Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
File: 991e350c-1b09-4392-a15e-8cc8924ef0f5.roa (raw, json)
Hash identifier: d678t2qLeNindoi/d/uLkViLASyS8UZP516pl55+UR4=
Subject key identifier: 91:2A:3A:8A:ED:76:DA:98:E1:2B:1B:C8:9C:75:68:08:44:41:0C:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C968B8CE44993F5BE8F38AE0E352664108423F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:8180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:96:8b:8c:e4:49:93:f5:be:8f:38:ae:0e:35:26:64:10:84:23:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=92587045b26d730c5193361f908e09d1e1a924bdaa2645e31763a6c1fe365086, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:b7:45:6c:6e:8a:4a:ba:19:c9:97:82:af:
e7:c0:dc:e2:8a:56:fc:3e:12:42:85:be:f8:92:38:
e3:bb:33:96:fb:fb:0d:89:3d:fe:46:cb:7e:e2:10:
46:18:59:82:d9:8e:53:88:05:83:30:a3:aa:05:53:
55:f9:a4:86:d4:87:3a:0d:f0:ae:71:3c:23:fd:92:
11:3f:65:d0:22:cb:e3:4d:73:e7:2b:f6:3c:00:d8:
5e:a1:df:c8:c4:4c:eb:3f:53:9b:cf:be:c6:ac:e0:
46:9c:20:e3:99:cf:df:9a:a6:30:41:bd:e9:cd:6e:
2e:e5:1b:dc:98:0e:9f:ae:0c:67:61:e2:fc:6e:5c:
ca:02:27:f4:dc:3e:e9:57:2f:9c:9e:13:85:15:a2:
02:d7:e8:74:2f:a1:da:bf:11:8c:7d:12:8b:70:64:
2e:52:5f:c3:9e:d6:1b:a0:72:21:8c:a8:8e:6c:13:
d9:04:f2:12:a7:79:35:c7:8d:cb:f5:65:8c:96:0d:
ed:00:7c:30:f9:30:fb:38:83:e8:b3:05:59:86:5b:
97:96:dd:8c:41:bb:57:f5:4e:85:09:49:d3:0a:6e:
3c:99:f6:83:de:a7:d0:2c:8e:52:36:2c:48:fa:47:
be:c2:79:12:72:00:1b:90:32:e2:ac:11:1c:fb:3b:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:3A:8A:ED:76:DA:98:E1:2B:1B:C8:9C:75:68:08:44:41:0C:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8180::/48
Signature Algorithm: sha256WithRSAEncryption
65:5a:6b:b6:60:2f:12:96:68:90:7d:81:40:df:df:8d:1b:4b:
27:05:26:53:6f:12:8a:56:ba:c6:95:6e:b4:44:7b:53:11:d5:
73:15:7c:28:bb:bd:fa:70:b1:be:6d:d0:c3:bd:89:32:50:b1:
c6:f0:e7:fc:5d:0b:82:46:1e:bf:17:3f:a1:99:24:94:ea:d4:
ef:5d:be:b5:ca:53:af:b9:d3:c8:cb:b8:c1:82:b6:6d:f6:a1:
5a:42:78:33:d2:af:bb:c8:d6:45:de:02:76:9f:5d:fb:59:87:
2b:9f:2e:cc:8a:e2:7a:de:85:05:84:37:50:1b:04:62:e6:a9:
37:45:2b:23:69:f3:a0:be:37:d7:79:96:c7:bd:12:e6:fd:84:
50:82:0d:46:dd:48:af:81:a7:fd:f2:25:fe:be:73:2c:af:3c:
1e:e7:72:20:26:29:62:b7:29:05:a0:6c:97:0b:27:83:91:63:
bf:40:af:f2:b2:a0:0e:9d:0c:43:61:2a:6a:c2:90:27:0b:23:
87:14:89:f6:4a:c4:dc:0b:7b:35:b7:6c:e3:65:7a:63:02:8b:
aa:6a:77:c6:f3:66:5b:5f:53:e9:b1:de:ba:7c:74:99:1f:d9:
ff:1e:8b:f4:5f:32:e0:37:f6:ba:dd:88:9d:85:af:c4:d2:4b:
0a:4e:b2:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:48 2025 by rpki-client