Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa
File: 627cfcbd-dea0-4a66-8797-dc40d8b87244.roa (raw, json)
Hash identifier: mzZ8izeA3l8vYjoA0Q7aUrG71KLElaya1VS0PgE1jw4=
Subject key identifier: 25:78:4E:7E:F4:E3:B9:E8:B0:F4:E8:F6:6D:52:00:4B:FB:62:B1:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38B3AF0813DC639DD14246A4F9F463F0E0B08F84
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f38:8040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b3:af:08:13:dc:63:9d:d1:42:46:a4:f9:f4:63:f0:e0:b0:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=42e188559e9b391bdd0a2997c4f2e986ac37472b5ae7ce297853788ae4ddfd48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:02:c3:9f:c0:2a:34:54:51:fa:88:b0:02:
85:43:14:a7:57:71:65:88:79:5f:fb:85:50:cf:b4:
70:38:32:55:4e:ff:94:4e:b9:4c:7f:cb:8d:2f:b6:
ab:0c:90:7b:65:b4:3e:34:f3:68:e7:c6:fe:5f:a4:
78:86:d9:ec:6f:1e:47:14:90:61:c5:d0:74:9f:85:
d8:27:d1:0c:cb:8e:e7:be:e9:85:77:13:c4:42:f8:
d4:25:28:60:8f:be:27:7e:7c:fa:0b:ac:b8:79:cd:
9b:76:f3:bb:be:eb:4a:50:ef:14:9a:5b:7d:f2:4a:
12:7c:fe:ba:2d:1a:ad:19:29:85:a1:37:52:6f:cc:
f0:5e:2a:b4:09:ce:fb:84:5d:f4:4d:fd:9e:11:eb:
a5:d8:79:3d:40:2a:0a:d0:c2:01:b4:d1:19:ac:cb:
c8:83:36:86:7c:0a:94:dc:d6:f0:44:87:cf:68:ac:
58:a3:8b:b5:cc:62:f6:ed:76:19:92:36:03:e7:a8:
24:18:36:a2:65:99:0a:90:86:9e:3c:ef:80:b8:dd:
80:95:57:7b:45:d8:79:fe:07:66:c0:a5:67:85:c3:
6d:61:72:5c:02:ab:b7:92:5b:5a:a4:f5:14:62:36:
c1:3f:43:59:c4:9a:28:98:b9:d6:48:e6:99:d1:81:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:4E:7E:F4:E3:B9:E8:B0:F4:E8:F6:6D:52:00:4B:FB:62:B1:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:8040::/48
Signature Algorithm: sha256WithRSAEncryption
5a:94:fe:c0:70:5c:f2:6d:22:2d:1a:59:af:e1:fe:89:8d:5f:
eb:04:9b:bf:63:7b:0d:79:29:7d:4f:d6:bd:c1:1a:40:e6:9f:
12:b3:98:00:8f:d0:14:34:d8:f9:cc:67:62:94:57:4a:5e:0e:
04:60:e0:63:a2:9f:6f:ae:90:11:19:6f:75:01:a7:b6:85:d5:
a4:d1:d8:67:ad:e0:85:58:90:02:fe:a3:02:15:43:65:01:d4:
ff:84:15:56:5e:18:b7:6c:c2:46:ea:6c:95:c2:66:ca:da:80:
33:75:89:9c:a7:48:17:90:93:70:2d:25:88:88:23:43:85:87:
47:f9:01:60:c3:cc:a8:ac:0a:28:ca:e6:b1:03:87:9f:a6:ef:
81:50:4c:de:90:d9:00:43:fa:5f:22:d6:1b:74:d5:ea:c0:79:
1c:1f:cb:68:eb:99:13:26:c2:77:87:fa:07:4b:f8:4b:40:40:
fb:94:15:e3:3e:a2:87:1a:e6:3d:a2:b7:26:b7:6c:4d:01:09:
51:d1:9e:ae:0d:eb:43:58:fb:56:98:d1:6e:f7:25:06:56:21:
86:3b:1a:ce:64:07:d3:2b:ee:ed:c2:6b:41:4d:ea:b4:76:2e:
f4:0a:ee:d9:dc:22:64:7a:23:5d:ca:e3:9b:8a:81:79:ef:41:
06:1f:de:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:34 2025 by rpki-client