Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab683a78-14b6-4a64-b744-55c9b85a9b70.roa
File: ab683a78-14b6-4a64-b744-55c9b85a9b70.roa (raw, json)
Hash identifier: Y1rTZSPSQq+r0P9Ni8wFS0FHKacvdMvNynz/5sv36j8=
Subject key identifier: 53:08:C1:05:21:1F:D9:DB:96:D0:E9:56:A1:4C:8F:D2:51:7B:31:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C2C66F2E41383995F4C10297969444D8CEE3610
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab683a78-14b6-4a64-b744-55c9b85a9b70.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff2:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2c:66:f2:e4:13:83:99:5f:4c:10:29:79:69:44:4d:8c:ee:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ce207a3986fcf95a9ea5077c5b7d3d184acc96b02a03f1e4326d4c7f02340d04, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:cc:97:a4:a1:57:d5:61:9d:a3:f1:03:ec:
80:fc:f9:69:9b:8b:54:62:91:27:8b:88:3a:e6:cb:
e6:39:73:87:90:0e:e7:e7:e4:fa:0c:7b:15:56:b7:
39:6d:b0:c5:c2:e9:e4:2a:ad:95:58:6e:61:f6:35:
69:e8:a8:dd:6c:f6:a4:c2:10:54:26:1b:45:27:83:
2b:80:82:58:49:9d:fc:10:ae:1d:dd:2e:a4:95:fe:
4d:56:71:1f:ad:25:1e:73:ff:3c:a2:de:c0:20:92:
e6:c2:fb:44:ba:19:70:7c:ee:84:29:c6:c1:2e:69:
ee:fb:3f:8d:77:48:52:ff:eb:82:87:0c:a9:37:59:
81:0a:d7:0b:ac:ab:11:51:f8:7d:89:52:4d:35:e2:
48:ca:e0:9b:32:9f:cf:c1:70:cf:dd:bd:ae:aa:ee:
78:78:61:7f:87:3d:61:2f:10:ff:4c:f7:59:eb:3f:
5b:78:a3:5d:75:a2:9c:fd:c8:d6:bc:86:14:92:a9:
cf:22:20:d0:bf:de:d1:d6:78:37:75:b7:47:19:1a:
5c:3d:a0:76:86:cd:99:80:52:d6:87:61:36:ab:1c:
94:29:a8:8a:e0:8f:7e:65:5f:ca:9e:d8:f5:4c:52:
26:37:40:a1:31:4a:28:92:18:e2:2a:dc:ce:63:49:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:C1:05:21:1F:D9:DB:96:D0:E9:56:A1:4C:8F:D2:51:7B:31:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab683a78-14b6-4a64-b744-55c9b85a9b70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:8020::/48
Signature Algorithm: sha256WithRSAEncryption
b3:9c:c0:16:18:d5:c3:d0:c0:54:c3:6a:25:c9:e9:26:10:23:
6f:b2:92:39:0f:59:f2:ea:44:7a:88:ab:f6:e0:cb:c6:f0:2f:
b8:98:95:34:97:7b:95:d0:c0:e0:b7:20:2c:c4:90:9a:2a:96:
14:e4:55:a6:dd:12:3e:78:63:5c:3f:ba:df:18:e0:38:88:f8:
c4:66:85:a4:13:29:be:7c:7b:21:a3:f4:ce:20:b6:3e:cc:95:
04:0e:61:02:7f:70:bc:67:8d:7b:7b:ee:d1:2c:4e:e5:14:a4:
e6:a2:fb:33:14:e0:47:bd:6e:ee:47:7a:f5:2f:21:f5:f6:d2:
13:bb:e2:8b:5f:d5:25:92:5f:7e:00:90:9f:a1:d9:98:d0:36:
3d:c0:81:84:99:6b:29:7e:d2:cf:f3:5a:af:c3:ef:77:38:75:
ca:09:13:f2:10:08:fe:4c:be:99:4f:16:a1:62:db:de:0f:05:
22:6c:89:42:f4:e0:8d:60:ad:1f:d7:4f:a9:b1:d2:28:b3:6a:
90:35:f1:46:6c:b4:f9:d7:0f:ca:60:ae:9b:65:8e:5b:12:85:
c7:37:19:3a:68:3c:4c:37:02:23:e7:01:1a:b4:8b:38:25:e2:
0b:5b:f4:16:46:dd:71:eb:f0:bd:24:a3:cb:b4:4b:90:d8:8e:
5e:b7:b5:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:43 2025 by rpki-client