Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa
File: adaa974c-4683-4751-815d-d3dc3f784bfc.roa (raw, json)
Hash identifier: 0KVFF2BNwL/oUYG1y/hUPG/qbjsTtDhFkrSQy70sUQg=
Subject key identifier: 52:8A:58:74:B8:4D:AC:AB:38:CB:05:B0:0D:0C:51:C3:5F:74:C5:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F963D16C366396C2A93AFC5D05490DBEC300804
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f13:4800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:96:3d:16:c3:66:39:6c:2a:93:af:c5:d0:54:90:db:ec:30:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=00bb7d9b24f27a72ead37930b0975d0a4c3bab489decf3f4af7ea8e20baada4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:ac:58:38:e2:b8:9c:c7:a8:59:a4:79:a5:
c0:44:b4:81:0f:e5:a3:fb:e8:91:3a:86:ef:3d:d6:
32:59:68:08:0d:45:e5:d7:93:92:86:b3:15:04:80:
54:22:b5:37:13:69:3d:f6:14:25:81:8e:f6:c3:ac:
d2:d1:b3:34:17:f6:b6:ec:39:63:9e:f2:ea:7c:38:
c3:24:49:51:3f:59:27:fe:e9:b9:bf:05:9d:70:a3:
fe:b6:fd:cd:5c:93:f3:a2:2e:d0:62:96:f6:26:e8:
b5:9a:c8:61:e6:98:3d:de:9e:ea:d0:0b:e3:59:20:
b8:fd:54:55:ff:9b:87:89:ec:8a:0d:20:d5:c1:4c:
1d:c7:9e:79:7d:14:c1:d2:d0:29:b2:e8:cd:78:7d:
29:b9:c3:cb:1f:fe:64:75:ea:1b:78:32:ce:a6:68:
f3:58:45:36:2e:3c:4d:9d:4d:2b:1e:89:a8:73:50:
1c:6a:df:77:5f:93:7e:1b:dd:6d:16:da:23:b1:31:
08:f2:cb:b2:e9:96:e0:7d:00:94:ea:e2:57:2d:9b:
fd:3d:b2:f1:40:f7:6c:ce:25:03:c3:98:e4:b1:22:
12:9e:cb:f1:f4:2f:de:9b:34:3c:bd:53:3c:c9:4b:
b2:c0:30:af:d5:3b:ac:16:d5:69:49:85:e9:e6:6a:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:58:74:B8:4D:AC:AB:38:CB:05:B0:0D:0C:51:C3:5F:74:C5:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f13:4800::/38
Signature Algorithm: sha256WithRSAEncryption
83:08:ba:61:58:a0:12:e1:72:a4:be:68:58:11:67:d8:8c:58:
3f:8f:1d:09:21:c7:72:ff:ab:8e:90:a8:93:9b:85:b2:59:05:
33:f8:42:3e:b4:92:0c:3d:f2:de:48:28:b6:5c:5b:bb:a9:1a:
30:a2:89:a5:5e:78:d3:f7:42:f3:4a:b0:b9:91:ad:92:6e:e4:
5f:90:e3:00:d6:bc:9b:79:53:f8:fa:27:ad:6f:79:a7:a6:fe:
8e:26:8a:9f:97:86:2d:e1:15:c6:41:9d:88:0e:b4:e7:e2:7a:
d1:6b:6d:1c:a9:78:f8:9a:0c:40:08:29:10:f6:92:e5:8d:51:
eb:f0:56:d8:c6:fc:82:d5:5c:f8:43:d1:dc:80:8d:d9:5f:16:
53:fb:b7:02:17:27:16:2f:a5:bb:77:47:b7:ac:16:ef:c7:26:
12:ab:af:a2:a8:43:a2:9a:6c:b4:c9:15:89:95:a7:a1:0b:16:
ab:a0:16:be:7a:6e:ba:65:65:77:36:4d:6b:51:8a:49:fc:b5:
36:0a:1b:6e:99:02:7e:16:0a:ef:6e:da:d6:a6:00:ab:22:ca:
74:16:a0:e7:ef:f4:0c:17:b8:79:46:79:5f:9d:22:cb:41:dd:
8b:27:22:a5:d1:ec:58:c5:e1:b7:98:34:ef:3b:f1:1a:aa:66:
63:a9:b3:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 12 12:14:10 2025 by rpki-client