Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf9f9c1e-0e1b-4282-9df6-71ca543a6f1f.roa
File: cf9f9c1e-0e1b-4282-9df6-71ca543a6f1f.roa (raw, json)
Hash identifier: OOyjFXZZzZy4ojpNuQYlXW09lQh4pp51Nqvj02Arnag=
Subject key identifier: DE:C4:4A:42:5F:80:0F:B9:8F:75:7F:3E:66:AE:51:EA:FE:CC:E5:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49527B7C7F8F6A3F1BB644FC6ED7EACD730F6C5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf9f9c1e-0e1b-4282-9df6-71ca543a6f1f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f38:8000::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:52:7b:7c:7f:8f:6a:3f:1b:b6:44:fc:6e:d7:ea:cd:73:0f:6c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c6fb73440fe7d8d353f9c0506fe7ea097acc44d62d53c99173697ee40076da1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:e0:ea:5e:8a:8f:4e:cf:63:e5:4d:e3:ff:
87:c5:45:c2:90:21:08:4c:41:24:2f:74:b2:cc:9c:
6a:34:10:9d:da:bb:ec:e5:04:19:84:01:c5:90:49:
69:1e:ca:fa:87:10:57:e0:78:4b:61:53:47:34:17:
a5:c4:3d:15:5e:4f:01:39:84:83:40:3e:19:59:b4:
11:76:4e:5d:ae:eb:2d:96:af:e9:03:32:e4:2c:9d:
c3:86:aa:a6:a2:9b:9d:1e:58:9c:ac:50:a7:35:e3:
6a:8d:6b:36:87:6a:1c:77:a0:f3:64:88:68:ce:6f:
fd:49:4b:90:ff:81:94:fe:18:de:96:2a:ec:63:6a:
a7:31:85:6b:15:ac:8b:0c:3c:ea:55:78:32:79:44:
49:9a:43:b1:63:c6:fa:16:ef:33:20:5a:ef:1d:fc:
a7:65:a1:b0:7a:15:83:28:06:7e:d6:b6:f7:62:98:
b8:6f:a7:52:34:70:31:39:45:e8:e7:8a:f6:cd:98:
12:51:f5:b5:ba:63:47:44:0f:4f:97:71:f5:ff:d7:
b8:ab:59:45:fe:1d:14:20:6f:5e:aa:ad:57:e6:96:
67:08:92:e8:24:3f:0d:51:05:73:33:dc:5f:16:75:
a8:bd:7a:ab:f9:90:34:05:c8:61:fa:0f:d5:83:10:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:4A:42:5F:80:0F:B9:8F:75:7F:3E:66:AE:51:EA:FE:CC:E5:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf9f9c1e-0e1b-4282-9df6-71ca543a6f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:8000::/39
Signature Algorithm: sha256WithRSAEncryption
50:e7:95:e6:dd:b8:fc:e7:42:a9:0a:af:b5:d5:2c:ea:b4:59:
be:f2:bd:a7:e1:66:02:8a:a7:39:0e:0b:1e:ee:ab:cc:63:0e:
75:09:23:58:d2:2e:23:fd:ec:97:e1:86:dd:a6:1f:8d:9e:be:
77:a9:cf:87:2d:cf:ba:00:bb:1b:9c:3a:33:7f:d9:90:4f:3a:
1c:5d:47:8a:cc:de:7c:c2:b5:4b:3a:7b:b1:ca:46:46:f0:e8:
f8:32:6b:fe:37:f6:49:54:d2:5f:bf:42:35:d5:bb:e8:37:33:
73:01:3e:3b:49:c9:d3:69:3c:9c:16:b2:94:de:34:b2:fc:c4:
a2:0e:1a:6c:07:b4:f1:db:ae:7d:5f:04:86:44:66:b2:6e:2d:
f7:25:5c:40:c2:e2:39:e1:28:00:11:ee:20:66:04:76:8c:15:
a2:bb:58:e3:22:6d:54:f9:47:dd:80:16:0d:fd:b6:3e:6b:75:
f3:bc:d6:61:ea:0f:de:fc:b4:11:02:a4:84:b2:d9:77:a7:39:
51:f1:fe:b5:e0:2e:de:a0:8f:91:a9:1d:42:e5:81:ec:48:66:
f5:9d:07:3c:0f:25:2f:f3:2b:71:30:86:87:9d:00:53:32:9a:
ee:ac:e4:ed:a2:a6:86:cb:0d:3a:a9:94:13:5f:a5:46:b6:9b:
30:be:72:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:46 2025 by rpki-client