Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
File: 55066f75-b858-4558-bcfc-5a7f53c92745.roa (raw, json)
Hash identifier: xxV/u061/pGaa+MJQD8cgJVwsOnNCYc4WNwUMJikN3k=
Subject key identifier: A6:4E:85:2E:07:8C:20:EC:7B:C3:4D:3A:67:E7:55:9C:FA:21:B1:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16674C334036772AEAE3AB7C8607D40212A09A21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:67:4c:33:40:36:77:2a:ea:e3:ab:7c:86:07:d4:02:12:a0:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=87581f7d34d03f586a4e1aa071096f2adec3f3ff8ebbda4bf3e8c27f4b75789d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:21:2b:7c:79:97:9f:4e:60:27:0e:be:c5:
db:75:90:92:35:9a:f1:aa:51:30:b7:04:a9:9f:de:
7a:48:c6:e0:0d:06:a9:43:0f:85:1c:ba:17:b2:eb:
16:5c:eb:1c:7f:c1:68:88:2e:6d:bf:f5:f5:c5:29:
90:aa:c7:99:18:28:df:6b:8f:53:da:15:02:b1:9d:
76:0a:c8:6e:db:fe:9d:3c:51:26:5c:71:7f:a2:c4:
43:b0:24:09:0a:4f:a8:08:a9:9d:c4:2c:f8:e3:bb:
be:34:1b:31:8c:3d:3c:2f:cd:e5:8d:66:ad:b5:30:
f0:ef:93:9d:8b:86:f0:b0:92:2d:47:90:c5:d4:94:
4c:38:4e:45:02:d3:80:31:6f:d6:33:cc:d0:36:fa:
58:04:b3:9f:9d:6b:da:70:7f:48:3d:2b:24:96:31:
a8:ed:97:41:72:f9:2a:58:5a:68:22:a4:3c:98:3a:
b1:7e:b1:2f:f3:55:34:58:62:8a:15:68:fa:32:27:
bb:6b:54:b9:18:5f:f0:59:62:9c:4a:db:3d:28:15:
e4:0b:af:9f:6e:ab:3c:4d:c4:db:1b:83:ae:dd:ba:
a0:cb:77:13:6c:f8:e0:0a:d2:f7:86:46:8b:5d:9f:
c0:95:24:0e:48:cb:98:ed:b0:5e:de:a3:1f:69:c0:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:85:2E:07:8C:20:EC:7B:C3:4D:3A:67:E7:55:9C:FA:21:B1:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:c000::/40
Signature Algorithm: sha256WithRSAEncryption
27:7b:c4:15:9e:f3:6f:33:f2:ea:22:eb:77:39:82:53:0f:80:
1c:33:85:86:ea:7b:b6:2d:52:ea:f4:d7:40:2a:f1:4c:22:09:
0a:d7:f9:81:6a:f8:2c:c5:d9:f7:05:d5:af:f3:12:01:50:5a:
2f:51:92:7d:5d:ea:05:83:b1:bf:5e:f1:98:ff:72:59:77:2f:
d0:75:27:01:3f:f5:ee:ac:04:f2:40:fc:57:6a:cf:85:35:04:
03:fe:0e:c2:88:49:47:5d:0f:28:a9:7a:56:4f:f7:c6:ee:6e:
98:9f:30:e8:9e:08:fc:6a:1d:09:da:b4:92:6b:53:29:74:84:
08:dc:4b:8b:bf:6b:23:bc:33:a8:cd:aa:15:c6:7a:3e:3e:f7:
42:11:40:07:30:c8:80:e0:41:bc:b7:ee:9b:c1:f0:89:52:bc:
f0:13:8c:6b:cd:92:6a:fa:c6:fd:ee:5a:2a:7e:66:b4:df:d0:
6a:29:85:c5:0f:35:dc:ea:6c:ab:72:d0:6f:98:77:a9:b1:04:
ba:9e:b8:0f:c9:a0:16:19:de:cb:07:a7:71:02:98:99:e9:70:
34:a3:b5:fd:10:5d:e6:83:08:4d:f4:36:7a:58:c3:d5:22:75:
e5:7a:dd:be:ce:e1:c7:ef:69:06:c7:a2:ab:b8:67:9b:94:19:
36:f7:f6:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:44 2025 by rpki-client