Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
File: b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa (raw, json)
Hash identifier: Zt1GyxO0S9vYnFrZPzQkB/hrtwPfPaY/vSvO7jjKj9w=
Subject key identifier: 28:12:D8:0A:93:C9:6F:54:CD:93:DC:C8:11:4B:10:E8:39:F8:7F:A9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C1AF7BA8C9F913C3A0FB001085B6030165F5159
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f61:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1a:f7:ba:8c:9f:91:3c:3a:0f:b0:01:08:5b:60:30:16:5f:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0a53073055ee9e7ea96ea145ee66b87f0d00119b0c183b40f5605c10fd08d305, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:20:73:c4:93:0f:05:f6:e1:8a:b5:8f:4a:
e8:41:42:de:4e:2c:d8:f6:30:74:10:83:45:db:45:
3f:09:9d:8d:20:93:4a:e9:e2:f4:4b:89:69:f6:72:
46:b7:8a:69:9a:c4:52:7b:0b:42:74:21:03:4e:9b:
75:b2:c7:13:c1:86:14:25:36:b1:bd:2e:2e:4e:ea:
35:b7:66:4b:bf:2d:3b:c1:b6:f3:b7:5b:9e:c8:01:
88:dd:c8:3b:7d:8a:50:3c:d6:3b:37:4b:ee:88:6e:
d9:5a:0d:ab:31:c8:b2:c2:7a:ee:7c:b5:32:87:12:
9d:f6:4f:a8:be:94:07:06:0e:56:32:cf:5f:f9:3f:
a7:a2:5b:c6:63:73:a7:15:30:e2:a1:f8:62:26:10:
e3:be:a2:cd:cb:ab:2d:35:6f:0b:95:57:b0:8a:46:
bc:59:42:b2:f5:9c:35:e3:5d:da:a0:22:f7:6d:e3:
b1:1f:cd:ff:12:01:0b:22:aa:7e:62:16:b8:29:32:
2c:30:6d:4f:33:30:5e:e1:9c:df:c7:de:2e:09:28:
f2:9a:2e:69:c1:3a:5a:30:93:de:4d:0e:26:6c:eb:
f7:f5:61:cd:09:85:54:04:10:7f:1e:59:20:3c:01:
e5:b7:75:68:d7:31:0d:fd:86:08:e6:97:31:1e:23:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:D8:0A:93:C9:6F:54:CD:93:DC:C8:11:4B:10:E8:39:F8:7F:A9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:8020::/48
Signature Algorithm: sha256WithRSAEncryption
21:3a:41:b7:2d:b3:01:f5:39:cc:7d:a7:a1:27:53:01:f9:10:
f2:d0:56:ce:05:27:0a:5f:f8:4a:2f:52:7e:39:0c:ca:0e:5a:
cf:0d:0f:32:61:09:6e:dd:c4:e2:fd:a1:d0:ae:dd:7b:af:a8:
2c:fc:f2:9c:df:24:17:9c:ae:b4:eb:7c:f3:61:d5:65:95:f0:
ef:57:13:dd:f9:7a:0c:5e:3e:84:fb:c5:51:20:44:d1:9e:ea:
44:34:de:87:99:3b:63:1c:99:3d:15:ac:46:30:28:70:c8:91:
ba:69:97:8a:d7:24:46:42:5c:d0:ef:d6:a4:0c:f7:a9:72:1d:
fc:0f:b0:ed:ff:d4:0e:bd:31:47:01:00:a1:3f:da:49:8a:de:
ce:c8:8e:4e:9d:65:c5:f1:aa:9f:a1:25:3b:d4:ef:cb:94:01:
47:31:6d:53:53:3a:d3:f2:a0:51:f6:fc:dd:f5:01:6d:f7:dd:
bf:ca:ad:c5:8f:87:d4:4d:cf:4a:f1:84:30:fb:bf:5a:e0:a8:
fe:d5:4c:dc:90:b4:03:aa:dc:da:34:36:fe:64:91:f6:11:90:
cf:a0:f5:e9:30:b9:b4:d0:dd:d6:4d:4d:4b:c8:58:1a:58:cf:
1d:6a:cd:80:d8:4e:2a:00:66:6c:81:e9:d8:ec:4b:68:5d:cd:
67:a9:12:8e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbBr3uoyfkTw6D7ABCFtgMBZfUVkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYTUzMDczMDU1ZWU5ZTdlYTk2ZWExNDVlZTY2Yjg3ZjBk
MDAxMTliMGMxODNiNDBmNTYwNWMxMGZkMDhkMzA1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJMyBzxJMPBfbhirWPSuhBQt5OLNj2MHQQg0XbRT8JnY0g
k0rp4vRLiWn2cka3immaxFJ7C0J0IQNOm3WyxxPBhhQlNrG9Li5O6jW3Zku/LTvB
tvO3W57IAYjdyDt9ilA81js3S+6IbtlaDasxyLLCeu58tTKHEp32T6i+lAcGDlYy
z1/5P6eiW8Zjc6cVMOKh+GImEOO+os3Lqy01bwuVV7CKRrxZQrL1nDXjXdqgIvdt
47Efzf8SAQsiqn5iFrgpMiwwbU8zMF7hnN/H3i4JKPKaLmnBOlowk95NDiZs6/f1
Yc0JhVQEEH8eWSA8AeW3dWjXMQ39hgjmlzEeI9x3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKBLYCpPJb1TNk9zIEUsQ6Dn4f6kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3ZmQzYjliLWNlMjctNDY5MC05MjBiLTc3NGI3ZDVhZTIyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hgCAwDQYJKoZIhvcNAQELBQADggEBACE6QbctswH1Ocx9p6EnUwH5
EPLQVs4FJwpf+EovUn45DMoOWs8NDzJhCW7dxOL9odCu3XuvqCz88pzfJBecrrTr
fPNh1WWV8O9XE935egxePoT7xVEgRNGe6kQ03oeZO2McmT0VrEYwKHDIkbppl4rX
JEZCXNDv1qQM96lyHfwPsO3/1A69MUcBAKE/2kmK3s7Ijk6dZcXxqp+hJTvU78uU
AUcxbVNTOtPyoFH2/N31AW333b/KrcWPh9RNz0rxhDD7v1rgqP7VTNyQtAOq3No0
Nv5kkfYRkM+g9ekwubTQ3dZNTUvIWBpYzx1qzYDYTioAZmyB6djsS2hdzWepEo4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:39 2025 by rpki-client