Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa
File: 3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa (raw, json)
Hash identifier: Lc7z4oSVW9epFusxewnL4PI5pdJIUS1XSL7aToUhvks=
Subject key identifier: BB:2C:D4:8A:D2:53:9A:C7:47:11:08:FD:51:49:9A:AE:8D:09:E4:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5AAD2A4A6C4685295AFA04CDA76731C1534BEDAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f36:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ad:2a:4a:6c:46:85:29:5a:fa:04:cd:a7:67:31:c1:53:4b:ed:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9419653584c8119701421afb7b3e82f37f52927d4157c7764a058b6c14618994, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:3b:cd:7a:55:43:7d:f0:5a:ab:b4:1f:05:
fc:f5:0e:0c:f3:6e:86:5e:9d:02:42:b2:2f:4b:4e:
7d:01:bc:17:46:74:2f:1b:db:8f:e4:83:30:46:82:
91:63:1a:5f:1d:17:d7:ad:dd:44:d1:02:dd:4a:5f:
c0:c4:e3:03:ed:dc:9f:87:83:29:a0:1b:7b:32:db:
c7:4e:b8:94:8f:e0:1b:96:ba:d8:e5:a7:be:ad:16:
da:ca:75:2e:ff:91:da:9e:1a:8e:1f:02:68:99:7c:
a6:8a:69:d6:d0:03:6e:ec:f3:c8:63:2e:fa:92:38:
27:ea:89:1e:66:5b:94:f0:21:f6:d0:75:21:14:21:
58:85:8c:51:68:71:91:34:71:73:60:7e:64:a6:bd:
ca:ca:80:5c:24:a4:2b:6b:ff:19:6c:f9:1d:6e:af:
a3:5c:a0:ac:23:bd:8c:fc:f7:2d:fe:ec:70:12:4b:
63:d1:e5:9e:d4:26:4e:3c:47:4e:6f:51:98:df:c8:
28:9d:b0:04:d9:bd:4c:80:b0:b4:39:a2:02:da:27:
11:ca:4a:7e:15:b1:3c:3a:2a:8e:c7:cc:16:ed:b1:
a4:9d:5b:a4:29:e5:24:04:07:dc:78:3d:b9:59:54:
d8:63:b4:cf:19:cb:83:b9:0e:61:45:e5:a1:d0:dd:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:D4:8A:D2:53:9A:C7:47:11:08:FD:51:49:9A:AE:8D:09:E4:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f36:c000::/40
Signature Algorithm: sha256WithRSAEncryption
d6:72:e5:2d:d8:b9:3c:fa:00:05:1f:70:d3:3c:4b:d9:ec:1e:
d2:2e:a5:ec:22:48:06:55:56:dd:50:83:eb:a4:c4:e9:1a:40:
74:ca:1c:d7:be:37:f0:3f:f3:37:b7:41:64:c5:5f:8e:b5:34:
0a:a0:ef:d7:65:4a:06:97:36:f4:c4:d7:e2:b8:aa:72:2e:9e:
bf:f1:f8:e6:92:0b:c9:84:ee:23:af:96:d1:48:d0:70:87:35:
20:a6:c1:c4:cf:1c:51:14:02:bf:f5:22:6a:1d:5c:9c:3a:25:
23:3c:e0:0b:2f:99:bd:e7:5d:c8:2d:36:9e:b2:a3:9a:bf:35:
d4:1b:7c:cb:57:5e:e1:49:fe:da:d0:88:82:0c:b4:5b:fc:56:
9f:6d:be:82:ad:c8:7c:0e:2c:90:9d:42:6a:57:66:98:e0:55:
6c:6d:a0:d9:4d:4a:1c:a2:c0:37:bd:42:bd:e3:c6:61:2c:ff:
8c:1f:7e:c9:b9:71:3d:b8:1d:8d:ac:3d:94:53:84:d4:57:45:
42:51:7b:40:41:f3:e1:dc:b4:81:31:65:3a:ff:4c:41:f9:e3:
0b:f0:aa:1d:0d:f5:fc:b8:1f:f9:45:83:46:60:3c:98:db:34:
34:96:b2:8f:30:48:57:43:bf:6b:d2:88:7f:9c:fb:a9:0e:74:
92:3c:75:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:44 2025 by rpki-client