Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa
File: 568a89e6-9390-4dde-bcf7-9756e7065ef3.roa (raw, json)
Hash identifier: 19PffvJx6dNugjsIt5gRK4H5ofz5iRbNFVVhaZIxoAA=
Subject key identifier: 97:77:3E:9E:EC:92:E6:15:BF:C4:D5:2D:79:3C:7F:79:FF:C1:27:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49921A9F2A300A9A8CBD154A3128DB02B8F21D55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:803f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:92:1a:9f:2a:30:0a:9a:8c:bd:15:4a:31:28:db:02:b8:f2:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=7a2f1df97227b198cd6f14e1477dcc5390eb6f701eaf13ba4fa0cbd3bb9ac9dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:2c:0f:d0:64:7f:3b:5e:d1:06:01:d0:ef:
01:4e:d8:bd:aa:48:0d:e3:e2:90:89:d7:7b:81:5e:
9c:50:ff:cf:f0:2d:a0:d5:40:de:76:b0:20:bc:f6:
f5:fd:9c:26:a0:e4:d7:05:c5:48:cc:7e:97:a9:49:
1d:95:5f:a2:a6:42:47:17:97:68:e4:59:44:42:7a:
2d:5f:d1:93:98:75:92:8a:6f:d8:68:78:0b:3a:ff:
b3:fd:3f:5e:ef:22:fb:cd:66:62:e2:95:05:14:00:
ee:b3:20:bd:f1:ad:3c:32:1d:ec:39:fd:24:57:a0:
7f:1a:6c:3d:09:43:b0:ae:7c:62:76:c0:e7:0b:e3:
49:ef:6f:f6:c9:f7:05:d8:3b:9d:e2:d0:27:ce:11:
45:bb:4e:5d:04:d0:82:fa:fd:a0:66:51:62:d0:63:
84:35:a6:54:be:fc:7c:62:74:17:6c:ca:53:87:ab:
91:08:4c:78:ff:fc:8b:ca:18:7d:6e:2c:61:23:65:
78:3b:c0:36:4a:dc:10:c7:99:98:2b:a8:ef:9e:5f:
36:cd:07:b3:c5:15:5d:4a:c2:33:fe:c2:61:86:61:
4e:4c:58:ca:ca:77:2b:66:e6:ca:36:cf:61:d7:46:
83:d8:bd:5c:04:bf:82:32:2d:46:72:ae:e0:79:63:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:3E:9E:EC:92:E6:15:BF:C4:D5:2D:79:3C:7F:79:FF:C1:27:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:803f::/48
Signature Algorithm: sha256WithRSAEncryption
66:c7:ae:d7:68:c1:dc:eb:6d:34:1e:44:4f:eb:87:57:72:2a:
26:bc:63:9e:c9:f3:d4:25:df:36:2f:11:50:07:41:aa:82:21:
ef:43:69:4b:3c:c1:46:44:55:9b:85:94:6d:b5:53:82:ca:01:
15:0d:3b:f5:de:ac:ac:f5:2d:b8:b0:66:7b:38:c9:36:55:5a:
8e:2e:02:8a:cc:19:74:21:bb:7d:43:c8:7e:d2:25:79:84:1b:
7b:d9:00:da:08:6a:26:32:ed:4f:78:14:a4:96:60:d4:2a:7a:
07:7c:5c:35:50:67:15:05:75:dc:20:cd:f1:0d:84:17:d4:32:
62:9e:49:24:1e:8d:f1:6c:cd:40:c8:7e:92:dd:00:c0:e4:25:
b2:63:7a:d3:3c:20:fe:f7:9a:57:af:a5:b4:4d:62:84:09:a1:
62:55:d9:63:35:74:d3:4c:89:55:44:10:11:b2:76:27:6a:2e:
3b:bb:d6:02:4a:c0:fb:a4:40:7e:cb:b9:a7:e7:75:4b:1e:32:
9a:17:d7:c2:ad:5e:c2:d7:b7:84:dd:da:0b:57:a3:45:fe:10:
4b:8a:31:d1:60:2e:08:1a:56:84:3b:77:a9:1a:4a:2e:96:cb:
0f:58:e6:e2:54:6f:12:24:5f:c3:ee:16:58:ef:b9:89:6a:73:
c2:cf:7b:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:11 2025 by rpki-client