Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa
File: 935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa (raw, json)
Hash identifier: MgUZakmZgKInJGOsgfnAd283m/0m09xHXnD/Hau/D3I=
Subject key identifier: 16:E7:49:AC:0A:39:11:FD:61:EA:78:C6:FF:B0:25:6B:86:39:08:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 610AC92508D2ABAA91A02948F7569F82F259D9D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1b:4800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0a:c9:25:08:d2:ab:aa:91:a0:29:48:f7:56:9f:82:f2:59:d9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d88a7503ca1c8d5155da5c9920760c52b8d386a364f65cb518cc41177266c564, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:7f:c1:f1:a6:e7:02:5f:b1:cc:bf:a6:ed:
1c:ab:66:f7:38:cf:7f:91:43:d3:2d:0e:52:cf:8b:
f4:f6:1c:c2:d0:9b:6d:29:15:53:46:6f:af:2d:fc:
52:a4:5e:f9:d3:76:61:2c:95:64:97:d6:dd:95:41:
aa:9b:12:dd:ee:1c:57:e2:06:32:cf:ba:70:17:b9:
4b:87:b0:4a:eb:ce:d3:86:17:f5:00:c1:83:db:8f:
b4:23:12:12:1e:cc:8e:b4:71:da:fd:8a:cd:7d:46:
39:01:c8:47:11:41:25:5c:d7:15:12:25:f3:b4:5e:
7e:ce:ba:84:5b:63:a9:27:b8:f6:1f:bf:27:a0:0c:
23:d1:5b:0e:c4:00:da:9f:67:34:74:04:06:37:e5:
fd:b6:f3:cf:8d:e1:2d:a6:3d:8e:e4:4e:f5:35:b1:
60:c8:2b:02:9e:0b:37:36:0c:30:c1:bb:07:6e:db:
35:fd:4a:15:c7:1e:62:a1:2c:1c:53:14:69:35:db:
62:08:c3:9c:d3:e0:f9:5a:cd:27:79:52:c3:52:8e:
0c:69:bc:c5:af:37:71:14:bd:fc:17:38:39:1f:19:
fe:7c:37:07:98:e2:f1:a0:02:62:59:94:6b:a8:5a:
9e:3f:25:47:f9:cc:1c:63:38:d0:00:3f:38:b1:d7:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:49:AC:0A:39:11:FD:61:EA:78:C6:FF:B0:25:6B:86:39:08:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1b:4800::/37
Signature Algorithm: sha256WithRSAEncryption
c3:5a:42:5f:88:d0:93:03:02:5c:d4:77:82:67:b8:4e:f1:c9:
08:a9:ba:cc:12:bc:ae:df:c8:fa:d3:3e:03:29:b5:c8:6d:c1:
86:ef:59:5e:2d:43:ea:13:bc:27:41:86:74:01:1c:b5:63:47:
b5:b0:69:aa:26:9b:79:1b:7b:29:32:18:dd:9b:e5:4c:fb:99:
a4:e4:3d:b3:da:e0:ae:15:b1:70:37:5f:94:c2:ab:55:12:0a:
64:c7:e6:e7:e2:6a:dd:42:9a:68:6f:95:5f:42:57:4a:17:bd:
13:be:36:cb:97:33:65:15:3b:54:6b:57:bb:b1:5b:2f:fa:8c:
03:2e:f6:54:62:80:a2:35:f5:7f:ca:c0:d1:54:22:27:d1:22:
f0:1a:f9:4c:04:e2:70:f5:b6:5c:03:be:2e:b0:d3:13:b5:07:
bd:41:9b:08:d5:af:65:ac:10:b7:32:71:72:b1:92:26:20:38:
60:01:26:c1:bc:4c:06:3c:91:b8:1c:df:98:dc:33:14:36:21:
2f:18:b8:a7:75:9f:3d:52:b2:aa:9c:52:2c:3f:da:f4:84:d8:
99:bb:48:68:1a:ab:82:d2:da:2d:87:99:83:20:e7:92:d7:ca:
53:89:c6:70:70:bb:35:f1:9c:b1:cd:04:f4:b0:2f:a4:1a:a9:
8b:cc:87:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:32 2025 by rpki-client