Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa
File: 8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa (raw, json)
Hash identifier: Xv14WCt+4FGbRdcVEmg5a2Fu8Ujv7kTwCjHolRd9MsU=
Subject key identifier: FE:C6:EF:26:23:25:8B:06:62:84:CB:89:30:F6:3C:29:3B:CB:2D:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48286068CAE05B1FDBA3EE955C23FA4BE0DE1931
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f38:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:28:60:68:ca:e0:5b:1f:db:a3:ee:95:5c:23:fa:4b:e0:de:19:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=828707e9b2b34db72ba6892adfc3038c24ccbf620e03569ee75a26bce9d64b94, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:e7:9b:f9:73:bd:94:0a:14:7f:bb:ed:48:
ee:52:22:0e:3e:4a:3f:87:38:3e:32:60:57:6a:45:
9a:7e:e9:bd:38:d1:52:49:f9:81:c7:cd:96:2e:7f:
97:2a:ee:aa:a1:8c:73:80:0b:5e:73:20:7c:e6:67:
53:2e:dc:e8:61:d1:4a:0c:5d:c9:85:5d:d7:81:0a:
18:7a:99:12:9f:0e:71:44:8c:1f:a6:4a:4b:97:9f:
10:5b:c5:3a:83:87:2d:09:ac:2e:7d:0e:0b:0a:e0:
31:3a:cf:c1:cd:63:ab:33:d9:83:8a:40:41:c4:c3:
4a:b7:f6:96:14:7e:35:5f:b7:81:25:b5:33:cd:f8:
8b:fd:50:a5:da:dd:62:4b:c1:76:9e:2d:46:3e:74:
82:24:e4:b6:2c:ed:c5:b7:39:0d:7c:29:bb:f2:16:
66:9c:96:46:d6:9a:d2:cb:67:cb:6c:f7:9c:a0:89:
16:b8:32:59:3b:92:73:db:5f:b7:40:5d:28:71:06:
cb:65:b9:42:02:b6:aa:73:0b:f3:fe:d7:03:43:ca:
32:a5:d0:30:d2:05:29:69:e7:a3:5f:9d:bd:ed:7a:
25:e8:f5:7e:60:16:2d:67:cc:e7:4b:dd:48:68:1f:
b1:ca:1a:97:3f:91:31:87:19:94:fa:9f:16:e8:6a:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:EF:26:23:25:8B:06:62:84:CB:89:30:F6:3C:29:3B:CB:2D:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:5000::/40
Signature Algorithm: sha256WithRSAEncryption
03:25:b9:9a:3c:70:34:10:f6:83:c3:f8:e6:09:fb:76:f4:34:
4f:46:50:b7:a8:97:12:ee:e3:8f:35:a4:ac:c4:67:d6:28:e8:
84:de:63:3f:f1:ca:cb:51:a9:4f:0b:61:04:32:5e:08:e5:8f:
04:35:fd:94:1e:f6:f5:42:d8:e6:7a:0d:99:dd:36:e6:8e:cc:
07:e4:9d:c0:20:2b:db:59:95:86:6e:ab:5d:c1:5f:9c:93:68:
64:49:0d:94:e0:d7:42:ab:8e:6b:19:84:95:ff:fe:32:0c:6c:
df:78:c9:b8:a3:00:4f:79:f5:39:5b:7e:91:0f:bc:d6:4c:15:
17:9e:73:f6:c5:1e:5c:fa:92:21:ad:e5:89:b7:10:64:e0:1d:
58:b2:0f:5c:8b:0b:fd:5e:2a:88:b4:b0:f1:45:1e:75:8d:56:
a0:51:8d:21:90:f0:99:90:cb:71:3b:fb:3c:d0:27:ef:58:79:
15:5d:60:10:25:d1:88:cc:6a:dd:74:26:17:c1:bc:02:c2:12:
fd:1c:70:14:99:8b:ec:52:65:93:34:82:07:8e:0b:a9:65:86:
fd:f8:e5:e5:81:de:c1:e8:c2:e3:f6:b7:dd:7e:e0:c8:36:8c:
04:a3:49:25:24:6c:96:1a:32:9b:10:e9:ce:8d:d2:82:ff:21:
44:fa:f8:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:29:09 2025 by rpki-client