Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa
File: a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa (raw, json)
Hash identifier: /crAMvIzJk4OrUBwHDhXk9Q3kYlOvBAKm4ZNfC3AYKI=
Subject key identifier: 96:87:BA:DB:81:A7:47:6C:D0:66:C8:85:C6:A1:0C:3B:64:D7:D5:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 362B1F49642939F91425D2927044EFBBD7727756
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f38:8040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2b:1f:49:64:29:39:f9:14:25:d2:92:70:44:ef:bb:d7:72:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=8bc91abb259774fc09d8ec45a9c545d1d86ecdb0288be7a4655602a84d3c6248, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:c1:73:bf:70:9c:05:1a:50:d5:b4:bc:8e:
4a:60:51:6a:20:7e:75:a0:49:f5:26:56:d9:77:02:
4a:27:47:da:e2:2a:a2:7d:b6:20:8e:32:f4:8b:12:
b8:0d:ec:98:ef:b1:06:03:75:4b:13:98:ab:e9:9f:
d7:50:21:45:72:01:0c:c8:fc:14:af:9f:06:62:8b:
a3:56:25:b4:5e:d2:47:a6:74:16:e7:8c:13:4c:8b:
ae:35:cd:a3:e1:97:8d:fe:e6:bd:40:8c:af:d2:37:
ed:6e:31:12:4c:e5:e1:de:87:c5:80:74:f6:b3:9d:
b7:cf:d3:83:63:1f:ad:26:26:cb:8f:21:98:13:20:
72:5e:66:3c:a2:1d:06:32:8c:3d:fe:20:00:e9:86:
a5:71:c0:60:46:53:4d:e2:6a:60:b7:82:a8:bc:2c:
76:cb:3b:79:05:8f:71:96:4e:a1:c5:ab:b1:3b:bf:
7d:5d:06:9d:67:55:2f:b7:52:8a:70:5a:35:2b:29:
ce:c9:1a:bc:cd:0d:ce:15:5b:58:64:81:85:c4:d7:
45:90:c5:17:0a:5d:a5:59:5b:94:f2:da:d0:f6:73:
dd:68:d6:5b:a6:af:dc:95:dc:7e:e0:a0:88:be:96:
b0:34:27:40:54:ef:cf:02:e3:a6:6b:de:f9:d9:32:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:BA:DB:81:A7:47:6C:D0:66:C8:85:C6:A1:0C:3B:64:D7:D5:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:8040::/48
Signature Algorithm: sha256WithRSAEncryption
79:78:7e:42:cf:ea:1c:ec:f0:04:84:b7:1a:4d:ab:d2:92:f6:
5d:7f:7e:0c:f9:7c:b3:ea:dd:91:2c:65:0f:9b:f3:0e:5d:e6:
90:bd:b2:0a:fa:c1:c9:16:40:34:e6:57:a9:35:17:e2:86:dc:
9f:2b:cf:5c:48:5c:dd:db:72:fc:39:55:13:f3:63:8d:6d:35:
41:a3:77:68:2d:46:76:ec:1d:1c:05:89:27:e1:84:02:4b:8a:
fe:6c:a3:82:1e:cb:a2:44:1b:60:90:1e:87:d0:4f:d5:d1:87:
66:48:99:00:f4:83:3c:30:9b:9f:83:f4:c1:6a:52:d3:81:bf:
fa:ce:4e:cb:01:df:65:e7:3d:f9:0a:97:ce:5f:e1:37:18:5d:
ff:55:5c:91:f6:e3:e3:f3:90:1a:ec:61:0a:ea:df:8f:da:ce:
c5:d9:20:52:8e:3d:04:9d:88:85:fd:37:a1:ac:e4:4b:86:b3:
80:de:82:73:62:80:dc:3b:af:55:63:30:26:c1:19:dc:19:e6:
b9:8f:f9:d4:09:f4:64:9a:0a:66:f0:e7:c9:7f:c8:9b:0e:38:
65:05:77:70:e7:5c:6a:94:da:4a:71:5a:1d:85:16:ef:2e:2b:
2b:16:27:72:0c:e3:ef:64:bc:ea:a2:4e:47:08:72:d1:46:ec:
f0:b9:4b:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:07 2025 by rpki-client