Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a13bd1b-83be-4772-b2ef-75052230daca.roa
File: 8a13bd1b-83be-4772-b2ef-75052230daca.roa (raw, json)
Hash identifier: CjsclMAIcF3UxXmxoSMJzJWq0XR/NifbDhjGXCXRARM=
Subject key identifier: 6A:B7:39:3D:BB:E9:65:5E:A4:13:71:8F:72:C5:5D:F1:02:E8:93:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71A9CBCAA8FBC40C65239D8A3FD5A7C2C44F12A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a13bd1b-83be-4772-b2ef-75052230daca.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1c:c000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a9:cb:ca:a8:fb:c4:0c:65:23:9d:8a:3f:d5:a7:c2:c4:4f:12:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d3ea60cfff3d364c551c7bc1dbc20bfffd9fd0532821d3755c5eb818872c0372, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:3c:9a:f6:e3:7b:2e:20:29:a9:f0:9f:36:
dc:08:8e:d5:5f:63:cd:77:82:2d:1a:65:9c:62:c7:
e1:71:6f:ed:c7:2c:05:63:e9:87:03:5b:69:c4:2a:
42:5e:9e:ed:c5:4a:8a:9c:20:c0:20:ab:5e:7f:84:
a2:87:e3:0e:f7:84:d3:36:ec:fd:69:c9:9c:af:03:
57:f6:6b:70:81:b7:90:4f:c1:3c:a0:c9:45:16:46:
a8:c5:27:be:e9:f0:f0:b6:92:05:86:62:29:de:62:
c9:8e:ac:8c:0d:3c:6d:3e:b0:9d:d8:17:07:4b:de:
4e:f5:a8:79:69:4f:df:4d:ce:66:d3:7b:4e:96:d3:
39:44:52:99:b8:7f:4c:d9:e9:09:be:b6:6f:b2:89:
6a:01:8b:47:0e:f4:da:c9:83:32:eb:3d:0d:85:36:
a7:73:bf:f4:a6:30:3c:92:68:3e:3c:a2:3d:f7:bb:
6a:d9:5a:bf:96:a9:d7:7f:ed:c7:04:99:19:52:2c:
38:52:17:09:bb:1a:d5:58:c4:a7:7f:50:93:e3:00:
09:da:16:ff:b4:eb:15:21:e5:cd:2d:ff:f9:7a:28:
fb:20:50:e6:aa:ae:14:1f:00:ce:a6:0c:c8:53:9b:
6d:fe:43:0d:22:d1:18:be:b7:a6:3d:ad:26:88:50:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:39:3D:BB:E9:65:5E:A4:13:71:8F:72:C5:5D:F1:02:E8:93:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a13bd1b-83be-4772-b2ef-75052230daca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1c:c000::/37
Signature Algorithm: sha256WithRSAEncryption
c3:6e:2c:86:0e:84:04:aa:02:ec:d1:56:76:cc:e2:c1:2d:8a:
8e:92:7b:52:f3:75:05:f2:ee:f6:f6:55:75:fc:7d:b9:27:c4:
8c:84:b6:63:d8:8e:2c:fa:47:33:84:73:4a:6f:6a:80:eb:50:
ee:0f:1c:ca:23:4c:fb:7f:2c:48:c0:33:f4:27:cd:55:66:cd:
09:d3:d6:4a:00:16:50:fd:76:30:91:f5:55:83:a9:2e:64:b0:
b6:f0:54:da:b1:13:e7:b8:37:1d:a6:2c:8a:d1:12:f8:4e:d1:
6c:79:74:94:f3:3f:bb:04:00:18:3b:88:d7:3f:b3:8e:06:a4:
b1:08:d8:b9:fe:af:1d:c1:7a:93:c4:cf:42:94:06:ae:ed:1d:
c9:d1:12:0b:ef:33:0b:58:11:8d:68:b4:d5:aa:89:07:18:60:
6b:2e:ba:04:b4:ba:a4:e8:95:ca:70:2a:26:63:b6:26:0f:b1:
f8:ee:6a:1b:a3:15:f4:4e:e9:1a:0a:9e:d6:dd:35:28:fb:ba:
8b:be:f1:9c:66:5a:56:87:85:d4:78:c9:de:1d:80:0f:55:b5:
87:62:53:dd:e3:8e:5a:ad:a5:53:dd:a3:c8:bd:92:8d:35:1c:
c0:b9:78:0a:91:d9:76:5b:66:e4:12:8a:c6:01:67:3e:be:9f:
a9:a0:1e:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:48 2025 by rpki-client