Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/338fdc47-3615-4058-8892-7f965b8f45a4.roa
File: 338fdc47-3615-4058-8892-7f965b8f45a4.roa (raw, json)
Hash identifier: X3Fhe71tP+yFnCGJ0FskNjiiFVAfSEQguZarrsTMl7U=
Subject key identifier: F4:A6:18:EA:80:C1:B4:0F:C8:64:59:63:51:68:6C:4B:AB:F1:48:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 645431815F8441C32C782478DC598F0F52D0D46C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/338fdc47-3615-4058-8892-7f965b8f45a4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:54:31:81:5f:84:41:c3:2c:78:24:78:dc:59:8f:0f:52:d0:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6d231191bcab2b8edcd36f532cccffabb8bb943aa6799172c68b7dd767e639d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:f8:22:ef:6b:dd:e8:25:0f:70:d6:4a:f1:
36:07:3a:47:f2:b5:c8:37:1f:c1:ff:17:6a:4e:8f:
88:d8:41:2c:f4:f8:2c:12:3e:3a:03:cc:4e:90:9c:
f7:e2:3e:57:12:41:dc:cf:bb:c0:cc:41:e2:c0:0b:
3b:70:cc:22:db:e9:f8:ae:1a:b8:21:44:63:7f:e2:
72:97:f7:5b:cd:ed:5a:88:f6:f1:4e:2b:cf:27:6d:
a1:a6:9a:9f:12:a9:9f:bf:40:4a:ab:e3:a6:a6:93:
78:9d:7e:80:49:d7:7d:58:21:ce:1a:53:f9:4f:5a:
07:be:de:19:f0:15:51:65:68:d2:53:62:fa:eb:90:
82:c0:15:26:33:03:6d:14:c3:ef:b2:42:6c:9b:d2:
d4:2c:bb:04:62:cc:5d:c7:b1:f6:2c:57:d3:d2:cc:
b2:10:32:a4:f5:19:08:4e:3c:f0:6f:28:de:28:00:
57:2d:db:a2:3e:69:bd:27:03:90:50:1a:cc:f4:af:
7f:a7:71:38:26:0a:88:a4:5a:1f:87:dc:5a:c9:b5:
bf:48:d8:8d:96:68:f0:6c:d0:cc:0a:b1:44:33:0d:
d1:7f:f7:77:ec:55:40:de:0b:45:71:a6:b4:67:bd:
74:80:4f:26:ab:10:ac:d0:07:ae:ac:a8:be:d7:2c:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:18:EA:80:C1:B4:0F:C8:64:59:63:51:68:6C:4B:AB:F1:48:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/338fdc47-3615-4058-8892-7f965b8f45a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:c000::/40
Signature Algorithm: sha256WithRSAEncryption
63:13:e6:b3:94:da:55:bf:aa:f2:8e:9b:67:97:03:e7:43:dc:
f6:c4:a6:0e:e1:07:ca:08:a0:9c:57:f8:38:69:29:3f:50:83:
9e:a2:b7:38:5e:74:bd:66:fc:73:70:7f:47:93:55:b0:5c:e7:
37:e4:20:fd:9b:c2:67:cc:6a:10:7e:6f:f6:7c:4a:47:96:7a:
bb:3e:d6:26:d2:67:18:05:84:7b:08:a2:f9:6c:ed:34:0a:1e:
e2:6c:cb:c9:be:99:8e:08:e4:b5:03:62:06:82:a8:78:72:c2:
e7:f2:e0:16:2e:f7:c2:03:f3:2c:38:2a:41:a1:ba:ef:95:b8:
5a:af:da:70:b6:0a:33:d5:67:61:e0:e1:d2:0e:3f:93:a6:e6:
70:24:3e:f8:41:37:fa:76:ea:8b:cb:4d:36:25:29:d9:ea:93:
43:ee:b4:6c:ad:e1:8a:06:0b:f3:41:97:6d:d9:ff:76:f9:5c:
82:9f:9f:c9:50:9c:5f:57:44:d3:7c:51:08:96:8c:d6:2c:fa:
c4:6a:fa:8c:34:ca:8e:b5:b1:cf:0a:8d:56:d5:86:84:d6:96:
a0:61:54:a7:d5:f1:24:7b:e2:a2:88:97:b0:43:98:3c:a1:b8:
d6:13:35:6c:47:c6:e5:b4:e3:0b:32:ee:ff:4b:4b:37:9d:a5:
7b:cd:0f:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:37 2025 by rpki-client