Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6b0b0d-010c-4855-ace2-e717af36ede7.roa
File: cc6b0b0d-010c-4855-ace2-e717af36ede7.roa (raw, json)
Hash identifier: LLwC8jQSKDNhzL/o0nzl0YEOc4cDVY5up0rwWEI20UI=
Subject key identifier: 5F:90:89:9D:80:FF:66:C3:2A:49:F5:B8:EC:69:76:42:2D:17:7B:6F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5ECC969573A7B79A2AD00938FB44A60F8FA2FEFD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6b0b0d-010c-4855-ace2-e717af36ede7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1c:4000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cc:96:95:73:a7:b7:9a:2a:d0:09:38:fb:44:a6:0f:8f:a2:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8f388cf4af5018bf563b3f02b2168120278b60e6ac97e4a10f4487b0d921dd63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:d3:2e:b4:10:12:0a:95:d7:4f:73:8b:84:
3a:4b:ee:4e:70:a9:f6:b3:0f:4a:c6:ed:4c:ed:d2:
e5:98:c7:5a:9a:c0:82:9b:c5:45:09:29:d7:05:d0:
a1:50:63:13:27:41:12:0d:18:01:1d:ba:bd:26:cf:
b7:67:87:1b:3c:95:06:d3:14:6a:2e:9c:ce:23:d9:
d3:50:f4:b8:9e:c7:18:15:62:2c:51:3c:42:19:36:
e9:cc:66:a7:60:0e:db:ee:6e:de:92:9f:af:3a:75:
ea:84:c9:1f:45:52:bd:83:68:5a:57:1e:44:cd:57:
5a:3d:1f:5d:b1:35:62:f6:31:0f:f3:7b:be:7f:8b:
ce:4f:12:57:a1:30:b3:08:6a:11:56:f3:da:19:33:
59:ff:f8:c7:e9:bb:0e:01:bc:4b:d1:3c:5a:d7:8a:
06:6c:2b:d1:c2:8b:89:2c:2a:25:e9:8f:07:d9:17:
78:3d:08:26:6a:fd:93:b4:d9:37:30:3f:ab:46:93:
e8:dd:63:23:ee:c7:cf:15:69:df:e0:ab:e2:25:b5:
5a:c7:44:cf:b3:37:ec:8d:f2:77:c9:43:d8:e2:87:
ee:9b:2b:3d:6a:40:2b:c2:4f:03:8c:2b:f5:24:7f:
0c:77:8d:b9:9e:ac:39:7d:1e:60:09:4c:7f:f2:cd:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:90:89:9D:80:FF:66:C3:2A:49:F5:B8:EC:69:76:42:2D:17:7B:6F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6b0b0d-010c-4855-ace2-e717af36ede7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1c:4000::/37
Signature Algorithm: sha256WithRSAEncryption
43:1c:2d:a8:58:e5:fb:a0:35:f3:6f:3b:5d:53:9e:8e:a4:f6:
88:71:1b:7a:6c:4a:37:da:45:18:fc:b1:36:f4:b6:05:95:a5:
5a:df:ea:84:98:ab:99:76:d7:29:1f:98:45:1e:dd:03:72:07:
e2:1d:88:48:c4:59:33:f4:64:ff:17:03:28:bf:c0:c6:64:b3:
a8:72:a2:72:11:f3:ce:90:47:59:21:1e:7b:71:bd:5f:c9:bd:
ff:ce:c1:16:7a:20:1d:36:1d:6a:ee:f6:39:ae:61:4a:1e:c1:
a5:c0:60:6a:42:be:02:4b:ad:81:4a:f5:14:67:a8:00:f4:eb:
0c:6f:6f:58:f8:86:5f:4b:64:b8:59:fb:7d:c1:f2:82:54:9b:
5d:ea:6e:52:4e:57:49:42:0b:34:50:1c:74:2e:9e:75:f1:fe:
86:cf:ca:c1:1b:81:89:93:9a:15:db:ca:12:50:4d:fa:ee:c5:
77:7d:5f:07:c9:5b:3b:2f:02:b0:2a:f7:ee:a9:bf:6f:bd:89:
1e:b7:e6:7d:c1:50:16:82:d7:b4:e5:ac:3c:94:13:91:13:eb:
1b:18:da:48:57:c7:f3:6a:ef:36:fe:73:de:8a:de:75:69:37:
d9:e1:a2:bc:fb:d8:55:0c:08:83:56:95:58:7a:7a:6f:59:48:
64:91:32:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:25 2025 by rpki-client