Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59ba8491-9d72-462f-b0e1-873b64f6b1d2.roa
File: 59ba8491-9d72-462f-b0e1-873b64f6b1d2.roa (raw, json)
Hash identifier: uaeoRrpYqYEy550surNvGrSKPy2ygeFp7ViepUENGgA=
Subject key identifier: F1:61:43:7C:82:75:26:AD:FD:B9:0A:63:94:49:E1:22:F1:78:62:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2634578801C1AAF50823E1D1837EC31BA3E1A8A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59ba8491-9d72-462f-b0e1-873b64f6b1d2.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:74c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:34:57:88:01:c1:aa:f5:08:23:e1:d1:83:7e:c3:1b:a3:e1:a8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d1af1db590d8550294009307e2d370320bd3e52c4051281a2d118b7508895c95, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:42:f6:5a:5c:d1:00:36:21:c6:df:1b:07:
5b:1f:94:65:82:c4:8a:b5:4a:c1:a0:b6:cc:e1:52:
f8:ca:49:1b:b5:80:d9:06:78:21:41:a1:01:0c:61:
6d:48:9a:86:07:9e:9f:04:86:d6:c6:38:16:46:90:
a4:26:08:a5:a3:86:8d:26:6e:27:f1:c8:49:c9:5b:
9b:ab:37:77:1c:00:cc:8f:14:61:c3:5a:37:1c:4d:
88:34:fc:9c:91:5c:e9:8b:2f:66:71:c1:4a:9b:41:
c4:a7:25:be:b5:da:96:40:70:20:95:0b:8d:8b:67:
c8:62:3f:98:be:8c:67:a7:9f:16:7b:fc:2e:60:93:
08:56:45:65:54:c0:25:bb:ec:1c:f1:ca:f6:48:86:
98:86:4f:e0:40:9a:dd:be:d3:e9:05:a6:e8:e0:a7:
8d:53:69:3e:37:be:25:d2:c0:64:e9:cf:b9:8b:5c:
ef:03:48:df:25:72:c1:f1:57:db:6d:52:90:db:c6:
1d:f4:e7:bc:6b:7c:40:25:7b:94:1c:d6:70:ec:8a:
e7:71:25:07:65:31:48:63:48:04:a8:2e:c7:3e:29:
cb:a8:de:04:19:66:06:9b:7f:87:30:a9:f7:93:64:
26:09:17:94:3b:22:ac:f2:fb:70:f0:39:45:e9:8d:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:43:7C:82:75:26:AD:FD:B9:0A:63:94:49:E1:22:F1:78:62:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59ba8491-9d72-462f-b0e1-873b64f6b1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
1c:c0:bd:3f:3c:48:1f:b8:98:00:4d:d4:aa:4f:a4:28:b3:d1:
95:e3:c5:95:48:d0:2c:40:18:67:b6:89:8a:31:d2:70:a1:0f:
0c:86:5d:df:cd:30:5c:52:f3:ad:da:07:96:5a:8e:2e:56:1c:
08:4c:62:f4:c6:c7:02:67:c6:d4:d7:32:29:30:cd:16:85:00:
38:ed:aa:20:94:45:1b:9f:ac:3b:7b:6c:a8:f9:3c:e4:4b:95:
64:90:2e:b1:52:7d:9d:11:bf:0c:75:db:9e:79:f6:35:fb:68:
45:a5:d1:ed:20:24:ad:0a:fa:0f:5e:05:6c:2b:3a:7b:ed:11:
6f:af:03:f8:35:b2:c4:7f:ab:bc:2d:4b:db:15:9e:e6:f3:c7:
6a:6b:fa:52:a9:09:c9:7e:ec:de:0d:fd:8d:7f:7f:e1:15:c5:
44:bc:52:34:9a:25:e2:33:ad:4c:40:8e:26:6e:be:40:36:d7:
b4:7c:98:8e:db:02:f7:96:82:66:ab:b4:f3:eb:4f:be:3c:c2:
06:cf:68:3d:a3:86:d0:0d:d2:6b:e3:d9:f7:4b:10:90:97:0c:
0a:9d:35:67:7a:6f:d3:a0:3d:96:41:49:47:79:de:1b:b3:b7:
e5:01:ee:68:4b:a4:03:a1:b7:fc:1c:a3:c7:f8:8b:13:dd:7e:
d1:46:63:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:19 2025 by rpki-client