Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e4fb981-8119-4aef-97f8-88c225def4ee.roa
File: 3e4fb981-8119-4aef-97f8-88c225def4ee.roa (raw, json)
Hash identifier: qnjKSvOvI0AXxl4owG9eM44DxUVJ0JrF7AxH4gCcGt0=
Subject key identifier: AB:A4:6A:BB:05:13:D7:31:82:FF:8A:5C:71:22:B6:20:8B:68:BE:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 29C7CB0DA6E0F23AB4961EFA13469C0D710C6C88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e4fb981-8119-4aef-97f8-88c225def4ee.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff7:7400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c7:cb:0d:a6:e0:f2:3a:b4:96:1e:fa:13:46:9c:0d:71:0c:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=67b8ccf76f86b32bf34ee3f6ee59f220149e2762da1126c0d975f93527d6580f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:fa:af:25:d5:00:10:b1:c8:ed:d0:08:04:
04:e2:3b:3f:2d:45:37:74:c2:69:92:85:fb:34:51:
15:15:3c:3d:ac:71:22:56:95:9d:5a:2e:85:0b:62:
3c:82:f3:c4:55:c8:7a:b1:da:50:16:54:ed:ef:42:
14:c4:20:71:d2:6c:6f:34:8f:a6:f7:3f:b6:8c:d8:
c2:cc:49:9a:f1:35:62:51:99:b3:c3:ce:54:97:5f:
a1:4e:ec:3f:f6:75:79:3f:2e:8a:7f:e8:c1:7d:b5:
27:6b:de:d5:ca:9a:b3:9e:25:7b:fa:a3:2a:ca:46:
12:2e:c1:73:f7:47:9d:b1:91:86:50:ae:7b:7c:72:
1a:05:ea:e3:d7:8b:87:ca:43:38:6e:64:f2:a2:c8:
e2:83:3b:25:cb:45:94:2c:8b:ae:d5:c7:6a:9b:3d:
0e:dd:17:3c:59:42:ef:f7:f7:10:22:5d:1b:d9:02:
7e:76:a7:0d:98:b8:b0:1c:5e:c9:24:3e:e8:46:02:
38:3c:f2:81:48:74:97:aa:83:f1:9c:07:8d:07:83:
ae:09:ea:2e:96:e6:da:75:a9:17:95:6c:c7:f1:b6:
5b:ef:86:71:05:65:43:45:2a:d3:f3:9f:09:31:13:
cb:7e:2a:dd:6b:c0:ea:14:d9:a0:d8:f9:3a:be:2a:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:6A:BB:05:13:D7:31:82:FF:8A:5C:71:22:B6:20:8B:68:BE:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e4fb981-8119-4aef-97f8-88c225def4ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:7400::/40
Signature Algorithm: sha256WithRSAEncryption
87:a9:5b:51:06:fc:9b:02:12:9c:ba:e0:82:d5:d5:7e:b3:55:
54:1e:8d:75:e6:38:76:c9:d1:b0:fc:06:8a:98:48:16:90:bd:
88:77:ee:00:58:f9:5d:a1:b8:53:39:d6:54:57:3b:07:48:93:
ec:38:b2:d0:c9:bf:13:4d:85:fe:fe:f3:db:3e:77:f8:c7:fc:
27:d9:76:13:4c:eb:95:80:63:38:3b:25:52:c3:c2:d7:06:bb:
dc:3f:ea:23:69:e5:00:93:58:3f:7a:1b:47:e1:6c:0c:70:b9:
89:e6:1e:3f:7d:05:35:bf:29:e5:bd:5b:4e:c6:f1:78:ee:2e:
a1:e2:4a:00:a3:55:77:de:c9:4d:04:b7:8a:83:1c:d4:55:60:
51:75:56:37:5e:d0:d4:8e:30:bd:f3:3d:9d:bb:ea:2f:91:14:
69:d2:59:70:31:7b:01:f0:b6:91:2d:3a:4a:80:ab:74:5e:29:
a3:30:16:17:51:07:98:8b:4a:ac:42:f1:0d:be:a9:09:b4:9a:
1a:8c:77:78:7a:11:60:b8:a7:c9:63:34:4c:ce:6d:09:66:06:
30:64:41:bb:a3:90:cb:ff:4a:af:c0:24:13:0c:55:5a:27:57:
6a:1b:2e:23:d7:37:30:d5:b8:93:14:47:e3:93:1f:6a:62:b8:
7b:b0:88:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:02 2025 by rpki-client