Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa
File: 750dd1da-97f3-486b-a958-d4f08b962aec.roa (raw, json)
Hash identifier: G+YVgWelkp4ek27fsL10oj5EHr+JJYqcciYEuHSaSHI=
Subject key identifier: 39:B8:81:FE:4D:22:C2:1A:17:AA:8B:AD:75:E9:4A:BB:26:73:60:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33378F2CB8E8BCEB3DEE7546097C035AAB013411
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f10:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:37:8f:2c:b8:e8:bc:eb:3d:ee:75:46:09:7c:03:5a:ab:01:34:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6f0344036fb1d0e86fec17c4e019f903b586e825afee4b8acd0bb481fee182f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:a0:c7:55:23:84:06:ce:17:35:ce:70:df:
3f:23:b1:48:68:70:09:81:c7:2e:92:21:d1:3e:c7:
e2:f7:02:29:3b:c0:29:23:a7:db:56:32:a6:46:09:
72:04:33:87:b5:96:48:55:52:d4:3a:96:e9:92:30:
1d:5d:b0:2f:a0:41:44:28:5b:7c:fe:e9:d4:3f:24:
53:4c:d7:02:5d:50:a5:45:c1:fd:d0:a7:2e:11:44:
d5:b1:c3:40:1d:1e:d4:ff:f0:58:55:db:06:5f:48:
0e:7c:73:60:62:39:c4:e5:0a:4e:f6:2e:d1:53:52:
b3:b3:1a:62:6c:89:13:15:43:43:9c:5f:be:47:06:
3f:67:04:14:6c:40:c0:7a:c9:de:9f:00:6a:77:ea:
16:2a:15:b3:33:32:4d:26:79:6e:c8:5c:f6:b9:be:
54:1a:ba:83:81:0b:84:6d:a6:86:e7:bc:42:b9:3c:
74:7b:bd:bd:2d:7c:bf:b8:40:1c:3c:6d:6a:0e:4e:
23:0e:0d:2e:a5:a2:41:e3:f4:19:93:c7:4f:7b:97:
c2:b6:49:e3:22:77:87:21:a1:ea:07:7d:4a:f2:b3:
d0:5f:53:41:75:e5:d0:5e:34:90:4b:8f:91:7f:2f:
e0:9d:7e:cc:ad:50:70:d4:30:19:11:df:a9:f4:57:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:81:FE:4D:22:C2:1A:17:AA:8B:AD:75:E9:4A:BB:26:73:60:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f10:c000::/36
Signature Algorithm: sha256WithRSAEncryption
86:c5:42:26:12:0b:b2:cc:e1:6c:c0:ce:17:a4:b0:7b:95:62:
c9:52:42:55:3a:c3:fa:05:c1:c8:93:9e:ab:f4:1b:8c:f9:f7:
69:2a:71:d5:1d:96:5d:89:c5:14:e5:01:f2:b2:1a:43:c1:ef:
3d:a5:1a:5b:d8:aa:df:a0:9d:11:d4:49:01:9c:e1:61:6c:e2:
7e:63:ec:f7:b7:4b:89:90:71:2a:40:4c:75:b0:9c:6d:9b:05:
2c:3c:07:e9:49:93:7e:e2:7b:50:ee:d0:81:91:5b:b7:18:8c:
57:3b:76:e0:db:52:ef:ed:65:b8:30:49:2f:4b:2d:c6:13:f5:
5b:8a:f8:ae:01:3b:9f:5f:ac:21:6f:ed:e1:55:35:f8:bf:37:
82:0f:e8:be:15:77:d5:b8:91:6b:0b:81:ee:02:72:16:cc:65:
d9:56:1c:2b:7f:a1:22:65:f4:86:aa:d1:af:1f:ac:8e:c7:44:
b4:99:1f:c0:5b:8b:30:b8:eb:6b:b2:a6:3c:b1:ec:90:43:6d:
47:40:75:01:35:93:c1:36:fa:20:4b:e8:c3:1c:7e:0e:48:d3:
f1:a9:5c:14:d0:02:dc:19:76:b3:fa:a6:66:67:fc:15:cb:fb:
2c:7d:bf:99:ff:3b:4b:39:e1:74:12:9d:cc:d4:2c:bb:21:cf:
57:8d:d1:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:42 2025 by rpki-client