Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
File: 8c09eb33-9642-4506-acdc-cda09a75dedd.roa (raw, json)
Hash identifier: ez0pZLDoFFd2B7tpbEK67nc+2G+uk2g7IhtpdmZW1Qw=
Subject key identifier: 76:B7:4C:9E:5E:9D:70:FF:36:A9:E6:FD:19:1A:79:2E:52:5E:04:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10437CB57767FFB5AA8E137D8EF0A9CA3911984A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:43:7c:b5:77:67:ff:b5:aa:8e:13:7d:8e:f0:a9:ca:39:11:98:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=96fb23f46c81a2db0e86ef53dea1f33f1aa2c910d7838c816846035470cd75a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:80:d0:be:cf:0b:46:f5:18:58:d3:e9:79:
cd:e0:42:3a:bd:41:39:86:3c:35:64:4d:55:59:57:
76:97:d3:18:bf:76:b9:23:e7:b3:0c:61:82:31:83:
0c:21:f5:51:aa:d0:ee:94:0b:42:10:2b:f1:a5:51:
f1:83:f8:78:b6:6c:5a:9d:34:bf:12:6b:e2:d8:28:
01:e4:c6:58:ee:b4:75:d8:89:05:fe:62:43:c7:77:
ba:77:7c:3f:1d:0b:8b:ef:da:6d:1b:5f:12:ef:f2:
ed:a9:c5:9c:95:7c:26:2c:ce:fb:3c:75:81:d5:c7:
a8:93:b8:0b:39:10:de:36:52:d9:3b:6e:98:08:b2:
81:50:34:52:6b:cf:d1:87:3d:c3:be:45:94:42:78:
b2:25:71:ed:5d:d9:97:9b:b6:da:cd:f5:76:6a:d3:
7c:6b:17:42:b4:e5:d1:2a:27:54:bb:aa:49:4a:d4:
19:39:5c:33:31:26:05:bf:49:f9:68:67:be:d8:dd:
78:7c:12:3a:8c:59:bd:cd:13:4f:a6:0a:3c:66:33:
f6:0c:9b:65:20:e4:fd:73:30:95:40:bb:b8:ad:bf:
4d:ff:59:a5:68:6b:0a:55:63:74:3b:1c:fd:1a:e0:
30:db:e9:f9:a3:58:75:2e:6f:0a:eb:d0:cd:73:1f:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:4C:9E:5E:9D:70:FF:36:A9:E6:FD:19:1A:79:2E:52:5E:04:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:1000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:24:bf:79:2d:29:5b:59:c6:a1:94:3d:c8:a7:90:0d:e5:77:
1f:ec:c9:1c:2f:04:b3:f4:7c:ed:e9:55:32:cc:fc:36:3f:95:
7d:26:d0:90:c7:4e:a2:f5:df:43:d9:70:47:fc:9f:e2:1d:12:
9d:85:8a:e0:3a:d6:66:ba:9f:7a:a0:a8:24:2d:11:b5:57:51:
b5:67:13:ed:be:5d:29:b3:fb:2d:6e:93:5c:f9:ef:9b:5f:2d:
46:f3:89:ad:d3:b9:d7:40:a6:2c:bc:22:4d:56:ff:3e:c4:a3:
03:99:b4:8d:e8:d8:17:07:67:54:fc:bc:e6:f9:79:52:ef:94:
47:9f:29:c4:a4:e2:fe:01:0b:fc:39:0c:b5:57:2a:0e:c1:89:
64:33:ca:3c:d6:b2:f2:a5:2f:94:87:d0:83:d2:e3:fd:bb:e9:
a1:23:47:f4:d9:44:6f:7c:ad:c0:c5:fb:de:8b:c9:39:c4:eb:
e8:fd:5d:a4:bd:a8:9d:68:30:6a:c7:83:d3:6d:ee:9b:17:29:
f5:35:49:0d:3e:3b:c2:a3:33:a1:c7:b3:10:db:36:74:60:73:
39:88:51:06:de:65:73:94:7d:a3:fc:b8:2b:63:7a:08:79:2a:
10:75:f4:cd:dd:bc:ca:ab:8d:67:b7:c3:73:dc:7b:2d:96:9e:
97:66:5b:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:56 2025 by rpki-client