F:AB:90:5D:47:D9:8C:D2:45:60:A1:21:0A:99:AF:8A:A7:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32F71E2D37D853CD7F6F2E513423F5731C038DF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f40aa3f-2702-44df-96d3-c95e3159f70c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f61:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f7:1e:2d:37:d8:53:cd:7f:6f:2e:51:34:23:f5:73:1c:03:8d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a43c96491d3e31ed06a76bcf037f8dc1c796075d450b0b4215f8b011831906f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:56:8a:35:9a:b5:41:45:86:9b:11:95:eb:
6d:de:19:55:ec:3f:17:b4:d8:47:1b:ef:34:5a:b8:
d0:1a:63:cc:5e:2d:b0:b9:a9:6d:e5:d7:45:f6:7e:
e1:f7:2d:0f:1c:b7:0b:3c:b4:1b:65:b8:de:19:a8:
af:e7:0b:3f:17:6d:ce:88:20:a4:3d:25:e6:eb:2f:
ee:0a:4d:87:50:97:fd:fe:10:f2:b3:1c:1b:a7:97:
7e:44:d7:66:85:7c:89:14:c0:25:d7:a1:2e:20:69:
89:5a:e5:2c:9d:bb:29:58:a6:24:65:03:fa:70:a1:
dc:d5:d1:8f:77:00:3b:a8:21:6d:97:c2:a6:a2:a9:
9e:b6:83:c7:80:c2:bf:a4:61:aa:63:34:2c:c1:3e:
52:7c:89:4b:d7:77:d6:3a:43:e5:34:72:12:f6:54:
ea:de:d8:22:6c:d3:91:63:81:59:5f:d5:bf:e1:48:
f8:b3:60:11:c5:e1:5d:88:32:3c:6a:07:d1:1e:24:
eb:b8:dd:f4:47:16:97:7a:b1:eb:fc:b9:a8:c6:b5:
1c:77:54:d2:e8:8e:5c:79:c7:b6:f0:4e:59:71:a7:
10:92:87:06:2d:19:d1:87:a7:2b:08:e4:74:f8:72:
a3:4d:a4:5a:61:ac:e2:5f:a5:31:82:00:6d:2a:6d:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:0F:AB:90:5D:47:D9:8C:D2:45:60:A1:21:0A:99:AF:8A:A7:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f40aa3f-2702-44df-96d3-c95e3159f70c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:5000::/40
Signature Algorithm: sha256WithRSAEncryption
89:8b:db:24:63:1a:7d:37:cd:80:34:40:43:bf:99:97:fd:65:
4f:eb:c9:5e:0f:62:8d:53:3a:e4:d2:e4:94:5c:cd:63:80:c2:
a0:1d:b9:ce:73:47:1f:83:21:fb:61:e2:3d:7e:a8:da:24:f8:
12:fc:db:a6:bc:25:c1:c2:c3:97:d2:d2:a4:f5:25:f9:a3:d7:
56:fb:74:58:c1:84:25:3b:2a:21:e8:31:9e:f6:5b:39:eb:83:
f0:a9:94:9b:e1:df:01:d2:72:ce:89:7a:81:c6:d2:46:43:e6:
d8:ac:6b:75:ad:8b:1d:b2:e9:47:46:bf:b5:c4:5f:83:ea:a2:
10:56:83:2b:48:2f:16:c2:64:4a:f0:0f:3a:1d:78:92:78:7a:
40:86:22:07:94:cc:c2:2b:57:26:65:0f:0b:5a:18:31:b0:4c:
99:a2:5a:5e:2b:0a:8c:2d:0c:92:6b:48:1a:f0:54:8f:d6:59:
14:c1:de:78:40:f2:43:57:c9:dd:55:79:f1:ca:4e:ba:32:6c:
63:85:80:38:ca:e1:a1:1e:c3:61:b3:05:87:8b:8b:a7:aa:e0:
60:a8:68:f5:31:62:c7:0d:a5:af:6d:71:8b:c9:49:0a:39:b1:
0e:65:ba:05:12:d4:2b:88:7f:06:1b:58:c8:68:ac:29:b6:9d:
dd:75:c9:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:34 2025 by rpki-client