Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
File: e1c8c053-5660-4b24-8aaa-28cebd569f74.roa (raw, json)
Hash identifier: SsbWQB3qH9cK0J1lt65DWY3Cjvk1St0x+rtklkZTNwA=
Subject key identifier: CE:B8:70:D5:48:5C:76:E6:28:E1:9A:49:54:93:9B:1E:E6:A6:73:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2767C14A3CA262C3209FB22B80FFE8AB7AF7ABB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff5:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:67:c1:4a:3c:a2:62:c3:20:9f:b2:2b:80:ff:e8:ab:7a:f7:ab:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a32a2a579ef04b6f5f201ce62437e0ade194ef155ae9710ea57ea4c6a1a49470, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:0c:8e:56:e6:3a:c8:9a:29:0c:a1:0f:2c:
96:7e:58:0b:57:8e:b9:a1:f8:2d:43:a8:d5:3f:7b:
b7:dc:56:47:b6:72:50:1b:00:fc:ce:19:1a:9d:86:
15:dc:7e:97:a9:94:23:6d:9d:0d:6e:c7:c5:44:0d:
ef:4e:5a:23:0a:26:ca:3f:fa:d3:36:bb:d5:d6:c8:
ae:79:7b:f5:ca:34:72:55:dd:37:a1:b5:9a:5f:38:
1b:43:14:db:eb:ed:b8:dc:99:bd:bf:f4:7a:b1:d3:
d6:0a:8c:3b:53:bc:8f:71:ac:12:8c:15:1a:fb:2c:
f6:7f:05:ec:df:73:d7:b2:d5:43:39:34:a3:40:66:
32:b4:4e:ac:e7:c6:10:20:00:f7:0c:3d:4b:45:d6:
7d:ee:d0:2b:00:89:aa:3f:36:c9:8a:64:49:02:13:
fe:1b:29:b8:1e:27:a5:cd:14:98:45:98:b4:6e:a5:
95:68:40:1d:8a:99:a6:7c:b8:51:ea:d1:0f:8f:23:
88:72:f1:c6:ef:1d:78:c4:03:59:c8:c3:60:10:c2:
53:3d:e0:42:3f:19:dd:89:15:e4:6e:96:2c:95:bc:
5e:92:8e:7f:31:be:a0:4d:a8:a9:eb:2c:4e:47:17:
29:18:ab:4d:12:a5:d5:a5:c1:c0:3c:56:4f:95:24:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:70:D5:48:5C:76:E6:28:E1:9A:49:54:93:9B:1E:E6:A6:73:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:8000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:b3:ca:cd:d5:d8:03:10:f6:af:12:d1:7d:85:f7:db:b0:90:
26:30:20:50:6b:15:4c:bd:73:91:35:9d:02:c5:78:ff:9d:b9:
80:c2:c0:d0:fb:3e:6e:9f:b7:41:3d:2f:44:fa:93:99:2e:b5:
70:ef:89:54:f0:5c:fd:eb:48:11:ff:27:e8:c7:b0:46:00:9d:
3b:3b:23:25:a5:fd:38:4c:42:32:78:58:c0:bd:a3:e9:5c:a9:
fc:0f:d5:63:56:96:b2:16:ea:5a:72:b9:4a:70:af:e8:16:6f:
a0:96:9c:a9:21:bb:8b:ca:44:99:33:28:e5:e4:c0:15:6f:96:
79:8e:a5:23:64:d1:73:73:bc:47:04:99:b7:c4:b8:f7:dd:f8:
e8:97:d6:da:73:be:ff:f6:9b:35:f3:85:98:0f:76:6b:a7:7f:
02:6f:98:af:8f:f2:81:7d:1d:25:c2:1b:90:c1:34:a6:06:c0:
47:f9:fe:ea:93:b8:7f:4f:ac:9c:97:9e:b3:b1:5c:f7:f9:79:
8d:16:75:64:ac:bf:89:58:b7:37:9e:e4:24:5b:4b:3a:ba:21:
18:41:50:c9:b9:f2:2b:a0:83:e2:d2:5b:77:b0:57:f7:e3:69:
a0:78:64:49:b8:da:f5:3c:fd:b2:30:56:0f:61:4d:e1:53:4d:
fc:f1:23:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:17 2025 by rpki-client