Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/514241ca-8435-43d1-8c71-085261ff7563.roa
File: 514241ca-8435-43d1-8c71-085261ff7563.roa (raw, json)
Hash identifier: mjxtrYr2deT5BjelKjBBJ2UD++Fq3fIlq0wph3wfEnQ=
Subject key identifier: E1:D3:B6:35:B9:62:F1:15:CF:A7:76:07:A2:E4:C0:38:71:17:32:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 294A00B7C028DE2833F25B52C040068836E5E01C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/514241ca-8435-43d1-8c71-085261ff7563.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:e040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4a:00:b7:c0:28:de:28:33:f2:5b:52:c0:40:06:88:36:e5:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c594bc714ff2517935b8c3ec080c5284d518630488b850012a2e5b0405befeba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:e0:7d:0f:00:61:d0:3a:be:8c:35:5b:1e:
b7:fb:d6:ad:8d:c3:bb:d7:c4:92:eb:4a:5b:34:28:
91:ce:18:7f:9d:42:78:4a:18:3b:47:2e:93:0f:00:
68:b2:9e:17:48:79:8a:72:ad:ba:ec:39:1e:e0:c9:
ab:56:e6:10:9d:55:64:4f:c0:7f:c9:77:86:9c:0d:
be:b4:00:0a:3f:80:72:ce:39:73:8c:a4:3a:0e:49:
77:cf:9a:5b:e8:95:57:aa:17:24:d0:0b:9f:cc:5f:
1d:ad:f8:57:66:b9:52:ce:ea:4f:c9:6f:ab:bd:4c:
c3:37:06:23:59:35:1e:eb:c0:c1:13:b1:10:ba:2d:
e4:43:fe:85:61:df:c5:64:dc:a5:4c:71:80:f4:cd:
7e:c1:83:cd:3d:06:33:86:4e:db:21:26:8b:0d:6a:
eb:6b:89:f0:e9:a3:04:0a:16:74:d5:6c:2e:b8:ad:
f6:4e:d8:13:f6:76:27:b4:1d:07:56:be:98:30:2b:
9f:e0:73:4c:06:4b:1d:11:39:b6:87:53:03:21:1a:
1e:83:76:6c:fc:a8:c4:3c:d7:e2:50:08:30:c8:20:
d1:73:26:8e:26:8b:9a:70:79:2b:85:0c:71:fc:2b:
3f:6c:59:59:e0:e4:e0:9b:f0:51:3b:b8:f2:e6:d6:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D3:B6:35:B9:62:F1:15:CF:A7:76:07:A2:E4:C0:38:71:17:32:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/514241ca-8435-43d1-8c71-085261ff7563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:e040::/48
Signature Algorithm: sha256WithRSAEncryption
3e:61:95:67:f0:bc:64:39:07:9a:5e:5d:b2:4e:7b:2f:68:f0:
b4:fb:9d:67:73:84:69:8b:98:42:21:ee:62:2a:b2:76:5d:b3:
dc:39:a3:bf:ec:71:9e:98:25:8b:c4:2d:02:17:59:cc:fa:08:
2f:9c:b1:b1:3f:9c:86:96:2d:a2:db:c7:59:81:0c:dd:c7:a4:
df:ce:29:d1:fe:8c:a6:24:e1:0e:de:44:d9:46:1c:ce:04:0c:
59:d3:b2:f6:75:08:f9:96:39:ea:a4:0c:3b:f0:a6:d3:0a:99:
e1:c0:44:bb:98:dd:3c:ce:56:a4:c7:f9:89:74:ba:4c:66:94:
9a:3b:7b:a7:0e:e5:9f:16:f3:d9:c6:42:73:4a:75:27:41:a9:
c7:ba:39:3d:83:3f:63:c4:9c:d1:5b:cb:3d:6c:8b:8b:1e:b4:
7f:8c:90:06:61:8a:9a:8f:87:c8:ff:89:c3:21:9a:70:09:f4:
67:c8:a3:07:b4:0e:44:0e:e5:71:a3:c6:ca:35:72:9b:96:bc:
e0:44:db:1f:14:39:48:2d:f9:db:dc:81:a9:b8:d9:bd:68:a3:
92:ca:c2:76:1a:65:5d:15:5a:aa:ca:27:f4:1d:dd:a9:70:ea:
65:3c:be:a4:4e:41:1d:0a:f4:ef:7a:79:e6:fb:43:af:1a:70:
1f:1e:60:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:14 2025 by rpki-client