Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa
File: 8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa (raw, json)
Hash identifier: h3vHAWHQZ3rq1IlLRlxikrLs9xt+jtH/5YvddsMkk9w=
Subject key identifier: 46:AA:AC:4F:8C:06:12:A9:76:03:43:E2:B5:2B:29:71:AE:7C:6A:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 469DCC1F565A8481614A7A84E6730104D5DB0E64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:4080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9d:cc:1f:56:5a:84:81:61:4a:7a:84:e6:73:01:04:d5:db:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=7df9d2c3f3f16ee646591c5236197a91141ffaf0cae62ae5fbdb5ab6e133623c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:e7:d8:dc:e7:88:7d:a8:b0:0f:74:5b:86:
4b:67:de:81:93:4e:c9:97:64:d8:d1:84:bf:34:cf:
17:2e:f2:e0:7c:32:2a:79:8c:9d:50:4e:7f:64:ad:
92:1b:71:80:53:28:80:9c:21:25:5e:92:8b:49:6e:
6e:43:16:ed:c0:e5:be:4c:86:68:26:72:d8:9f:ee:
13:fd:1e:5f:0b:cf:2a:a9:28:3c:da:4d:1f:54:b8:
85:50:fd:02:fa:ec:68:96:22:04:4c:db:54:1e:85:
88:d5:a6:91:cf:d7:31:93:ae:19:7d:78:33:27:04:
cb:6a:a4:ab:22:e3:16:c4:00:9a:dd:51:f7:44:0b:
bd:89:44:63:8d:22:07:23:e9:8a:a8:c3:74:44:16:
92:0a:7b:35:e2:75:9f:f4:f6:d4:92:fe:a4:78:f4:
27:1b:3b:d0:00:a9:6d:5d:0c:66:d9:89:16:05:4d:
5a:90:0f:d1:78:75:08:43:28:32:eb:0b:d8:1b:64:
ce:64:07:58:cf:53:8d:1c:5e:96:c4:49:8e:54:11:
b4:f9:2b:61:9e:21:a0:64:ea:40:42:74:ee:f2:dc:
22:cf:bf:71:77:b2:c6:62:71:46:26:6e:58:e9:d1:
ce:bf:f0:aa:1d:f2:d4:c6:91:69:a3:a9:fc:60:1e:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:AC:4F:8C:06:12:A9:76:03:43:E2:B5:2B:29:71:AE:7C:6A:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:4080::/46
Signature Algorithm: sha256WithRSAEncryption
76:55:82:e8:09:33:6e:1d:cc:b4:f0:00:fc:d7:7d:53:71:65:
1c:5b:75:fd:f8:a1:f4:29:6b:a4:ba:05:a4:89:95:ee:38:c3:
6e:b7:06:75:0b:dd:88:39:3a:ab:f7:e4:52:09:23:a3:ff:ba:
9a:b6:b4:b0:06:9f:cc:2a:3e:36:5e:e1:54:1d:b1:ce:aa:2a:
ee:6d:c9:cb:2c:60:5d:22:29:b9:79:0f:5d:27:cb:35:1a:d0:
95:ba:23:16:f0:94:05:64:95:ec:83:17:43:a0:e8:ec:e3:ef:
6f:cb:2f:6c:1c:b7:6e:3d:96:79:e2:f2:e5:54:bc:be:38:fd:
6d:89:fe:7f:97:30:54:aa:96:b1:c0:5a:9a:fc:96:bf:30:74:
c0:15:87:21:2b:a6:22:d8:c9:5d:5a:a9:6b:86:76:13:b3:cd:
ec:e4:84:9f:49:51:ee:98:3e:d0:d8:08:c5:e9:50:5b:34:3a:
27:5d:30:a5:c5:e2:62:34:29:c4:77:9d:be:77:d8:8c:6b:b3:
f8:88:20:47:fc:8e:11:e5:d3:28:37:75:90:03:0b:27:dd:7b:
4a:e3:d7:ff:fe:ca:a4:47:b1:18:8b:df:84:fe:d1:4a:cc:3f:
68:37:ce:24:8e:f8:59:27:b2:b0:11:97:4d:59:bb:2c:74:d4:
cf:a3:b2:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:40 2025 by rpki-client