Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa
File: 98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa (raw, json)
Hash identifier: +v80yaPop4kr5d8bLf/+ACGK7fUbgsM8zaUq7eI0aY0=
Subject key identifier: 46:0B:04:6E:A0:4E:AC:CD:49:8F:4B:1A:5D:3C:9D:92:D3:93:FA:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B494EA57DEF7F3658B10466660DEDC97DC33CB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:49:4e:a5:7d:ef:7f:36:58:b1:04:66:66:0d:ed:c9:7d:c3:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2d89596f4995e4ed788d6f54c5605ed5f012c98311324ff23b59c3d2985bd4c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:d5:e1:fa:79:db:47:f5:d0:ff:60:fe:8e:
c5:ce:01:24:73:c0:03:ff:29:f8:92:81:ef:4f:c9:
23:57:7d:35:fe:e7:3a:97:3d:62:b4:dd:0b:59:1b:
12:63:9f:dc:4a:04:24:69:cb:80:34:58:db:93:40:
bb:83:53:06:f4:80:6b:b8:f6:5e:c9:f7:a6:33:87:
6e:43:65:f3:4f:a0:d7:52:38:c2:54:77:fb:2e:96:
84:d4:94:8b:b3:5e:a7:15:26:24:12:e9:8c:6c:d3:
0e:13:28:8f:8a:94:bf:b8:2a:35:7b:de:8c:7f:02:
0b:60:68:51:de:5e:69:90:8a:dd:c7:83:a7:90:fd:
86:f6:42:5f:04:7b:16:11:75:46:80:2b:04:ca:3f:
50:ce:e0:15:41:26:8c:d7:3f:d0:b0:23:e8:ff:fe:
a6:2e:1c:06:83:b6:96:f8:fe:a8:a9:71:43:94:13:
fe:90:8a:fb:d3:9a:52:9a:ad:2d:a7:d3:37:37:ed:
60:9b:93:69:25:7a:e9:92:74:e4:17:ff:da:71:88:
dd:fa:d7:06:69:dd:d3:2d:93:03:40:50:5f:8c:d7:
9a:d2:35:79:84:14:34:94:ca:7c:84:22:3d:51:31:
b4:5e:b0:09:75:42:c1:5f:75:c6:18:a8:e7:59:e8:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:04:6E:A0:4E:AC:CD:49:8F:4B:1A:5D:3C:9D:92:D3:93:FA:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:5000::/40
Signature Algorithm: sha256WithRSAEncryption
64:5e:a2:c9:42:d9:ec:5f:63:76:4a:f4:6b:a8:8a:8e:a3:ad:
fe:a8:60:ce:dc:a4:1a:75:a5:bb:91:aa:c8:3c:76:9d:04:21:
87:e4:2f:37:eb:c5:2f:6b:3c:ee:d5:c8:e4:5b:35:4d:79:56:
5d:07:c5:f2:76:ce:11:9e:ca:66:09:2b:ed:2c:49:ff:fb:c3:
fd:9b:77:34:03:c1:ac:bb:34:38:60:d0:c0:e2:89:cb:61:53:
3c:76:9c:42:3b:60:a7:e0:0c:34:41:8a:3a:ba:b4:2d:40:ba:
5a:cb:d2:d8:a8:66:9a:96:57:c2:91:64:8f:99:a1:b7:7a:95:
9e:2f:75:97:16:d5:af:57:87:9b:82:26:91:6d:55:7e:0e:49:
f7:8b:7e:6e:0f:95:84:93:a5:97:cd:83:27:c6:3b:78:ab:83:
25:f6:dd:1f:fa:73:7d:2b:a9:12:d4:16:0d:b8:2d:86:93:fb:
91:86:d3:68:65:92:f3:0a:27:bf:01:59:1d:e2:1d:5d:8c:40:
01:4c:72:a2:f4:13:74:4b:f1:5b:d0:ef:9b:3d:54:ce:3c:b6:
5b:5c:9c:29:88:27:f4:d5:47:d0:d1:43:b2:15:c7:7f:c0:8f:
c7:86:4e:04:59:90:8f:ef:c2:52:90:55:01:d2:3b:fe:b0:93:
7b:ca:6e:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:42 2025 by rpki-client