Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa
File: 89570917-e234-4dbb-8694-dc75eb220444.roa (raw, json)
Hash identifier: addA13Isfl6yFR1eiMdIKUWBt5rI86k9SfQchJLM4ZM=
Subject key identifier: 9C:FE:95:10:F3:D6:71:CE:04:A9:F4:1B:1F:45:C8:3C:3C:35:A8:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 51616F664FB13B3ED3814E3FB385349157B63082
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff2:8000::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:61:6f:66:4f:b1:3b:3e:d3:81:4e:3f:b3:85:34:91:57:b6:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=459058738a2d609ca6b6948b691a5f0579d1c9a7badfea5eb259764bdd3394a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:39:e8:8d:9f:3a:58:91:13:ff:f8:d8:42:
59:d8:3c:a7:b0:c8:c4:80:ac:c7:b3:3e:37:6f:31:
db:d4:81:07:a9:fe:7e:31:bb:e4:0a:1b:a4:cd:88:
9f:32:0f:3e:15:5b:14:88:16:2c:36:24:e5:3b:ad:
7c:6c:6f:df:71:d4:76:24:b2:23:7d:9a:1f:37:41:
cc:9f:87:35:1d:47:5b:c8:39:79:9d:0c:55:48:69:
8f:e0:a1:72:81:95:36:35:53:55:0e:80:df:1f:50:
1c:34:e2:43:73:53:7d:84:b5:3d:5b:5d:09:2e:21:
cf:af:38:08:67:e6:86:70:4f:7a:79:3e:63:3b:9b:
55:12:38:4e:10:05:06:1f:0b:8b:04:47:79:ff:e4:
67:69:38:51:b7:be:43:91:06:54:d0:b2:8d:5f:60:
8f:82:4d:4b:68:14:80:a8:22:dc:6e:6f:8e:52:ce:
dd:84:f2:5f:48:4c:ff:0c:2c:f8:9d:49:ba:3f:aa:
ac:31:bd:14:3e:42:66:50:7f:68:0b:af:c5:b4:68:
33:61:19:df:4b:e7:1a:d2:d8:af:5e:42:e6:11:6a:
e5:d7:6a:ae:d1:e8:87:75:f8:63:7a:7f:60:da:31:
c3:e1:5f:e7:db:22:f3:98:d1:07:36:47:2f:3c:7e:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:95:10:F3:D6:71:CE:04:A9:F4:1B:1F:45:C8:3C:3C:35:A8:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:8000::/39
Signature Algorithm: sha256WithRSAEncryption
3b:43:3d:1c:3f:52:0c:91:90:3c:db:3e:42:dd:63:d9:8c:29:
97:33:bb:ac:17:01:fd:d7:e9:62:77:c5:55:dc:7d:fe:db:56:
c0:e5:a3:df:6c:7c:65:1c:57:1f:0c:be:d2:1a:c6:fc:ea:37:
7c:c9:a6:27:0e:8c:fa:1b:e7:23:58:de:d4:45:7a:e2:ba:26:
37:92:78:52:9a:92:4a:1c:60:cc:89:e0:09:9c:0a:49:b5:5d:
a0:59:21:da:1d:57:fe:5a:cc:6f:80:13:cf:e4:44:a6:f8:a1:
0f:50:04:82:d9:e9:0f:d7:5e:8e:ff:ba:44:38:3a:5e:d7:2a:
10:18:88:e2:c3:b5:a2:bc:d8:50:fa:01:99:70:13:40:30:db:
f1:b6:36:fe:47:9f:0b:db:9f:b1:db:19:a7:1c:86:e6:92:49:
cd:36:80:c6:13:98:00:08:ac:7e:97:3c:3c:a2:d6:5e:d6:d3:
ce:8e:53:07:4e:0a:df:82:f4:8e:42:95:d0:01:ec:e3:c4:34:
6f:77:e1:8f:fb:8b:37:c2:ed:cc:ea:e0:7d:e5:0a:26:51:69:
8b:96:ef:23:98:31:98:e1:95:2f:e5:a4:1a:32:97:b4:5a:af:
c4:88:b5:7b:27:34:c9:ba:d1:b3:c7:af:53:04:a8:1a:87:28:
43:82:db:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:31 2025 by rpki-client