Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa
File: a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa (raw, json)
Hash identifier: Rhk0Xpjq2Iy+/Fd+TKZaq6NoBezNucxxocuQozWXfNU=
Subject key identifier: 82:46:2F:F9:98:EC:1E:58:18:44:40:2B:54:6D:C8:D8:17:CA:E7:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2402462B4F552CBC3539EDA9F1CFBE0153E0160C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f00:81c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:02:46:2b:4f:55:2c:bc:35:39:ed:a9:f1:cf:be:01:53:e0:16:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=30385ed34d1f61d4c3ec67c92950e6783afa4437bd3c65f879777fd427353570, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:90:71:f0:ed:64:19:98:8a:ae:87:25:d4:
a1:a7:8d:ca:ed:d2:a3:55:f3:75:ed:1b:9f:fa:b1:
91:39:23:9f:b0:e1:62:29:0f:0a:10:77:d9:a8:95:
b5:62:87:6a:e5:00:b6:e5:ad:56:61:09:6e:3a:62:
a7:64:32:5b:3b:4c:d5:d9:49:56:ef:88:22:20:14:
8e:48:4a:43:86:ed:9f:a7:53:2a:9c:31:2e:96:be:
ac:08:63:36:c2:7e:10:66:e5:35:b2:7f:57:d2:46:
7e:83:94:a9:1e:21:5a:9e:7e:4f:2b:19:03:0e:0d:
82:d3:ba:8f:31:cf:75:55:9c:07:a9:0c:18:fe:9d:
4b:6d:ff:9c:15:57:65:28:73:c7:b5:02:78:59:75:
b0:7c:10:6b:ed:20:95:7b:36:1b:19:28:90:9f:a8:
48:88:fb:22:3f:aa:15:9b:23:be:30:3c:b1:bd:92:
d9:68:86:f2:db:2b:18:64:b6:1e:8e:e8:40:47:55:
11:68:a8:a2:02:3a:ef:e3:e0:ba:a5:51:b3:2f:d3:
4e:1c:78:fe:58:d5:6c:15:1b:7c:8f:a3:ab:05:f8:
8d:58:7f:6e:14:e9:28:cf:5f:10:0e:37:34:30:24:
89:a2:0e:68:42:f6:8b:e3:24:d2:42:75:e5:8e:f1:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:2F:F9:98:EC:1E:58:18:44:40:2B:54:6D:C8:D8:17:CA:E7:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:88:1c:96:bf:69:41:ec:6a:65:e9:05:09:90:27:5f:e9:91:
a2:10:20:87:d6:21:76:ea:5d:39:86:98:1d:77:5d:32:62:2d:
68:73:1e:6c:11:86:67:d4:c2:84:4b:34:19:4c:87:e8:78:c3:
2f:4e:59:08:69:6c:66:cb:12:08:81:3f:d2:a1:f3:dc:07:8a:
bd:e9:ab:9c:54:f5:97:0d:0b:c0:e2:03:45:91:2d:b6:53:03:
51:db:67:2e:5e:f1:38:29:d9:9b:19:cd:65:51:b3:7c:92:77:
a5:26:17:2d:b9:77:28:2f:7a:f3:d0:73:c9:06:ce:0b:3d:20:
33:3e:64:f2:9a:ed:e0:fa:ee:e1:b2:04:a7:da:75:e3:e0:7c:
45:12:35:6c:82:e9:69:17:c9:eb:0c:e6:57:fd:76:9a:bb:35:
f9:4c:3f:d4:2e:75:a9:1e:9e:67:61:f1:46:55:c5:15:fe:5f:
e1:b0:89:4a:e8:7f:f8:10:8e:1f:c0:86:35:cd:84:a8:d7:60:
3d:ca:a5:3e:7c:9a:26:84:6b:a5:9d:f8:11:bd:61:cf:cb:90:
3a:48:ff:07:1e:a4:d0:96:8c:c9:dc:11:31:6d:80:69:5d:31:
6b:40:43:d8:f9:b6:d1:09:40:7a:d7:b1:f7:28:ed:d1:eb:53:
05:b5:52:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:32 2025 by rpki-client