Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa
File: 5adca02c-6787-4a0f-ae64-8edefab86421.roa (raw, json)
Hash identifier: zxcGG5ItJpIvQ1/Lga233IZInPdesS8bFFMghnjnSV4=
Subject key identifier: 44:CA:40:01:4C:5F:C8:B1:FB:A6:18:31:7F:F5:D2:8A:DF:6C:D5:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F8B62AF8BB793AF97D912AE24A3CEB91BBF9148
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f25:4000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8b:62:af:8b:b7:93:af:97:d9:12:ae:24:a3:ce:b9:1b:bf:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=afe8f7e55127fd22fc068f58a1b8972eb7eee7b50c6d681e2664fd4ddcc70367, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:1e:af:b6:4d:96:f7:97:25:c2:f1:46:31:
03:fb:52:e1:0f:d7:85:7d:15:99:8a:22:d7:b3:66:
7a:9f:78:47:1c:c6:8f:e1:75:31:26:38:85:cc:4c:
14:20:f2:37:f9:5d:36:71:07:46:00:ac:3a:5d:f4:
b2:59:b3:3e:0b:52:d6:e7:43:b2:66:3c:13:d5:ea:
84:fc:76:04:53:33:f2:fe:d7:c5:01:51:1c:61:27:
62:db:4d:ff:bf:19:73:df:3f:6d:84:46:34:cc:7a:
e4:5a:95:05:c8:e0:8d:25:b7:e9:57:67:3c:3a:4d:
06:e5:a7:a8:46:9f:02:fe:2a:80:e1:2e:8a:62:b2:
1f:36:4d:53:95:69:a0:6d:80:a3:67:e7:01:26:59:
26:c8:a9:d7:6b:61:3e:bc:6d:ef:c2:7d:c4:92:c2:
e5:29:d1:ac:d6:cb:ec:7c:a1:7d:89:f7:c3:36:ac:
5f:0b:ba:79:a6:b8:d1:75:9f:67:0b:d9:1b:90:0c:
2f:74:16:f6:a8:dd:05:f8:64:08:9d:80:0b:28:56:
c9:dd:8b:96:03:16:d0:6a:34:c7:85:7e:28:91:30:
4e:b3:fd:37:43:e6:45:25:07:c9:af:80:f6:fa:a6:
2f:a8:e6:29:e8:03:02:ac:3a:ff:f3:af:6e:a7:d3:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:40:01:4C:5F:C8:B1:FB:A6:18:31:7F:F5:D2:8A:DF:6C:D5:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f25:4000::/37
Signature Algorithm: sha256WithRSAEncryption
97:2e:87:0d:23:b8:7a:a6:ee:6b:0b:21:93:9e:cb:d9:8e:d5:
b7:d1:a2:c0:a7:4f:19:49:1a:c4:44:65:9d:e3:00:44:6f:a7:
05:7f:b0:d3:c9:4c:70:96:65:4c:94:75:bb:6e:ac:2e:00:9c:
09:07:a9:f4:15:41:2e:34:e4:bc:f9:05:fb:55:5d:ba:f1:f4:
7a:5b:b2:2d:7d:dc:3b:37:61:d6:e9:5d:bb:2f:16:6a:9d:b6:
8e:4b:cf:0e:43:eb:62:10:88:5c:ae:85:d4:de:56:32:bb:e4:
fe:e8:f5:8a:80:8d:03:54:22:5b:ab:83:94:f6:f4:1e:fc:d2:
06:f0:51:91:53:02:34:67:ff:f3:e2:48:d9:3e:dd:2f:a8:c3:
48:bd:52:eb:85:a4:76:27:81:26:1f:4f:11:18:b4:27:f4:4f:
c3:87:0a:44:7b:28:a0:e9:46:9c:5d:4e:cb:f0:07:c3:0c:45:
fe:b9:29:79:83:69:3f:b7:c7:92:20:ba:66:75:62:08:b2:f2:
61:09:8a:00:d6:34:d8:82:ae:07:89:7f:bf:92:d7:23:3a:26:
4b:6e:13:fa:56:32:67:fa:2f:03:6e:db:41:63:2a:0f:03:71:
d2:5d:ed:e3:4f:af:37:fd:c4:5a:94:b0:c2:20:70:c8:1a:f5:
eb:ce:25:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:58 2025 by rpki-client