Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d27ee9-0a65-4b39-a360-3f2d5dfdd69c.roa
File: 57d27ee9-0a65-4b39-a360-3f2d5dfdd69c.roa (raw, json)
Hash identifier: UvVJU24tvcusoyXDaY9g4q36/PFLGoz8nwKQsTHJM1o=
Subject key identifier: C1:68:54:FF:EE:5E:39:42:6F:EC:33:1F:08:B4:9C:24:1C:F3:F0:BD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 327CB89B56A815683497D63BEFD415D4C7F5AC99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d27ee9-0a65-4b39-a360-3f2d5dfdd69c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:80c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7c:b8:9b:56:a8:15:68:34:97:d6:3b:ef:d4:15:d4:c7:f5:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c624e2e9ccef2b682ee01636105824acbb8e6c8de715ae547d07bcfa831d3f1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:06:60:0c:ae:af:28:04:b1:85:fc:6a:1c:
86:6d:c5:59:3c:7a:22:c8:ab:8a:23:6d:11:d9:4d:
52:33:cf:80:db:45:a7:98:53:50:23:c4:ee:14:3f:
15:09:ab:e4:1c:28:54:50:41:60:52:8a:49:fd:d8:
f7:c1:81:fb:af:f0:4a:5a:a1:0d:f7:e4:17:63:13:
ed:b1:c9:10:c7:95:e5:53:24:d4:fd:17:3c:fe:d9:
67:24:51:39:a4:81:fe:ef:68:4f:d2:ed:ce:51:f9:
de:fa:d9:4a:bb:8e:90:be:c9:c6:69:02:74:1f:5c:
b2:29:ab:a7:6d:b9:d3:fc:da:17:ff:39:b7:e7:ed:
43:3f:4f:20:69:16:1e:8e:61:3b:b9:74:bb:39:08:
ef:b5:a7:97:7d:61:27:5b:2c:b6:c1:f2:6a:19:36:
20:c7:bc:e7:c0:6e:9a:c3:3b:34:39:16:05:f0:42:
6f:f2:08:51:87:86:f1:51:1c:f9:33:64:5c:20:77:
e4:ec:76:54:eb:44:54:fa:fc:67:41:33:72:02:a7:
32:bb:c5:8e:d3:0a:df:37:94:f5:85:ff:59:53:b5:
a3:29:7e:46:5e:c2:1d:c4:13:22:4c:33:0c:60:4a:
08:7e:b3:89:b0:92:76:43:e0:33:d3:be:8b:fb:59:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:54:FF:EE:5E:39:42:6F:EC:33:1F:08:B4:9C:24:1C:F3:F0:BD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d27ee9-0a65-4b39-a360-3f2d5dfdd69c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
82:c3:16:64:6b:80:d1:fc:f2:f5:04:07:05:f8:2e:03:3d:0a:
2f:8a:f8:c5:2d:fe:ea:2b:dd:d7:8a:64:83:74:87:fb:3d:4a:
98:fc:3b:a5:7b:27:0d:5c:e3:2c:e3:fb:6b:3f:17:06:1f:33:
8a:86:b4:01:68:fe:23:37:57:db:49:f6:ec:f7:3c:20:91:1a:
77:ec:cd:b7:05:4f:29:f3:6f:09:2f:79:3c:58:23:6f:e6:a4:
3b:09:59:9d:19:75:2d:61:5f:21:e5:d9:48:42:26:00:a1:b5:
2a:22:f1:83:04:64:00:3d:51:30:a1:ad:2a:16:85:81:2a:3e:
fe:db:ac:d8:cc:e0:ec:1c:f9:f3:55:01:8c:45:6d:df:a6:64:
e6:b4:c3:d2:0d:4b:99:52:25:61:b6:ec:9a:12:52:0c:e4:ba:
cb:a9:9e:c8:ba:21:96:8e:e6:d9:1c:7a:05:38:07:29:79:02:
1b:54:c7:20:05:6e:c1:c2:b5:df:33:96:6f:a9:12:7b:48:d4:
ad:1e:24:f4:8c:dd:47:3a:5e:31:61:bf:f8:7b:b4:07:55:39:
29:cc:a9:15:49:3f:96:29:e8:a3:42:44:4e:3a:03:dd:19:4e:
a3:d5:5e:96:c1:01:95:46:65:d3:54:7a:28:03:7b:e6:c3:4b:
34:b3:e1:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:10 2025 by rpki-client