Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa
File: 4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa (raw, json)
Hash identifier: ni9+g315+3TOgFO2mr84lsfTaq2AwqZN/3RCq29vgJw=
Subject key identifier: C7:41:F9:25:F0:7C:D3:A0:B9:9B:6E:DB:29:DF:25:85:83:1E:AC:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2841319A68C7E38F1C6B558D4440E16496373495
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff8:a400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:41:31:9a:68:c7:e3:8f:1c:6b:55:8d:44:40:e1:64:96:37:34:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=714ce082db53adefdee0f073f38ddbd485964731326d5eab982fe893763457a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:a1:8c:65:d9:2f:b6:cf:c8:e6:a3:ef:67:
d8:5a:6d:32:ec:20:62:d4:af:37:98:35:fd:36:40:
05:6d:4a:13:d6:56:aa:ac:58:87:93:e6:05:8b:06:
eb:ba:ea:14:2b:b7:be:c0:3f:f7:26:af:90:f6:bc:
29:9f:89:a8:8c:c0:f0:19:9e:42:4e:2a:73:e1:21:
2f:12:26:61:bb:50:6a:15:92:b4:4e:1b:9c:52:bf:
87:9c:42:9e:10:b7:9b:54:48:c9:47:c9:6c:14:de:
bc:a8:0f:3c:be:49:f0:a7:4b:99:89:fd:3f:d8:94:
38:3d:bf:c4:31:5b:e1:7d:b1:4b:3f:8e:19:f7:aa:
02:c3:e0:07:97:21:a9:69:65:4c:44:6e:b3:78:7d:
d3:03:73:be:5e:9d:19:ae:cc:9d:bc:4b:72:47:74:
76:80:07:46:df:70:28:b2:30:72:99:32:00:5d:a8:
4f:c2:76:05:6e:b7:05:8a:07:66:cc:3a:80:9b:9f:
b9:85:a9:6f:e8:ac:78:5d:35:af:a1:3b:6b:41:6c:
5b:76:0c:e9:c6:41:c9:42:22:42:1a:7e:0b:06:0b:
d2:ef:3d:01:91:6b:0e:8a:34:31:ba:d3:61:64:7c:
87:d9:48:0d:2b:e3:94:ff:1d:40:0e:77:13:5a:35:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:F9:25:F0:7C:D3:A0:B9:9B:6E:DB:29:DF:25:85:83:1E:AC:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff8:a400::/40
Signature Algorithm: sha256WithRSAEncryption
7e:90:61:c2:1a:f2:c4:39:23:c1:cc:cd:88:76:26:ff:db:77:
90:31:de:db:f8:3f:58:d4:d8:83:28:12:b8:89:e6:e1:3a:46:
75:92:e3:f9:0d:d6:94:71:55:04:75:4d:63:88:84:8a:40:14:
af:b1:10:1a:73:b2:e3:56:cc:ef:41:83:ff:80:ef:11:52:79:
6f:55:88:d3:12:68:ca:8b:38:9d:86:79:6a:1e:03:37:ff:be:
1e:79:7f:57:1d:4a:d1:b8:5f:5f:59:1a:e5:15:f6:55:e9:bf:
60:3a:29:93:99:97:76:df:5e:a3:d7:09:02:7a:c9:3e:33:70:
bd:a7:d7:f9:42:3a:6e:4d:39:13:96:96:55:16:a2:d3:bf:d8:
8f:23:4b:cc:42:fe:3c:36:c2:bc:3f:0c:78:43:8e:e4:64:e5:
8f:87:e3:64:9f:a0:7f:77:3b:4a:97:da:b6:fe:a2:ae:89:a6:
26:0e:c7:34:e5:cb:5b:be:7e:19:ff:2b:5b:f0:0c:be:77:ca:
ad:1c:05:2e:a2:33:bb:cc:fe:a4:ab:86:6a:6b:99:4e:9e:15:
e3:15:9d:71:12:11:3d:30:a6:dc:26:db:74:6f:08:29:fa:70:
30:ba:ba:8f:96:67:e6:0c:7e:e9:c2:80:1d:e0:2a:bf:a0:af:
6d:bc:fb:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:18 2025 by rpki-client