Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa
File: e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa (raw, json)
Hash identifier: 4ZiiCA0WR5URek2v1zY3vq9pn0/aaKHPUDYGm3LxhnY=
Subject key identifier: 04:37:45:38:90:F9:B1:4E:12:5A:51:4A:3F:86:01:15:1B:88:E7:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C4C05727675B37FCE17C6080421C8DFFEBA28BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:3440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4c:05:72:76:75:b3:7f:ce:17:c6:08:04:21:c8:df:fe:ba:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=dbd5fb3956e47d2530c83c61093b070e1c18cb9768b61777506194b0d98e7d5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:49:8f:58:bb:a1:80:3d:17:48:05:28:66:72:
2a:12:4a:5b:fe:7a:91:bb:95:cd:62:88:53:20:20:
77:dc:50:5f:3a:f8:c7:4e:2b:7d:88:e8:98:7c:17:
3f:29:59:6b:e6:59:41:46:c9:67:5e:94:e6:6a:d1:
f5:33:73:9e:b6:d9:e7:33:7f:78:76:b2:86:9c:5d:
48:13:60:86:6d:95:e5:87:59:04:e4:80:82:bd:55:
61:19:ea:e4:23:cf:ab:f3:8d:bb:3e:9e:02:c1:3c:
3b:69:06:60:ca:36:5a:8b:36:99:bd:aa:ca:a5:f8:
3f:80:06:ba:5e:cb:fa:16:c6:0f:05:ac:f0:4b:02:
5b:0f:b7:29:ce:46:84:24:51:3d:5a:d4:cf:7f:c2:
1b:07:1d:5f:68:4c:95:ec:47:fc:58:72:aa:9c:26:
20:af:0a:12:97:0c:58:0c:43:97:86:74:74:04:ea:
cf:c4:38:27:44:a9:f7:31:4d:57:9d:74:ea:11:0e:
af:37:ba:8d:c0:ba:1e:c3:43:0f:a4:8e:9d:66:1d:
86:6d:b0:9c:87:b1:75:82:f1:1f:6f:99:97:d8:33:
d6:3d:bb:3e:07:a4:3b:f7:f8:e9:ec:82:d0:f6:04:
d6:07:56:d1:0f:36:ba:4e:6e:ea:db:af:bc:ed:be:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:45:38:90:F9:B1:4E:12:5A:51:4A:3F:86:01:15:1B:88:E7:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:3440::/48
Signature Algorithm: sha256WithRSAEncryption
98:3b:49:d5:dd:eb:4b:b8:6c:54:a7:01:1d:bc:3e:a4:5a:5b:
e8:59:cc:15:05:00:12:8a:f9:68:39:a9:ec:9e:b8:31:b6:38:
be:42:f2:7e:fb:89:e7:d2:8e:03:37:31:ed:f7:b9:af:5c:69:
cc:02:ca:04:41:a7:10:4c:91:9d:86:72:d5:70:93:24:8c:b6:
0f:c4:48:3c:aa:7c:f6:e1:e5:29:41:10:8d:cf:37:b9:bd:31:
1c:38:65:fc:e6:ee:eb:f3:91:8b:30:c9:68:5d:74:60:d9:35:
84:1c:27:38:2e:5f:4d:5e:95:46:fc:7d:a8:3e:ca:4d:74:be:
81:67:56:82:56:57:96:e1:ff:e2:32:58:ec:73:11:bc:b4:cd:
06:03:f8:cb:7e:c6:63:55:9d:82:f5:24:02:40:4b:fc:63:d9:
ee:8a:5c:2d:2d:ff:7f:f4:a6:7e:23:47:c4:f1:27:b8:9e:9d:
bd:b1:80:d6:8e:2a:56:52:4b:65:65:1e:22:01:a7:12:5e:c3:
5a:21:cb:4f:7f:e2:55:0b:0a:f3:b9:88:a8:a8:77:2e:8f:a2:
57:74:96:66:97:b5:41:30:a0:38:2a:2f:69:31:2c:10:13:b1:
35:2f:a7:f1:5e:3d:8d:6f:7a:9e:85:49:0c:d2:7e:34:89:91:
cf:80:1e:db
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTEwFcnZ1s3/OF8YIBCHI3/66KL8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYmQ1ZmIzOTU2ZTQ3ZDI1MzBjODNjNjEwOTNiMDcwZTFj
MThjYjk3NjhiNjE3Nzc1MDYxOTRiMGQ5OGU3ZDVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDtSY9Yu6GAPRdIBShmcioSSlv+epG7lc1iiFMgIHfcUF86
+MdOK32I6Jh8Fz8pWWvmWUFGyWdelOZq0fUzc5622eczf3h2soacXUgTYIZtleWH
WQTkgIK9VWEZ6uQjz6vzjbs+ngLBPDtpBmDKNlqLNpm9qsql+D+ABrpey/oWxg8F
rPBLAlsPtynORoQkUT1a1M9/whsHHV9oTJXsR/xYcqqcJiCvChKXDFgMQ5eGdHQE
6s/EOCdEqfcxTVeddOoRDq83uo3Auh7DQw+kjp1mHYZtsJyHsXWC8R9vmZfYM9Y9
uz4HpDv3+OnsgtD2BNYHVtEPNrpOburbr7ztvn7LAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBDdFOJD5sU4SWlFKP4YBFRuI50owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxZjZiZjdlLTk1NjUtNDI5OC05YjA1LWFhZGZiMzRlZGIzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hNEAwDQYJKoZIhvcNAQELBQADggEBAJg7SdXd60u4bFSnAR28PqRa
W+hZzBUFABKK+Wg5qeyeuDG2OL5C8n77iefSjgM3Me33ua9cacwCygRBpxBMkZ2G
ctVwkySMtg/ESDyqfPbh5SlBEI3PN7m9MRw4Zfzm7uvzkYswyWhddGDZNYQcJzgu
X01elUb8fag+yk10voFnVoJWV5bh/+IyWOxzEby0zQYD+Mt+xmNVnYL1JAJAS/xj
2e6KXC0t/3/0pn4jR8TxJ7ienb2xgNaOKlZSS2VlHiIBpxJew1ohy09/4lULCvO5
iKiody6Pold0lmaXtUEwoDgqL2kxLBATsTUvp/FePY1vep6FSQzSfjSJkc+AHts=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:15 2025 by rpki-client