Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa
File: 61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa (raw, json)
Hash identifier: oLxlA725mnPzHmoNBoLkDp5Up5E6NA6i0/cFdM9U54w=
Subject key identifier: 5B:96:12:47:1C:69:B8:A1:6D:B2:86:BC:DF:AE:95:85:19:90:D4:6D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A7D75FC4D2600D4231729E8030E3B40219824C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7d:75:fc:4d:26:00:d4:23:17:29:e8:03:0e:3b:40:21:98:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8d88f4a549f46772d9a9340f2f1149ad4c249e005c24a82eb63b27c0c4c4a639, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:0b:7a:91:e8:4a:d9:72:5b:82:fd:b7:e8:
88:e5:6c:35:79:15:52:c4:0e:69:70:38:4d:47:65:
99:b2:bd:29:45:16:d4:c5:7a:d4:ef:5e:aa:62:5e:
6d:ec:25:0e:56:c7:44:43:76:e9:c5:d0:24:e6:36:
af:5f:d9:c0:3d:d9:3d:db:27:73:a8:fd:9b:3b:89:
d6:80:e4:33:70:95:fd:8b:50:e6:7e:0b:06:fe:88:
20:e9:6e:e3:7e:fa:4f:de:07:82:46:d0:3a:b3:c2:
2f:b9:06:f6:5a:54:81:af:02:e1:1d:7f:c9:95:5e:
04:8f:1d:4c:e9:f1:0b:10:4c:a8:13:82:6d:20:e8:
e6:6c:a7:8b:57:f8:bf:64:91:5c:c7:84:f2:f2:c8:
c5:78:13:48:d2:74:bb:d9:95:78:c5:98:de:ca:17:
c0:6d:12:3c:99:ca:74:82:a5:d0:30:c4:b4:89:71:
e9:18:52:85:f1:44:5f:84:42:b9:9b:4a:19:63:0a:
7d:b6:f4:b3:a5:97:9c:63:2b:5d:b4:89:fe:da:86:
80:19:dd:46:a4:f2:4d:53:0c:e5:1c:09:52:2e:51:
da:b1:6d:5a:c1:e5:b0:56:fc:7b:ab:bf:f6:4c:10:
13:9e:01:1e:31:42:e9:68:ab:0a:4a:5a:73:51:47:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:12:47:1C:69:B8:A1:6D:B2:86:BC:DF:AE:95:85:19:90:D4:6D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:e000::/40
Signature Algorithm: sha256WithRSAEncryption
57:f6:fe:37:3b:df:49:0e:53:11:1b:ba:a6:22:29:33:43:1b:
73:a9:95:59:1b:d2:69:bb:94:95:03:f3:ac:08:08:cd:df:58:
c9:c7:c0:23:fa:7f:28:0c:53:a1:20:61:d9:02:e3:76:a4:b5:
20:d7:e7:c0:08:07:76:ed:fb:98:b6:b3:1b:e7:38:6c:58:d8:
19:46:f2:4c:6a:6f:23:d3:d4:d7:67:cb:7d:a9:f0:a4:5b:59:
04:fe:a2:13:0c:e3:29:dd:bd:eb:a6:93:b5:60:5f:3e:14:ac:
0e:2c:f6:29:c0:92:11:d7:e8:11:d0:0a:89:66:42:0e:83:3e:
8a:8b:ae:65:df:56:df:15:8d:84:dc:d7:2a:a9:8a:53:65:96:
3e:d8:47:bb:1c:0d:68:6b:77:4d:29:82:21:fe:7f:f4:53:e8:
7f:95:69:16:6c:c5:8f:c0:89:89:f1:f0:cf:ce:b5:87:d2:f8:
a8:d8:e8:15:f2:55:17:34:ad:df:83:cb:0c:a0:f9:56:7e:66:
99:f7:b6:65:b6:7d:9e:e5:89:60:7c:3f:4c:33:65:88:0b:0a:
4e:4c:01:03:b2:6b:13:6b:18:a5:9d:06:7c:cc:78:21:3d:22:
05:df:86:4a:bb:3e:1d:96:6a:15:91:53:95:8f:19:cf:a0:55:
f3:61:6c:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:13 2025 by rpki-client