Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa
File: 5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa (raw, json)
Hash identifier: wsYltvwEBe6s8ASFW4T9hLIDPUYUGVMipgSrCUiemaU=
Subject key identifier: B3:C8:AC:C2:FC:D1:96:BA:3C:11:F9:75:3E:4E:44:EC:FC:C8:D2:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1669B77EBD8D97050A24BD40555477C6F608CAE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:80c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:69:b7:7e:bd:8d:97:05:0a:24:bd:40:55:54:77:c6:f6:08:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=faad4f11750d48f069f772239e2676b18ef6eca9b56d5248eb8f75c90b4b5ccc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:28:4b:83:07:db:bd:e5:05:d8:c3:43:89:
46:c1:a4:68:44:21:1a:2d:9a:5e:ca:58:7e:ca:b5:
02:0c:bb:de:80:87:89:b4:66:e6:e6:ec:43:09:6e:
ba:22:1e:7d:13:1b:ed:e1:88:15:09:df:69:29:4f:
01:1e:75:a7:0b:95:94:42:26:87:e7:3e:69:22:03:
cf:31:74:f9:02:72:0e:59:39:26:3e:3f:62:42:07:
9b:87:3a:35:e2:5a:42:1e:e3:0c:dd:c2:15:0e:bb:
68:e2:85:46:b8:73:b4:63:86:68:6d:8b:d4:31:f8:
5c:a3:bf:e3:cc:a2:9f:dd:58:27:e7:be:ff:05:34:
71:5b:76:13:52:aa:39:96:21:cb:28:3c:8f:a0:7b:
75:c3:28:44:a5:90:01:b0:2c:ca:05:4f:90:15:cc:
d8:a4:8b:ca:df:03:6a:d3:86:88:68:96:85:2d:4d:
e2:99:d5:05:a2:0d:48:84:da:7b:ea:43:48:25:d2:
4a:b0:1a:3d:fc:86:9b:99:8d:20:75:f1:a9:0b:da:
6e:be:79:5d:94:43:7a:6a:3a:35:ae:3c:5a:31:83:
b3:1a:c2:1e:a5:0c:43:06:81:6d:a4:65:4b:49:d0:
bb:81:af:7d:d6:d1:1a:57:55:90:d0:a2:68:f2:85:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:AC:C2:FC:D1:96:BA:3C:11:F9:75:3E:4E:44:EC:FC:C8:D2:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:80c8::/48
Signature Algorithm: sha256WithRSAEncryption
8a:72:2d:16:d8:8f:61:f6:93:82:5f:d1:e9:49:ba:70:33:93:
90:28:c3:c8:db:fa:16:6b:03:17:7b:f8:94:2b:f7:ec:11:0e:
f7:b3:dc:54:ef:4a:69:66:9c:3b:2f:8a:43:01:ad:c4:7c:74:
56:ef:97:d4:71:08:a7:56:f1:cc:f0:db:8f:ad:9c:ff:0b:91:
56:aa:d0:2f:39:f1:da:aa:9c:11:66:ec:80:9e:ab:22:c8:8f:
fc:76:cd:7a:51:51:fc:f0:9c:34:66:2c:64:21:7f:21:f1:dc:
83:80:2f:bc:81:1e:21:da:c0:fd:e4:cd:63:cf:82:88:0f:26:
4e:79:49:a5:37:1a:08:49:27:2c:db:3e:af:de:a0:39:2b:78:
a1:f8:23:a7:1f:50:77:97:6e:5a:51:7c:19:6d:01:0a:06:12:
c9:9f:13:73:f5:9c:05:ab:f7:9a:2a:11:7f:7a:bb:11:00:bf:
9b:d1:17:bf:35:87:9d:af:35:ba:72:c0:d0:57:54:fd:74:6a:
ed:77:9b:72:04:61:98:b1:79:21:b4:da:53:ca:cf:36:07:71:
05:56:3e:fd:35:79:02:42:42:56:fc:db:9e:2f:3f:73:de:dc:
da:a1:7a:2d:61:ad:c6:19:b8:95:45:e6:0b:41:f8:e2:d4:73:
68:8f:38:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:31 2025 by rpki-client