Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa
File: 4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa (raw, json)
Hash identifier: 6V0pj2IpuHZ9hbEI6l6lSrrO2RyT/WT3shby3oIcbVs=
Subject key identifier: 70:D2:22:E6:08:36:3E:5A:85:AC:CA:78:0C:89:45:4C:E8:9B:3C:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32D4750C1AC82A47F8E8AD189F6937B8B4CDB65E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f36:4000::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d4:75:0c:1a:c8:2a:47:f8:e8:ad:18:9f:69:37:b8:b4:cd:b6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d9dec5aff28f1b59d76f494815ea966cf15a8dbb1e65844faee442ea2f64a172, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:a1:79:80:43:7e:33:ac:c7:31:41:c5:c6:
db:65:34:c1:09:3e:12:4d:71:1c:cb:24:96:ad:07:
1b:3f:0a:1d:7e:c4:9e:f7:1f:24:3c:e4:eb:67:44:
13:57:07:45:ad:8b:40:8c:e5:95:16:3c:c5:67:81:
ab:b7:71:ea:f3:c1:58:05:98:00:d5:34:92:98:ff:
c1:38:91:e8:42:cf:67:1c:83:b2:82:a7:1e:71:db:
ef:07:5a:47:6d:94:9e:5f:eb:56:8a:ef:23:8e:d0:
db:41:05:7a:f6:7a:59:aa:25:b5:2a:50:ad:f1:68:
46:68:a9:ae:a0:70:44:b3:fd:f7:3c:5c:62:cf:8f:
6e:d9:1e:85:78:00:4b:e3:44:67:a1:82:8d:6f:dc:
f2:47:67:f3:0c:e3:c1:c4:62:09:61:57:aa:18:36:
7b:b1:f4:9c:e8:7c:2d:70:61:80:5e:49:00:f8:8e:
05:49:43:05:15:58:f6:34:ea:3e:ad:40:d4:97:54:
37:09:e5:7b:a9:54:6a:ec:46:11:2e:91:d9:e1:53:
3c:a3:1d:71:9f:f2:7f:f2:77:b9:63:f8:2d:71:16:
6d:3b:96:a7:f6:af:96:06:95:15:98:86:8e:58:9d:
c0:b2:76:6b:de:c3:e7:65:b6:36:52:a3:8f:ac:e9:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:22:E6:08:36:3E:5A:85:AC:CA:78:0C:89:45:4C:E8:9B:3C:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f36:4000::/39
Signature Algorithm: sha256WithRSAEncryption
d8:b5:3f:2b:bb:97:7e:de:22:24:aa:5f:80:af:50:cd:ff:6b:
a5:98:c2:77:f5:e0:35:94:1b:ea:6c:fa:29:e0:e8:c9:99:2a:
48:47:e5:5b:de:8e:83:ab:53:3c:4b:d7:f4:7f:af:f8:16:05:
e8:13:9f:0d:6f:da:00:d3:b9:bf:b8:b3:c9:a2:80:4a:c7:b5:
78:57:b5:13:11:ac:e8:53:65:ae:70:3c:be:9d:45:66:d6:73:
c1:d2:b1:39:f6:f8:9e:a8:1c:0a:b4:75:e0:50:a0:5e:2f:38:
02:70:cd:d4:2b:a5:91:b0:86:15:e2:69:1e:13:23:ee:ab:34:
a6:76:90:ca:72:05:ee:28:59:d6:ac:3b:eb:5f:79:d0:a0:f1:
50:5b:7b:a2:5d:9e:b1:8b:0a:34:35:50:af:d3:f7:9d:ed:9b:
b1:95:b6:24:9d:c0:10:9d:a0:c9:80:0d:51:8f:1b:64:7d:6a:
01:5e:ef:88:f5:09:88:6c:a3:05:38:d6:3c:b5:52:f5:31:b3:
e9:79:36:66:46:0e:85:fb:32:4f:5e:e3:db:17:b9:42:80:fa:
17:ce:e2:89:56:b8:f9:56:8d:1f:88:a4:05:9a:37:83:07:6e:
3a:1a:e5:36:7b:7c:3f:77:1d:93:2b:e0:60:b7:ec:4b:c0:dd:
b6:9a:15:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:59 2025 by rpki-client