Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aba4e60b-7065-4bc4-8c23-8cac3b6b581d.roa
File: aba4e60b-7065-4bc4-8c23-8cac3b6b581d.roa (raw, json)
Hash identifier: aKUhogDer4ktTEWGxeqeMKH4Afg8rVtS85tISJne/a4=
Subject key identifier: DD:AB:84:13:67:50:30:AD:A0:62:D4:F3:0E:9B:86:78:1B:9A:CE:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BE7924905F68755CAD4CC906DF5C2B2FC677A30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aba4e60b-7065-4bc4-8c23-8cac3b6b581d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:5080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e7:92:49:05:f6:87:55:ca:d4:cc:90:6d:f5:c2:b2:fc:67:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=4f14e95905564220e833c0936ad7939fc2ef584372dbcefeaa17e0918c11f3a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:22:b8:c4:a0:be:25:fb:a3:cb:3a:7b:29:
29:8c:2e:7a:38:16:7d:29:e7:64:85:ac:19:13:e7:
2b:01:9c:18:36:f6:3b:c9:f5:f7:ef:ab:76:6d:17:
ca:44:c7:2e:ef:47:83:10:ce:05:0f:4a:66:a6:14:
d9:c6:5b:74:9d:92:fa:a8:1b:a0:0a:b4:24:8d:db:
8b:8e:db:dd:ad:a6:bf:4c:a4:2b:71:d3:95:30:e9:
a6:fc:b7:0d:1d:0e:25:72:20:ec:41:bc:73:8a:8b:
79:66:8f:bc:5c:24:4a:d8:66:56:7d:cc:51:d5:d5:
9b:d9:82:40:4a:46:31:53:f7:cd:7e:a5:4a:96:de:
8f:45:58:71:5e:48:54:2f:34:89:4f:2b:99:2d:b3:
25:46:aa:f6:92:2a:fc:f6:db:f9:5c:fa:10:70:ef:
e5:a5:fa:be:ed:e1:c4:cf:8c:2b:9c:b5:e1:12:7d:
d4:ca:97:9a:3c:f6:20:b5:b9:f0:89:46:c0:8d:30:
b4:bf:10:94:eb:77:52:c7:1e:a2:a7:eb:7a:95:84:
9a:56:ff:a2:87:ae:9a:fd:ad:11:b8:1f:0c:25:ee:
78:ff:85:72:6b:b5:6c:0f:59:e9:2c:d1:9e:28:c3:
d8:55:c3:3c:34:85:8b:52:be:8c:92:ae:00:b6:af:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:84:13:67:50:30:AD:A0:62:D4:F3:0E:9B:86:78:1B:9A:CE:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aba4e60b-7065-4bc4-8c23-8cac3b6b581d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:5080::/46
Signature Algorithm: sha256WithRSAEncryption
81:5a:95:97:de:3a:81:37:6b:08:0e:7a:2c:4e:b8:1f:14:da:
fe:47:7a:3b:ca:6d:e1:8d:ea:49:0d:4f:a5:d1:31:df:69:2b:
ce:1b:03:35:51:57:31:ae:42:73:3d:3c:0f:84:42:8a:41:0c:
e1:ba:25:5e:93:aa:71:97:7c:31:95:dd:cc:16:fe:52:c2:8b:
80:dc:10:24:c5:e0:11:20:b0:44:63:cf:32:d3:71:bd:d5:73:
71:90:1d:07:67:60:ab:ab:74:00:51:b8:0a:00:95:ff:92:16:
68:b0:04:bd:74:74:6a:a0:78:fb:5f:da:69:c9:c7:26:6e:c4:
cd:79:8b:b1:9f:04:fe:64:2e:93:72:b7:eb:13:72:40:7b:0d:
c9:58:0a:f0:ff:dd:1e:64:60:e9:de:17:9a:c9:51:35:9e:c6:
cd:d3:52:7c:84:14:ed:33:7e:c8:a9:d5:4b:b5:61:1b:10:87:
f2:c4:73:e4:63:9b:21:d4:49:06:ec:df:4b:e8:b4:7e:5a:96:
59:88:a4:1c:63:5d:a7:5c:ff:fa:2b:5e:e9:86:a1:22:09:f1:
e7:7d:ab:bc:37:d6:a5:c9:6e:cc:81:8f:a2:d9:d4:f4:ed:f0:
30:62:ad:49:a6:5c:5c:0a:59:44:36:bc:c9:bf:3d:7e:70:ff:
e7:38:67:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:08 2025 by rpki-client