Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa3cdfc4-0f76-4235-bb2f-979f9ae5c89c.roa
File: aa3cdfc4-0f76-4235-bb2f-979f9ae5c89c.roa (raw, json)
Hash identifier: ewPnwR8+smam9woR0E3F2GIq/RLSfLOCZOZw+LdeoaA=
Subject key identifier: 79:D0:D3:64:A7:49:2A:D8:54:07:1F:FC:51:D5:F1:2C:20:E9:10:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48D07137E034C65DC103E580118E8646048E61FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa3cdfc4-0f76-4235-bb2f-979f9ae5c89c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f18::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d0:71:37:e0:34:c6:5d:c1:03:e5:80:11:8e:86:46:04:8e:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ddd62abb711cea25df4fd857dab7b0d611a54f7c645fcf17bbe611fe218b7bc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:c5:0a:35:bf:e8:cf:54:51:16:9b:3d:33:
e8:fb:da:b6:26:e9:a0:6c:8a:13:01:fa:5c:e0:48:
34:97:e2:2e:89:dc:a5:75:6e:bc:10:ac:e5:b7:a7:
47:88:dc:67:99:f8:06:3c:77:d5:0f:75:82:ad:0e:
04:27:0d:94:6e:32:80:df:81:35:f2:65:4a:ab:8c:
e8:b5:bf:95:c6:bc:2f:36:e8:f9:8e:d4:5e:e7:d4:
7a:6c:a2:cd:fd:5b:38:f5:36:70:bc:a3:44:cb:32:
cf:5d:4b:93:a5:77:e2:f5:ed:81:53:1a:84:8e:25:
f4:45:a8:36:5b:93:02:bd:e8:52:de:4a:a9:1c:76:
6e:86:50:af:d0:8e:a8:b1:f1:1c:70:08:ef:e1:bb:
3b:c2:90:69:6a:e7:68:26:eb:47:07:64:50:57:7a:
2c:0a:01:76:d9:5d:1f:33:2e:87:27:42:fd:2b:ee:
5e:91:29:d0:46:d2:de:46:34:28:ff:bf:ad:64:11:
84:e3:26:0d:40:a6:25:0c:d2:81:7a:24:0e:04:2b:
5c:8f:93:07:29:e0:34:eb:af:a7:66:25:67:93:8d:
b7:22:4f:82:37:c3:59:b9:36:2f:cb:83:e3:77:70:
08:c1:2c:1a:b9:18:8c:be:2b:2f:c3:bf:5b:cd:d8:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:D3:64:A7:49:2A:D8:54:07:1F:FC:51:D5:F1:2C:20:E9:10:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa3cdfc4-0f76-4235-bb2f-979f9ae5c89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f18::/33
Signature Algorithm: sha256WithRSAEncryption
09:1e:00:d4:43:d9:67:6e:be:96:15:01:ca:e6:74:81:18:c9:
85:12:03:de:8e:2f:e2:d2:80:93:6f:96:d7:23:b8:4a:45:f1:
89:74:a6:3b:1f:ed:61:fa:b4:eb:0e:5d:3f:9a:dc:91:01:19:
0d:8d:3f:69:bd:70:be:08:8b:13:8a:fb:22:44:f1:a3:d7:4f:
6a:1f:62:d9:70:89:46:48:76:04:30:b7:84:0d:73:61:08:ea:
bf:24:70:b1:36:09:2a:1c:81:8b:68:dc:48:6f:79:2b:30:99:
6c:11:72:a0:c1:07:f7:b7:56:e5:5b:27:56:4f:18:31:d1:75:
ab:0d:7b:21:19:ac:a7:cf:06:52:1d:24:3a:18:70:74:3c:e5:
ed:29:58:e1:51:0d:07:fe:8f:cd:ab:b6:79:bc:b8:b3:ac:ec:
0e:99:82:c1:5b:2a:d5:36:2b:ff:ef:28:b3:96:4b:33:29:2e:
c7:25:2d:95:cc:7d:af:bf:0b:42:4d:ab:01:35:85:20:96:f9:
67:d8:4f:09:98:92:c8:6d:d7:95:60:bd:d3:3b:21:57:59:16:
37:04:9a:dd:ee:76:c8:a0:23:51:48:06:fb:fc:d3:f4:61:86:
22:b3:6a:79:f5:17:14:86:f8:91:4c:11:4a:c2:c1:34:a6:8a:
27:3b:34:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:44 2025 by rpki-client