Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d5e9d2-cda7-4a1b-97a9-3db059676b16.roa
File: b5d5e9d2-cda7-4a1b-97a9-3db059676b16.roa (raw, json)
Hash identifier: CUOmxNdW85S25q1kUXaRhxupz6gfuvjQUz6BfnX7aD4=
Subject key identifier: 68:13:56:6C:A6:D2:4A:40:42:03:B9:C0:4D:05:C8:5B:D3:8C:CF:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D205CF15A510012FE26A059BF01C2583534B209
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d5e9d2-cda7-4a1b-97a9-3db059676b16.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ffb:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:20:5c:f1:5a:51:00:12:fe:26:a0:59:bf:01:c2:58:35:34:b2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7cb2d961ecadd207df8eddd3dcc5263866d62193414f2b1e7d67c322ba4739d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:12:db:5b:59:e8:25:b5:fe:c6:d6:3a:d5:
77:cf:50:23:ba:1d:84:f1:93:de:98:e5:41:1a:f2:
68:f5:3f:da:1e:5d:1a:34:f5:9e:48:98:7e:63:dc:
f5:cd:aa:8c:9e:60:96:6b:a7:37:e4:92:5b:03:9e:
8f:2f:ab:ca:78:d9:9d:dc:a2:b1:c3:d3:5b:b8:ec:
ca:8b:f8:18:a2:69:61:66:e0:44:14:20:ef:91:e9:
95:87:f8:90:77:77:6d:9e:60:b8:0d:5d:d8:97:ed:
df:08:53:17:65:2d:d5:78:93:a6:01:b0:73:af:2b:
ea:89:ff:37:f4:cc:c3:b2:1a:62:ec:23:06:ae:f9:
60:cc:70:25:51:68:aa:46:b1:97:13:cc:7c:7a:cf:
f1:52:38:b8:06:c7:23:bd:c4:f3:b8:5d:64:b9:ad:
59:ba:f5:c1:7d:34:ee:85:7e:e0:41:7a:c1:40:a2:
f8:0d:70:51:20:84:e7:77:bd:62:20:48:de:8d:06:
cb:15:cb:4a:2b:0b:65:41:c9:14:1a:1a:7b:a5:8b:
0e:36:d1:1c:ea:d1:a0:21:f0:69:6d:3a:ac:a2:a1:
f9:a1:0b:51:b3:69:4e:4f:55:b7:62:af:45:0a:b5:
fb:22:f6:d7:46:f9:d5:1a:23:8c:47:31:18:57:78:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:56:6C:A6:D2:4A:40:42:03:B9:C0:4D:05:C8:5B:D3:8C:CF:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d5e9d2-cda7-4a1b-97a9-3db059676b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:2000::/40
Signature Algorithm: sha256WithRSAEncryption
6c:b5:f6:77:68:2c:98:10:d2:03:bd:6c:c0:08:fd:2b:19:c5:
a2:cf:0e:5b:a4:d1:bb:0d:1b:a0:fb:3d:c8:d7:cf:b7:9b:78:
96:c6:09:d4:9f:f3:60:ec:c5:b3:07:fd:b3:cf:d9:d6:19:d2:
58:db:c7:b3:58:a8:3d:8a:5a:3a:48:26:31:33:be:66:ca:5f:
09:60:cc:fb:a8:4b:fe:72:b2:03:9c:8f:2d:a7:c8:95:39:15:
33:a3:89:ef:6c:86:be:cd:e3:9c:25:33:ef:49:3a:3f:ab:11:
cf:62:8d:1a:89:b7:40:c0:1b:61:6f:5a:04:0c:3b:79:79:cf:
15:12:71:a6:5a:07:62:b3:26:a4:d0:80:a7:67:e2:45:36:b8:
aa:6a:54:27:31:d8:30:21:08:7e:f2:4a:ed:34:0f:12:5c:d1:
aa:2e:26:3b:a3:09:d3:0d:fa:2c:d3:f2:17:dc:b7:01:bf:df:
0d:65:82:68:a9:4c:7a:82:1e:ac:ee:e2:0a:10:3a:d7:7d:03:
e4:08:c0:8a:0a:f1:73:2f:51:d0:8c:26:f2:f8:0c:35:12:b1:
89:2d:81:fb:15:e6:74:39:f0:9c:07:4c:ed:6c:96:91:4c:95:
93:87:40:08:57:bb:dd:1a:40:f6:ec:b9:48:69:14:6c:87:c3:
31:a5:a2:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:07 2025 by rpki-client