Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/498da844-08d0-429e-a163-b01218cc81a8.roa
File: 498da844-08d0-429e-a163-b01218cc81a8.roa (raw, json)
Hash identifier: V7u9n5RD/rLTPFQtD7QmUluBWEDLNiB/N1HJc6ScH5Q=
Subject key identifier: BF:27:6D:FD:97:9A:06:B9:F7:6A:32:25:E3:3A:07:FB:19:6D:36:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4254108B4AD56D902461B874953913ECF50E2FC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/498da844-08d0-429e-a163-b01218cc81a8.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:60c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:54:10:8b:4a:d5:6d:90:24:61:b8:74:95:39:13:ec:f5:0e:2f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=24c9d7576934a306be3a5f9544a2fe31a3d92cbcde5b247b11ebeba80af2a460, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:4b:d0:86:db:9f:e7:44:e0:e7:2d:cd:9b:
cf:4f:23:5d:7c:0b:f0:9f:79:64:36:2e:1f:a0:0a:
c2:12:c1:06:24:b3:76:76:94:e8:3b:ef:7b:28:59:
9d:1b:44:ea:49:57:83:6b:01:6d:4b:a6:f6:0a:d6:
58:b4:59:8a:59:da:75:1e:af:cc:66:fd:59:22:54:
b3:e4:c0:75:11:ae:be:5f:b8:2d:ea:59:47:c5:c3:
f2:bd:17:7e:9e:6a:aa:f1:93:ec:d6:a3:aa:50:35:
75:92:ac:19:52:38:8b:d5:d4:b1:88:3d:b4:0d:21:
e6:12:7c:79:16:11:8d:de:1f:21:08:6a:6f:4a:e2:
72:e8:c2:ef:b5:dc:7c:5c:59:af:a8:6b:3a:ab:8e:
77:9c:3c:9a:c9:87:85:13:4c:15:3c:41:37:d1:9a:
a1:d6:3f:e2:14:88:51:5d:e5:07:60:95:8b:29:34:
37:ca:41:bc:8c:9f:e4:c5:fd:28:96:cd:4d:c6:1b:
eb:6f:21:8c:a4:bf:69:d6:44:14:f2:c9:3e:13:a1:
9d:a1:3d:c2:79:63:fa:83:6e:1d:17:cc:47:c9:30:
8b:01:27:ba:55:67:9b:f4:2d:66:f6:aa:da:c3:ee:
04:8a:b0:1d:db:fc:77:78:dd:54:c0:0e:e9:eb:ea:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:6D:FD:97:9A:06:B9:F7:6A:32:25:E3:3A:07:FB:19:6D:36:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/498da844-08d0-429e-a163-b01218cc81a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
16:83:a9:b4:c5:01:ac:52:bb:32:25:16:21:c4:e3:52:06:be:
7b:ce:61:22:80:c6:ca:ab:2a:87:d8:eb:6c:fc:83:eb:7e:13:
7f:21:36:c4:1e:79:50:ba:88:aa:4a:5d:b7:4b:86:65:b5:45:
9f:fe:55:43:b7:6c:94:90:b2:41:1d:7f:ed:9e:a8:80:64:d0:
5c:ed:81:62:15:9c:1f:30:8e:10:49:9b:04:f7:9b:6f:0e:80:
4f:8c:1c:5c:2e:f3:05:fa:d7:de:2a:3c:b7:41:b2:e4:4f:58:
da:f3:70:54:33:09:a1:f0:df:6d:61:51:10:99:6c:bb:d4:52:
b1:b9:be:7e:c5:52:a1:be:d0:85:2e:30:59:0e:8a:eb:6e:c0:
83:31:20:8d:db:ea:c3:ab:fb:90:a2:ab:86:13:97:c4:0f:d4:
2c:82:07:23:ff:7c:a5:e5:74:59:5d:ac:ae:ae:3b:7a:78:04:
6f:10:27:af:46:b0:48:a6:ae:ed:14:6a:65:e2:ec:40:11:d2:
be:ab:94:a4:07:5e:b4:f7:79:4a:b1:d5:96:d7:b2:01:e3:c5:
2a:67:0c:fe:19:01:10:fc:87:b2:4f:bf:9e:55:3b:91:33:9d:
1e:f1:75:b3:d7:b7:c4:d0:51:e1:94:db:a4:76:80:f4:e8:85:
99:dd:47:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:28 2025 by rpki-client