Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
File: 82624c93-a718-4b6c-b8d0-1502172fc711.roa (raw, json)
Hash identifier: Whlz7QNJ4fiKxAiVdNW6C+Oy8kJJJ1Yof0vlpb3YY54=
Subject key identifier: D8:7C:FC:25:75:A5:7A:53:06:8B:3C:D8:5D:F0:48:FE:F8:D8:CE:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C4296D969AC0CFBDA752FF8529E14D174751C52
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f61:8060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:42:96:d9:69:ac:0c:fb:da:75:2f:f8:52:9e:14:d1:74:75:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=7fa70f7d10556168c085d8d64c7373c3481eb26689eba90661e567261d9e6653, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:cf:28:14:af:99:7c:00:54:f4:9a:96:3b:
0a:43:a0:3a:26:c6:bd:ac:10:ca:86:7a:78:a0:72:
f7:b3:9a:3b:9b:77:08:70:6a:9e:a0:33:b7:3d:53:
ab:f8:34:19:ec:e4:8b:7e:7c:09:41:8d:48:e9:d5:
b6:2a:a5:0f:fa:e1:71:74:9a:f0:cb:3f:54:0a:44:
49:3e:b7:dd:25:66:4e:1a:cb:28:4c:b9:cf:1b:62:
9f:75:55:8b:e7:4a:57:8d:7b:d2:53:5b:18:50:57:
da:13:83:d9:b2:05:d9:1b:f2:3e:a9:f1:73:ee:77:
dc:92:d8:16:6a:d0:85:3b:a4:f8:91:59:99:2e:4b:
cd:51:e1:de:69:01:5a:4b:fe:c9:88:52:a8:50:51:
75:d9:da:a9:87:d8:1e:37:f1:ad:b9:9b:8c:a1:c5:
a7:a0:43:21:d3:2e:7b:cd:76:e2:60:1a:43:6c:b2:
41:a0:f7:33:ac:90:61:a8:f9:31:e1:6c:a6:a3:d5:
91:b1:e5:a8:84:e2:40:ea:2d:0b:58:69:9b:61:53:
d1:55:c6:ec:09:ae:b8:c9:08:9b:e5:84:e2:a2:7c:
04:8a:22:a8:33:82:42:40:68:31:43:6e:8c:43:d7:
57:4d:fa:70:ab:e1:70:55:82:06:2a:97:fc:c8:0a:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7C:FC:25:75:A5:7A:53:06:8B:3C:D8:5D:F0:48:FE:F8:D8:CE:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:8060::/48
Signature Algorithm: sha256WithRSAEncryption
81:1e:41:c2:c5:dc:94:22:93:c5:bd:c9:49:4a:c6:33:a3:ac:
41:d1:ac:c1:f4:4a:49:f6:94:08:bb:08:31:11:8b:fe:72:dc:
38:f1:8c:95:be:4a:15:d8:36:ca:32:cc:ef:12:5b:b6:e5:b6:
e2:6f:20:1a:b8:d8:cc:c6:18:63:b3:8a:6f:98:3a:b1:f7:35:
4a:b0:e9:84:35:84:87:d1:6f:d0:40:35:90:25:fc:45:47:a2:
c4:40:a0:bc:e9:8e:ad:bd:5c:7e:f8:f6:94:7a:89:ae:47:d0:
ef:69:28:8f:a3:a1:78:0f:e8:2d:7e:6a:eb:02:06:c7:13:b4:
6c:da:4b:a4:70:ce:e9:de:b6:1c:8f:54:74:8a:14:c1:61:bf:
51:4a:d5:75:92:81:94:c0:91:31:42:38:bf:ff:3e:fe:d7:bb:
49:76:a0:40:ea:88:f1:a4:d0:41:36:91:e9:06:0b:f6:2c:ce:
96:86:b9:12:e3:ac:8d:e9:9c:60:c0:6d:29:12:f8:0e:0e:0b:
fe:9a:9e:f5:79:64:c2:9e:14:39:b2:c2:cd:ef:ef:6b:c2:a1:
16:8c:51:cf:29:11:de:72:71:d7:7d:2e:81:d8:4b:09:41:dd:
15:4e:ff:28:c0:38:3e:4e:91:ff:69:07:da:1f:63:a6:13:80:
48:07:d2:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:24 2025 by rpki-client