Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2539a9-3f3c-47ea-8c11-936ba222a752.roa
File: df2539a9-3f3c-47ea-8c11-936ba222a752.roa (raw, json)
Hash identifier: CIaHxQzCUvNsxgKRZS0E4hXiBDIFWxX/sSwPwnsUrxU=
Subject key identifier: F7:FD:23:E2:18:0F:2F:C1:A8:D6:44:D6:ED:41:53:0B:15:3B:86:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 086A3ED916C53A0A4AD98BCF86F2D1D58B8F39B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2539a9-3f3c-47ea-8c11-936ba222a752.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:80c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6a:3e:d9:16:c5:3a:0a:4a:d9:8b:cf:86:f2:d1:d5:8b:8f:39:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d2a0a1985f2ad2bbbdf316e273c03ea0487a2713d91c7da2d1cd41f5dfa6e34d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:54:d4:51:50:7b:16:5b:20:23:e6:1f:98:
aa:ad:93:f6:fa:66:2e:a9:d5:b2:a0:e8:c0:4c:57:
9d:8d:48:b3:b5:53:15:8e:ae:8a:7a:e2:6f:79:92:
01:ee:21:6d:f5:d5:bb:f6:f1:09:69:a6:5a:f2:e3:
96:59:bb:f5:fc:04:08:21:16:ac:22:05:f2:87:d5:
d0:3c:2f:b4:d8:74:23:3f:f6:b4:13:60:b2:be:22:
45:5b:25:2b:49:2c:94:9d:09:95:c3:54:90:75:d2:
21:76:fe:0a:05:ac:90:8d:d0:63:77:44:93:72:73:
37:4c:ee:bf:97:60:b6:ac:5f:22:77:1d:07:90:7f:
5b:de:99:33:aa:d7:5c:c4:0e:f6:d1:91:75:54:15:
29:aa:8b:97:48:d7:7d:18:5a:be:96:68:21:a5:dc:
4d:20:2e:89:ad:87:de:7d:b8:d9:0f:d0:20:6b:1e:
04:eb:ea:08:c9:33:29:9e:ee:da:56:8e:f2:76:3b:
29:06:dc:92:12:b5:29:a1:02:30:f7:47:fe:2a:49:
07:bb:17:b3:ad:f2:15:09:c4:77:c8:2a:4c:cd:60:
6e:16:73:c1:a2:05:dc:36:f8:df:42:ba:9b:20:49:
55:77:e3:da:4f:bb:34:86:98:a7:22:3b:19:3e:9e:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:23:E2:18:0F:2F:C1:A8:D6:44:D6:ED:41:53:0B:15:3B:86:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2539a9-3f3c-47ea-8c11-936ba222a752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
4e:db:85:22:a4:0a:dc:5d:c9:27:07:13:79:48:47:77:88:3c:
d7:5f:23:b5:3c:25:5a:0f:5f:1f:4f:0a:e5:3e:3e:ba:26:38:
f6:c6:54:e2:d2:3d:09:66:2c:95:41:6c:ed:78:7e:e8:de:20:
e7:21:95:f0:d3:27:6d:a2:ec:c0:bb:99:8c:92:1d:3d:11:4f:
d3:6b:80:06:f8:0b:4f:76:93:05:3b:2b:01:ac:93:17:d9:cd:
4d:4e:71:24:de:28:5f:44:88:61:c9:c4:92:12:cc:c9:a0:c9:
e3:4c:08:14:2c:a3:00:54:26:1b:e5:c9:a2:c6:f4:2a:c7:27:
e2:a4:53:2f:44:a5:a1:4a:41:91:0a:00:98:12:a0:ae:33:5c:
17:be:8d:ac:e6:cb:d0:7c:da:98:8b:9e:4a:35:1b:da:9a:45:
ac:f5:30:2e:51:14:69:c6:10:17:14:5a:62:3e:45:a8:24:7b:
5c:da:54:e7:d9:b8:82:a2:f3:b1:c5:7b:e5:2f:dd:20:06:1c:
40:b8:1b:5e:af:7a:a9:af:16:7a:04:ba:61:29:3a:48:55:68:
78:d4:20:33:ec:1d:50:39:53:df:5a:89:6d:81:6a:bc:d5:19:
ef:07:e5:2d:ef:20:b1:ff:02:27:7d:0f:21:07:4e:c7:b7:e1:
77:06:20:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:19 2025 by rpki-client