Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
File: 76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa (raw, json)
Hash identifier: sAdvKYEYGHDSOzeYlou6cdl80wKNyJZDlL/UeaByHac=
Subject key identifier: 09:41:98:D1:55:9E:35:17:8D:DC:63:20:60:D9:35:84:AD:B2:C2:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 549E51AC48C862406A8FFA0892ECB112304685A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f00:81e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9e:51:ac:48:c8:62:40:6a:8f:fa:08:92:ec:b1:12:30:46:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=8b500b58e5e776058ddd6352da86c12070d740597e8ea1b8b542a7e801bde334, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:a5:5d:e6:ef:b7:9f:25:7b:5e:a1:84:74:
ea:92:24:8a:36:6b:38:f1:bb:bc:c2:fa:f5:69:54:
77:41:cf:b1:ca:12:41:3a:26:6e:0f:f2:a1:7d:2c:
d8:1d:65:1a:55:a2:db:87:89:bf:f4:b3:31:f6:6b:
be:40:84:c7:f9:19:5a:10:30:aa:2c:bc:3f:35:4a:
5f:4a:45:84:e1:17:61:3b:67:89:7f:f8:ab:65:fb:
25:bc:fc:82:ee:96:7a:57:1c:b2:0a:49:e9:01:97:
71:69:98:1b:cd:c2:3c:9d:e5:0b:01:2a:1b:cc:40:
f2:45:03:50:38:d6:c2:f7:93:b9:6e:58:3d:e8:d9:
ed:9e:b0:8c:56:e9:39:6a:06:c7:af:37:93:02:c2:
9e:2d:8d:8e:4b:d6:9a:c8:68:4a:c6:84:c2:9e:c9:
80:48:9e:cd:30:4c:5a:a6:34:ef:a7:84:6d:cd:70:
f5:61:98:4b:80:ef:c2:b4:d1:87:f4:37:66:f4:67:
c2:0a:3c:38:58:09:56:e0:b6:ac:f9:cd:eb:63:3d:
52:47:ba:e3:14:71:34:6a:23:37:f0:75:8c:17:83:
ac:c2:5b:0c:42:35:4c:91:23:73:86:8d:29:c7:b4:
5f:e8:10:fc:64:4a:9a:b5:33:bd:bc:e6:37:57:35:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:98:D1:55:9E:35:17:8D:DC:63:20:60:D9:35:84:AD:B2:C2:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:81e0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:60:4a:66:c9:e7:15:35:22:cb:70:d7:c6:2d:bc:a1:ff:d0:
4c:b1:a8:d6:fd:c5:5c:0b:42:82:1e:98:3c:fe:88:ac:6f:55:
f8:98:9f:bf:93:fb:39:35:bd:e3:ee:38:0a:65:14:be:94:d0:
a5:de:09:e5:ae:59:eb:05:db:ca:78:02:70:3a:85:61:90:fd:
5d:f3:96:28:c0:c3:7f:23:c3:c9:36:3a:10:63:46:2e:61:58:
83:39:5f:5c:31:bc:20:32:a1:8c:1c:99:58:b9:6f:70:a9:36:
84:3b:5e:30:8e:2c:58:0a:63:fe:1a:d5:b7:07:66:9d:4b:55:
9b:2f:86:0c:8f:00:b2:81:70:68:61:12:9b:ac:ac:30:1c:27:
1d:c5:44:5e:3c:7e:93:66:9e:ab:8d:62:59:8c:c2:29:fc:db:
e7:33:3b:54:b1:3a:fc:65:73:39:74:b0:c0:fb:11:60:84:07:
db:a2:fe:91:66:02:9b:a9:80:10:9f:be:75:d8:d3:88:e1:86:
d9:99:0b:d6:7c:01:26:2a:96:0d:f8:c4:ec:dc:95:af:98:45:
e3:43:f4:36:9c:e3:d9:9e:05:0e:27:e9:04:7a:66:13:7e:c5:
7a:54:5e:3a:57:85:9e:ab:cb:c7:8d:2f:2a:42:3a:8d:03:07:
5a:21:16:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:28 2025 by rpki-client