Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a380fcf7-4079-45c7-bf75-b252596eb961.roa
File: a380fcf7-4079-45c7-bf75-b252596eb961.roa (raw, json)
Hash identifier: mtjICnaheIv22/ocSXVRXunIOspf7PkascHxDRxyxPk=
Subject key identifier: 12:0D:67:1D:B4:AD:4F:95:FA:70:F8:C2:7E:7A:33:D5:AE:32:D8:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AFB9CB05F94C6223F7B847A43FF2D842CA1C73E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a380fcf7-4079-45c7-bf75-b252596eb961.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f69:50c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fb:9c:b0:5f:94:c6:22:3f:7b:84:7a:43:ff:2d:84:2c:a1:c7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=bb219369194dc668fc48f8b62523c2aa458be0b5e79face48f8e539b7e181968, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:97:55:8f:df:1a:15:3f:0f:ef:78:df:f1:
c6:4c:4d:ef:90:08:9e:2c:ab:fb:ae:43:cb:dc:23:
ab:b6:c2:51:66:ef:51:b9:5d:b8:86:47:d0:49:e4:
14:6a:36:b6:f0:20:ca:a6:b3:dd:2e:74:0e:9c:19:
18:6f:c6:c1:62:11:94:d4:6b:e6:f8:94:8f:c5:32:
11:7f:20:3b:80:27:eb:71:73:d6:c8:89:58:41:86:
3b:2d:36:f0:08:b1:6d:09:6b:64:85:63:07:ca:f8:
5d:09:7b:16:0e:f1:ba:e5:19:58:23:b9:2b:a6:05:
ba:cd:24:00:01:96:65:7a:c4:58:6f:a1:05:7b:b4:
47:c1:8e:55:87:8b:e9:58:3f:94:44:cf:a7:cb:38:
b8:aa:e2:51:a1:e5:1d:90:cb:93:8e:e9:ff:40:e2:
63:14:0f:9a:8a:04:ad:59:2e:93:15:60:62:8e:6b:
13:b3:5c:bd:e2:c0:5f:c9:54:f6:25:4f:c5:d9:6d:
18:56:cd:71:7d:85:05:5f:32:00:e4:43:90:c8:28:
28:b1:a8:73:38:8d:f6:6d:3d:23:41:3d:2d:27:57:
5a:e4:41:10:08:2c:9e:dc:a3:35:76:46:75:09:ab:
b6:34:25:af:c0:91:e3:76:a1:9a:6a:18:30:df:5d:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0D:67:1D:B4:AD:4F:95:FA:70:F8:C2:7E:7A:33:D5:AE:32:D8:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a380fcf7-4079-45c7-bf75-b252596eb961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:50c0::/46
Signature Algorithm: sha256WithRSAEncryption
9d:08:77:c5:75:01:7a:6d:8c:67:58:e4:ee:21:46:78:df:e3:
3a:fc:42:a8:58:a8:5b:a1:db:f3:56:92:d9:d1:df:5c:46:b5:
78:d7:b8:12:e6:28:9d:51:b8:72:85:a7:3f:2d:2f:0e:c4:91:
52:50:4f:53:6b:20:bf:85:5c:76:f8:08:79:4b:3e:1b:c0:4e:
89:4d:ab:96:63:c3:0a:75:7b:5a:67:33:23:50:0f:f9:11:0c:
41:8e:3b:d8:1e:b1:14:3e:97:11:4e:50:f4:04:7f:fd:8b:b0:
84:4c:06:81:99:eb:f8:ac:37:1b:d2:02:ba:67:90:71:88:d8:
e9:1b:9d:1b:6e:fa:eb:93:97:ef:09:27:79:b7:2c:a8:f7:c0:
40:38:c0:6e:00:f4:9d:8a:ab:22:cf:db:df:d9:f3:47:d7:9d:
39:df:7c:ac:17:6b:ba:bc:87:c2:03:33:a5:a7:2b:07:15:1d:
fb:f2:da:d6:65:f3:47:55:2d:4b:0f:7a:48:ad:d5:14:c4:54:
32:48:be:90:d0:73:88:87:fb:7d:7a:73:b5:ea:db:7b:b2:0c:
79:a2:b8:96:62:f3:8b:1e:8c:00:86:fe:f9:42:f0:6d:bf:36:
32:09:30:3c:d3:d2:8d:91:e9:20:72:95:03:d4:f7:79:91:e4:
15:60:d7:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:28:54 2025 by rpki-client