Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa
File: 6c921a1b-c5be-4c53-9918-5f35190b51a3.roa (raw, json)
Hash identifier: Yyj+Wf5I7GMQ0SSBVw3KleX9vAUX0Cm0gDXaMzbarqI=
Subject key identifier: 5C:3C:6A:2D:91:B9:E8:3D:78:3F:52:17:5E:C8:DE:87:43:7C:E7:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B56C8530F4D9C32C9DB3D14AE4C80AABF6C6768
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:3400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:56:c8:53:0f:4d:9c:32:c9:db:3d:14:ae:4c:80:aa:bf:6c:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=fc90ff465bf879ffdd5c2115186edd4c359417edac50148e9bbc061675cba93c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:87:f5:97:6b:ed:f1:d6:b4:61:28:79:ac:9d:
93:19:15:32:a5:c5:38:d2:b5:3a:07:5c:d3:41:47:
5a:09:6a:fd:bd:85:e9:b3:c4:63:3f:dc:1d:fc:98:
d9:c7:a3:6c:68:b3:07:56:29:ee:12:51:04:47:72:
32:bd:d6:78:24:6d:b5:d0:94:59:0e:a6:31:38:15:
52:86:f3:7a:12:2b:26:b3:63:ae:6d:e9:e5:6a:2c:
df:c0:76:e8:5b:b0:4a:83:27:48:93:de:d8:4e:b2:
e1:7d:3b:74:4a:a3:dc:f4:37:3b:10:51:0d:72:d6:
41:33:82:86:68:ef:02:fe:ea:4c:2f:9f:6f:62:50:
7d:f9:ba:b1:a5:be:83:68:9d:a8:cd:18:96:6a:a0:
ff:c4:d9:30:aa:a9:b9:17:cc:d8:91:2f:a3:07:cc:
34:bc:0f:09:ea:be:64:08:59:c8:33:34:fa:e1:14:
c0:bc:fc:51:1a:7e:10:48:a3:eb:c7:a1:cd:fd:c6:
fa:04:8c:12:78:a9:08:25:cb:c5:63:21:64:14:01:
d5:8e:5b:de:6a:ad:3a:b9:a2:82:da:a5:88:0e:56:
a3:67:87:7a:0b:1b:11:11:a9:d6:e5:49:8f:44:b9:
16:f7:e2:c0:bb:a3:b8:62:7a:94:a8:d4:a1:7f:d9:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:6A:2D:91:B9:E8:3D:78:3F:52:17:5E:C8:DE:87:43:7C:E7:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:3400::/40
Signature Algorithm: sha256WithRSAEncryption
99:45:9d:b6:e6:78:7c:d8:11:24:ad:0b:3c:81:2b:63:ad:c1:
bd:c0:cc:76:3f:38:47:43:52:2a:cd:b8:66:f1:bc:fc:d5:02:
92:4e:b8:18:db:99:c2:14:f3:62:90:f9:b5:b5:31:bc:72:c1:
78:15:10:de:a0:a4:2b:a7:6b:eb:c3:89:eb:64:5c:ea:3c:31:
e8:4d:37:1e:2d:45:13:ad:cc:73:f1:16:c2:4e:b1:bd:95:6d:
f8:33:56:f5:a3:fd:50:ed:e6:14:6f:8d:31:04:f9:ab:c8:8b:
9b:82:4e:a9:fb:6e:5c:91:78:8b:79:0a:8b:7e:7b:63:8f:77:
92:90:b0:20:1f:f2:a2:21:e7:81:9e:2e:55:51:e9:40:03:a4:
60:25:c5:21:f3:33:85:e8:88:32:00:03:38:4b:b7:22:79:5b:
64:af:e7:cc:fe:60:43:f0:80:d5:83:df:45:14:88:69:21:47:
5f:f3:7f:90:2e:f9:6e:6f:fa:92:d2:88:e7:e0:dc:92:c1:3b:
20:d6:8d:78:b8:63:83:a0:fe:fb:39:fe:db:b1:45:74:09:f6:
6e:7a:c8:a3:82:e7:2b:55:95:74:78:d7:32:1f:4c:e4:43:50:
07:93:d2:d5:74:9e:91:da:a1:78:25:46:6c:57:87:0e:b3:2d:
3d:26:a7:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:11 2025 by rpki-client