Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c5934c-7d31-4f75-8305-e287807d8cf5.roa
File: d3c5934c-7d31-4f75-8305-e287807d8cf5.roa (raw, json)
Hash identifier: Jwj1Vc+CAPnMDW8/dIP4CyZn2gEBLLcr1qgMbHxO7Yc=
Subject key identifier: BF:70:21:1E:B5:4F:2B:8B:E0:47:AC:94:13:BF:05:EB:9C:15:7D:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F26E8197596B3F3C894327BFA0989CD5F09289D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c5934c-7d31-4f75-8305-e287807d8cf5.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff6:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:26:e8:19:75:96:b3:f3:c8:94:32:7b:fa:09:89:cd:5f:09:28:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f20d83551e53f83f989d3f3cd9164b92262426c90b75f153db26d101293d4f29, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:ed:ab:1c:c1:2e:cc:17:06:81:90:c3:3b:
39:0e:0c:53:a1:b1:ea:1e:63:87:fd:91:a1:63:4f:
e4:6a:61:7b:07:4d:12:14:a5:4d:93:fa:6d:f6:c0:
65:d0:d7:e2:0b:01:83:fb:a2:1f:65:0f:15:57:4d:
41:df:0f:5f:99:a9:80:36:25:a3:68:da:ee:7e:98:
6d:91:70:d5:1f:f4:66:07:83:8c:0c:c9:a0:e5:4a:
cc:44:3d:7c:15:cf:89:1d:1d:5e:fd:82:1d:a6:c7:
c3:88:eb:fe:8f:be:f8:9d:af:e0:b7:ed:6e:32:4d:
72:cf:33:63:a4:57:34:c8:c8:6c:fc:ba:42:92:df:
bd:72:ba:41:52:72:68:68:61:e0:a7:d7:ab:eb:01:
cd:ba:7b:5a:db:ed:7c:8b:b7:36:3a:5b:36:8a:ee:
ec:e5:13:e6:9e:cb:e4:50:34:1c:a7:15:66:86:de:
6e:64:48:d9:1f:2b:2b:d2:a4:cb:64:01:ca:06:df:
90:03:f5:4c:c9:23:11:e4:c5:72:ef:b5:40:0a:be:
54:29:27:43:9b:17:3b:c4:77:62:ae:90:7e:87:d1:
ab:81:bb:ac:6d:ec:ee:fa:0d:b1:9c:ee:67:b4:00:
53:16:b1:30:fe:70:67:41:d2:74:f1:56:0c:60:d0:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:21:1E:B5:4F:2B:8B:E0:47:AC:94:13:BF:05:EB:9C:15:7D:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c5934c-7d31-4f75-8305-e287807d8cf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:8000::/48
Signature Algorithm: sha256WithRSAEncryption
61:5a:33:c2:d9:b1:4c:86:41:ea:43:f1:f7:70:86:ef:4f:43:
91:17:55:c1:b9:03:63:dc:15:7e:94:45:86:ca:26:be:4b:51:
f9:89:30:be:15:cf:af:6b:17:68:a3:64:35:df:31:00:5b:a1:
c9:23:e1:be:fa:ce:da:1a:71:c0:7b:d8:db:ae:11:1e:a7:c5:
39:7e:0a:49:2d:06:c0:16:d2:a2:67:e3:a4:72:64:ec:b0:f5:
97:a9:5b:22:c4:e5:62:c1:bf:84:62:df:f1:14:41:58:83:a5:
58:61:b8:e0:d7:c0:60:7d:80:71:0f:c5:66:98:1d:9d:79:e1:
26:37:a9:c0:28:a8:28:e8:05:34:e2:16:9f:af:aa:ee:79:aa:
e1:dd:b7:17:4f:48:49:af:45:d6:f7:e6:0e:e6:45:34:37:0d:
37:cf:f2:33:cc:c6:df:a8:f7:2d:d9:cf:c7:14:91:10:6b:04:
40:89:3e:28:07:85:67:72:3b:7f:e9:ec:b6:c1:57:bf:17:13:
52:00:42:74:3b:d7:3e:4b:6a:55:f4:d7:19:55:72:69:14:9e:
eb:41:15:89:51:c7:ff:ce:d1:d5:8c:6c:bd:f9:f3:48:cd:4c:
5e:75:f9:4b:0c:b6:f6:0f:ff:69:24:e8:f5:03:c9:b1:81:06:
6b:30:d5:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:30 2025 by rpki-client