Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
File: 334b74da-25a5-4155-8dcf-838c529ccfcf.roa (raw, json)
Hash identifier: w4OtRqRmSrnwbxiGbG2NA/W7IQQMUZjR1FssJhyJ5Sc=
Subject key identifier: 09:A2:1B:36:36:EC:99:1B:5E:75:1A:E7:18:E7:59:E1:2F:E9:50:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FADAE0A7BDCE97C5E95DADCB808DBCF1327FA26
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ad:ae:0a:7b:dc:e9:7c:5e:95:da:dc:b8:08:db:cf:13:27:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=be357b749f863c4b0d304f889bab1322b3ae8ed5d3aab5b9cae291c5da87be6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:0d:58:87:59:ef:51:6c:6e:ea:d6:c7:19:
ad:1f:40:aa:9e:85:0b:3e:6c:89:d9:47:d4:ca:ac:
d7:9a:46:73:8b:0e:fa:5e:1e:b6:fe:8a:3a:62:ae:
7b:06:65:dc:5f:bd:16:80:c5:92:53:bc:3c:33:b3:
0e:9a:87:b8:a0:fd:f5:ba:37:07:44:c9:6b:09:2c:
46:80:85:af:05:a1:57:05:fe:ea:b4:81:da:5b:4a:
04:60:14:48:09:83:b1:62:b8:40:09:b9:1e:9e:dd:
c9:f7:9c:1f:77:bc:f3:04:48:e4:e9:6f:1b:1e:67:
20:b3:c2:f2:d3:ed:ad:43:e2:9f:2e:c7:31:6e:02:
db:ec:3f:d5:c6:eb:f6:05:0d:46:b6:7f:74:8c:fc:
75:6f:d5:56:4c:fd:9e:04:81:6b:de:dc:0a:43:14:
11:0f:a3:0d:6a:c2:c7:bf:b2:75:1a:ff:21:99:ca:
3b:37:16:8c:2f:3a:f0:f7:bf:c4:fe:fa:37:f9:ac:
a3:b5:4c:90:6f:d5:66:cf:f2:17:a0:89:84:86:8e:
4e:2f:52:8f:8c:02:e5:e5:af:5b:2e:ba:54:f9:ba:
bd:0e:ba:c5:f7:33:5e:46:e9:a1:23:88:06:ab:ee:
de:be:cb:be:88:87:96:da:15:a7:8d:c1:0a:5e:f5:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A2:1B:36:36:EC:99:1B:5E:75:1A:E7:18:E7:59:E1:2F:E9:50:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:4040::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2a:6e:12:e1:85:20:50:6d:f9:b6:7f:90:fe:fa:92:ba:3b:
28:e6:db:29:45:c2:63:b9:99:18:b8:a8:fb:f4:d7:8d:f4:fe:
e6:b9:33:6c:61:85:ad:34:8e:3a:d7:c8:19:79:b1:cc:53:58:
ce:4c:43:3e:52:a2:8e:91:0d:10:c3:ec:a4:b6:ac:58:f3:90:
2f:0a:00:b9:3c:73:be:b2:7a:08:14:1b:20:6e:07:41:e7:6c:
25:4a:ab:fe:30:ca:e6:0d:fc:14:b9:fb:db:05:18:e8:9f:bc:
92:a3:c5:27:4f:35:b9:7d:fd:18:e0:a1:97:ec:e6:03:6b:ad:
ba:f1:a7:3d:b1:c0:d4:d0:1e:84:d1:e6:31:6b:f5:0f:33:f5:
d0:61:07:83:42:aa:60:24:9b:da:44:6b:ca:6b:57:23:ee:95:
69:5f:76:a8:be:ff:d6:0c:1e:ee:d7:66:92:11:b7:19:67:37:
64:65:15:04:c6:9a:02:da:19:f1:18:4e:3b:24:1f:a4:28:0c:
64:38:98:b0:33:39:ed:b1:43:58:26:e7:40:e2:59:64:1a:5c:
3a:0b:66:c5:86:c9:b0:cc:15:c6:0b:ed:0f:59:8e:6d:a0:bb:
4f:e4:4c:a0:b5:2b:81:f7:a8:e0:98:0f:04:df:68:0d:b3:dc:
74:cb:4b:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:25 2025 by rpki-client