Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
File: 8305547a-da17-456f-b279-caefe677572d.roa (raw, json)
Hash identifier: ET9CsPeZZCShafTvwv1sRhwr/EImRPxu2KvoNYMbG4Y=
Subject key identifier: 42:BD:E4:A6:4A:25:B3:10:BF:86:C4:AD:C2:BE:C1:D5:48:B9:6B:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5247A6E2CE3DC41960BDC0A0C2D804D8A52E3AFD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff7:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:47:a6:e2:ce:3d:c4:19:60:bd:c0:a0:c2:d8:04:d8:a5:2e:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a84ff2df80c0669c35c4b8dc1e95202d9c9603876986775d3db03136f3892755, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:63:a7:56:63:2d:62:7b:d7:ab:0c:17:d4:
87:5e:dc:ad:07:68:97:9f:4b:a6:bb:c8:03:ea:cc:
4c:f8:6e:00:aa:ac:15:0a:f6:27:14:84:56:ef:be:
a0:77:17:99:05:15:38:b8:fb:0a:0a:cb:3d:f8:0f:
8b:a6:88:f7:2f:63:3a:43:98:61:c5:d4:97:99:c5:
b3:be:cd:ff:3d:64:81:9d:9b:6d:cc:02:1b:03:33:
c5:74:57:c4:23:9c:37:46:29:b1:d1:22:74:39:67:
04:0b:e9:81:89:a9:53:fb:5a:23:53:2d:63:7f:3a:
6b:04:35:3f:91:f5:d5:10:d7:04:71:6d:a6:7a:60:
84:45:79:ba:09:e8:e0:c2:0a:46:bf:44:69:46:41:
99:d2:3f:cf:0c:4e:27:ca:72:24:25:8a:ef:cc:02:
43:cb:c4:a3:6e:b5:99:8e:80:1a:65:bc:58:6b:67:
3d:ef:27:07:42:ce:1e:fa:62:70:ea:e0:cb:8e:e5:
f0:2d:bd:b4:e3:3e:11:fe:e6:f3:11:f8:a1:21:b0:
1e:84:a3:98:85:7a:d1:7a:9d:1f:ce:a3:04:46:81:
11:b6:00:b0:ea:6c:fa:0f:24:fd:b2:b9:6b:16:aa:
83:7e:2f:47:9d:02:b3:1d:13:84:4f:26:57:56:4d:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:E4:A6:4A:25:B3:10:BF:86:C4:AD:C2:BE:C1:D5:48:B9:6B:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ce:df:b1:96:d4:05:2a:a3:4c:a5:af:3d:1d:35:c8:da:11:25:
de:9f:fc:57:c8:cc:25:7a:db:15:5b:4e:ef:bc:86:b6:3f:da:
cc:9e:63:e3:84:38:41:94:fc:3d:cd:09:5a:f6:d4:a3:ab:32:
6d:06:cf:4f:69:23:9b:86:3a:ff:01:59:e5:51:33:db:88:b1:
3a:78:29:1c:9c:73:32:0a:91:34:75:7e:65:5a:41:4e:b9:6c:
de:32:77:4d:71:52:d7:46:3c:98:a2:45:d8:d1:ac:61:0d:4d:
56:29:4f:20:49:f6:cd:e3:bc:3c:76:86:9e:4b:78:8c:8f:89:
f6:59:44:73:64:2d:4c:4e:52:26:37:6e:53:50:75:b5:ec:da:
8a:4e:1b:0a:f6:72:d2:e2:cc:43:54:15:b2:b9:ed:36:30:ab:
b3:f5:57:c7:ee:ff:3c:86:b8:3d:2a:e7:f2:02:d7:77:29:94:
3d:c2:89:69:f2:33:c4:9b:cd:78:92:0e:38:3a:57:64:bd:c4:
50:09:07:df:5f:9f:6f:47:3a:0b:0f:42:e3:71:f1:13:34:b6:
0e:96:81:a2:4a:bc:92:2f:3f:4a:22:e8:c5:d6:86:0e:de:17:
32:e8:93:c5:fe:b0:71:e5:06:c1:b8:ca:83:59:da:9b:b3:c5:
80:cb:d6:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:17:21 2025 by rpki-client