Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7790d0bd-9023-46ef-aea7-95560709d5a4.roa
File: 7790d0bd-9023-46ef-aea7-95560709d5a4.roa (raw, json)
Hash identifier: b3J1oKjEQqJdgRMblL2gB9CMW1gb6wP2/HZfQ5Utzj0=
Subject key identifier: 3A:A6:35:6D:42:6D:8C:E2:61:67:23:88:F2:69:AF:59:DE:B7:4A:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56198C9C467328E1F21014162487C254756C1159
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7790d0bd-9023-46ef-aea7-95560709d5a4.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f60:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:19:8c:9c:46:73:28:e1:f2:10:14:16:24:87:c2:54:75:6c:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=7f8ffd3420b5f484060d58bf18a8645c1c6b97d249282068a06f5b9baeee87cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:ba:91:4d:2c:61:fb:11:cc:5a:c3:47:19:
e1:61:52:df:b4:90:86:4a:df:c4:56:ce:8b:db:c0:
25:37:04:62:38:5f:15:79:e5:2c:52:28:ca:e6:aa:
2f:a0:13:cc:7d:9c:fb:e4:8a:8a:6f:b3:5a:e3:b6:
e8:cb:71:fe:01:d5:63:a4:44:7e:06:0e:2f:d4:81:
5a:0c:61:be:2a:55:ac:2e:3d:06:29:7a:46:9c:47:
58:8a:f1:99:4f:81:d1:cc:2a:2d:a4:5e:90:ad:74:
ce:1a:b0:11:af:65:a8:6b:d5:67:be:17:f9:8b:b0:
ce:2f:11:4e:c7:3f:24:bd:e9:b1:c3:5d:34:80:51:
bf:6e:5b:dc:7f:00:fe:b2:11:7e:d0:c6:cb:09:bc:
97:35:37:49:6d:37:e6:7f:ba:42:4f:d7:8e:d4:74:
61:b2:38:f7:1c:f6:4c:98:c9:4a:44:8c:26:7b:6f:
b4:00:3a:d6:07:26:e8:8f:59:d0:d6:0d:71:58:b1:
db:b5:15:7c:23:82:60:71:39:de:f4:3e:17:36:3a:
28:4a:67:d0:28:20:32:b7:0b:1f:66:40:4f:28:92:
2f:c8:6d:f6:bf:8a:68:21:7b:ec:8d:30:3c:18:30:
6b:81:bc:23:30:75:26:ea:d4:05:11:b3:c0:96:72:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:35:6D:42:6D:8C:E2:61:67:23:88:F2:69:AF:59:DE:B7:4A:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7790d0bd-9023-46ef-aea7-95560709d5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:c000::/40
Signature Algorithm: sha256WithRSAEncryption
06:c5:2f:6f:65:49:9b:22:91:cf:b0:71:d7:74:e6:b7:c3:49:
8c:d1:ff:57:66:0d:91:2c:4e:a0:0e:7a:4d:4b:67:2d:f0:f8:
f3:87:90:cc:0a:1b:5b:69:0f:bd:35:14:ea:ab:69:f6:7f:56:
9f:b3:09:2c:6f:10:3f:54:32:ff:c2:51:63:7b:a2:ae:a8:69:
56:60:10:40:e3:17:68:ed:cf:e3:b2:8b:10:8f:ef:99:32:67:
9d:2a:f7:49:da:ff:55:89:0c:27:11:01:2d:fe:df:38:33:6e:
a2:16:bf:68:94:cd:9b:f8:57:9e:86:cc:0b:ff:d4:4e:19:3a:
fd:65:3f:93:77:78:06:86:e2:90:fa:26:45:73:c3:a8:cc:49:
cd:32:36:69:f5:44:d2:03:a7:a9:15:fd:44:04:0a:88:3a:2d:
e4:aa:68:06:0e:92:16:2f:20:79:36:08:55:b3:40:cf:9a:97:
1d:63:87:f9:2c:a8:1d:96:fd:8b:e4:dc:5d:c5:0c:1d:b0:55:
fc:22:9a:b3:b3:ec:3a:57:3a:39:a4:55:c0:f6:c0:68:cb:7a:
6b:87:4b:7f:c0:fc:f5:47:eb:5a:6a:ea:e5:12:4f:62:80:91:
c0:af:83:b8:94:da:a1:7a:3e:13:ab:b7:0f:20:1d:51:e1:95:
75:fb:39:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:36 2025 by rpki-client