Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
File: e6538696-8c8b-4e22-8582-42e86ff86c5f.roa (raw, json)
Hash identifier: CB+BZKWPoDrytLUKQajFZqztOOkIF9ddQSjonLU/Gao=
Subject key identifier: 36:3B:6B:77:95:B8:AC:E1:54:AF:EB:DF:4D:53:92:56:3A:94:78:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12B28C34E0FEB13EEBB06DD5E9789EA1E084678B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2f:4000::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b2:8c:34:e0:fe:b1:3e:eb:b0:6d:d5:e9:78:9e:a1:e0:84:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=03312ae0ce35a1a2b3cd976e120ef9734750aaf1c565ae47a8c1415603a47a81, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:57:cd:7b:35:e7:c7:a1:1a:0d:10:05:df:
e9:72:8c:92:6f:d6:9e:19:c5:fe:8f:5b:00:df:82:
1c:27:26:be:ab:4b:c8:2a:74:3d:03:cf:fe:32:d3:
96:48:13:4a:37:25:99:51:be:b0:8b:b2:70:90:9e:
10:95:8d:35:e4:6a:53:32:74:df:9e:0f:f3:e6:32:
d9:3e:d4:9b:5e:f2:46:06:8d:6b:ef:68:03:f9:2d:
30:60:23:fe:03:29:9a:d8:87:5d:f2:ba:a9:cd:0e:
27:99:00:ff:13:57:b1:08:78:96:69:a1:de:1f:94:
4c:9b:67:1b:9e:15:8a:f8:4f:43:2e:8b:76:c5:6d:
85:aa:e3:a0:89:20:8c:77:d8:46:2e:58:83:c4:a9:
24:3d:89:38:1e:ba:cb:56:7c:ff:1a:e5:5a:63:f2:
fb:cb:5d:5d:78:d6:67:44:d6:04:88:58:5a:81:75:
94:58:4a:bd:9b:58:74:87:86:d8:7f:7e:1a:34:59:
36:f3:45:a4:d2:cd:04:6a:7c:8b:4d:a3:ba:83:eb:
a8:44:c9:f5:9b:45:e5:73:ae:8f:ea:85:25:6b:b6:
a9:69:ef:0f:0a:66:24:95:e1:b6:de:fa:3d:9e:2c:
7a:6c:83:ac:eb:f7:f8:e6:a1:ba:86:e1:d3:45:29:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3B:6B:77:95:B8:AC:E1:54:AF:EB:DF:4D:53:92:56:3A:94:78:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2f:4000::/37
Signature Algorithm: sha256WithRSAEncryption
1f:7e:a7:ad:0a:7d:ad:54:78:63:45:9f:1c:76:c5:0c:f3:e2:
1b:84:9d:70:d7:e8:da:1d:86:34:dd:1b:b9:09:b1:41:25:39:
90:f2:61:c3:2a:a0:d1:a9:f9:86:39:10:40:42:7c:15:28:9a:
ce:c4:e3:36:76:d5:d6:e4:84:fa:bb:40:c6:b7:85:82:66:8c:
a5:ed:34:21:2e:82:b0:cd:79:a1:c6:7f:71:6d:aa:75:b9:27:
4b:b2:04:c7:da:7f:23:81:11:67:29:7f:f8:4f:0a:29:6b:24:
ac:81:7f:ee:c9:71:05:a5:82:a4:54:98:bf:b5:dd:5d:4a:f1:
95:9d:22:eb:67:a8:b5:7c:6c:6a:1f:af:7b:70:86:80:78:93:
21:73:9f:50:4e:57:56:79:34:57:08:15:5e:8c:d5:9b:d1:e2:
71:22:67:6e:40:9f:b3:34:00:25:06:bd:e4:4f:7b:1f:b2:e7:
ba:a8:91:d1:ca:05:1c:e2:54:5f:e7:d3:06:3f:e7:8e:d0:79:
63:77:65:b2:61:2d:8a:3f:f4:b2:a3:51:58:b6:ff:e5:ee:10:
11:a8:6c:87:6e:96:bf:1f:28:a9:7c:53:4e:07:de:07:94:af:
eb:a6:b0:da:22:d3:0c:68:60:2f:78:89:2d:3d:79:fd:88:b0:
c0:6e:cc:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:27 2025 by rpki-client