Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7857b298-8410-404c-8105-5de07a6f4833.roa
File: 7857b298-8410-404c-8105-5de07a6f4833.roa (raw, json)
Hash identifier: YcPWnzrp4cXRM/WncxbGUxLkuO0wgxHjmmtWwCO3a3E=
Subject key identifier: 28:3D:6B:5E:00:46:9F:ED:E0:E9:34:D0:4B:CF:B0:85:67:98:46:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14CD6548058A5969BC4C2EF80CD286FC3D3113CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7857b298-8410-404c-8105-5de07a6f4833.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:20c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cd:65:48:05:8a:59:69:bc:4c:2e:f8:0c:d2:86:fc:3d:31:13:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a44bcf0e9ea9e4a49108aeda354c0a96199b14fd4d50ad2d2121bb9214a01336, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:14:b8:09:ce:99:20:1d:ed:be:30:d8:0b:
5a:a5:29:2d:f7:38:5c:eb:e2:f9:98:60:c6:45:0a:
69:cd:c2:44:a1:47:73:20:3e:ad:b8:c2:2f:fd:76:
e8:86:1a:19:c3:fe:81:89:ab:97:20:22:4c:09:c4:
45:6d:30:e2:97:0f:1e:d3:e3:4f:2a:6f:8a:d3:84:
79:a1:43:d0:b2:eb:f7:59:e6:cd:d1:4d:03:1b:fc:
e1:31:24:6e:f0:83:71:84:f0:aa:c6:3a:78:47:d3:
40:a8:df:08:3c:01:14:52:03:fd:5d:0a:f5:87:e1:
5c:39:4d:74:7a:68:0d:ec:8c:e9:bf:cd:6c:a1:12:
bc:9c:c3:e7:4b:08:dd:2a:c9:4e:12:98:7d:e1:f7:
0d:45:a2:2d:b0:16:b1:4f:ab:a0:c5:2d:92:2a:d8:
33:0f:6f:11:0c:0c:80:62:49:5a:7f:c6:82:38:2b:
d2:ea:2e:06:c3:9b:2a:ad:39:ac:a5:2e:9e:1a:0d:
62:02:f4:03:b1:da:df:bc:99:ed:0a:2c:ec:49:12:
7c:20:77:1e:c4:df:18:d0:d7:22:e3:fe:79:00:ef:
8b:fa:80:8c:f0:2b:3d:47:65:28:03:c6:98:37:e2:
a5:05:f2:c8:5d:0d:0b:4a:ba:f4:03:22:d6:bf:15:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:6B:5E:00:46:9F:ED:E0:E9:34:D0:4B:CF:B0:85:67:98:46:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7857b298-8410-404c-8105-5de07a6f4833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
cb:d8:7a:27:f4:20:dd:f5:f8:57:56:a7:44:7a:c7:ea:9c:5a:
08:1a:c2:de:61:fe:d6:93:1b:6d:79:3a:b5:fc:df:b8:ce:ed:
d5:ed:30:b4:8e:10:c8:a3:b3:f1:d3:2f:58:dc:8d:b2:1d:e5:
ab:72:36:5e:1b:b6:84:ff:3f:99:c4:ee:7e:ae:c8:fd:72:36:
0b:6e:13:ee:35:9e:f5:a6:97:2b:2c:14:16:31:0f:1e:e1:04:
06:4e:ab:88:f4:19:2e:22:ff:bc:7d:dd:ed:b4:e8:ab:07:3c:
85:a1:ce:af:41:a7:26:25:0f:89:1a:b0:e1:1c:4c:8c:6d:d0:
fc:6c:c7:4d:33:b9:83:85:45:6e:e7:0b:f5:2f:b7:54:c2:d4:
6e:9e:41:01:45:61:af:1f:e0:62:32:47:84:54:2f:f6:10:18:
f3:7d:f1:c0:57:96:87:f8:7c:3c:37:90:d9:f8:4e:b0:42:0f:
c4:bc:88:cf:ae:d6:86:d8:4d:ba:2a:05:18:0c:7b:61:26:05:
9a:20:03:27:65:7e:a9:e2:4e:af:06:e1:7a:09:98:fc:9c:41:
ac:2b:19:fb:7b:23:fd:eb:ea:c4:e5:3c:5a:99:bc:21:94:82:
5f:70:57:88:84:c8:2f:e5:b1:f7:96:b2:ab:8b:2a:86:34:76:
ba:f6:f7:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:58 2025 by rpki-client