Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa
File: e6a63971-980f-41ea-9872-abd64ff5639a.roa (raw, json)
Hash identifier: z5Nz+OIT93YbPeHxS3/Ex6Re2Jz57MqI5WWoXWTxcbE=
Subject key identifier: 5B:B8:BA:5A:12:A1:C7:D0:A6:7A:0D:41:B2:A2:AD:CB:CC:9E:C7:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7405A054D9E4C75EA294896F60765D3C249F4431
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff5:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:05:a0:54:d9:e4:c7:5e:a2:94:89:6f:60:76:5d:3c:24:9f:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0a3c02774bbe92480a7209c85be3d82d7de98c57295b2540876a489a1c66ea90, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:26:4b:5f:62:ce:d9:cd:89:e4:ad:b7:20:
04:4e:cc:b0:a2:17:d9:22:1c:84:a1:0d:03:35:9e:
3c:c1:e0:35:d3:1b:01:e1:35:64:1c:07:75:8f:15:
00:4a:cf:16:1d:e6:ad:c0:ca:39:ce:63:a7:1d:a1:
b7:5f:d3:13:93:57:38:1a:7e:4f:d0:df:ac:40:9a:
44:a5:c9:2b:f7:d5:75:c6:4c:78:ec:a6:72:72:1c:
fa:b9:46:16:fc:92:14:fb:56:be:7e:b7:ed:50:e7:
8c:db:6c:5c:3f:73:91:82:90:f3:3b:65:98:3c:d7:
0b:b7:73:59:0b:ff:02:40:c9:5c:35:16:46:dc:2f:
15:c2:5f:dc:10:73:22:f4:2c:3e:5b:98:38:45:23:
a7:44:d0:07:d6:6b:7c:d7:56:9f:25:0f:80:99:6c:
b5:2e:d0:ba:a3:85:6b:b3:3a:28:55:75:34:e0:c3:
bc:c9:29:95:a1:a9:0a:7e:8d:9c:5d:eb:30:e8:77:
4e:5b:f8:2a:0f:8a:3d:e2:ae:a0:18:7e:1a:96:f9:
bf:b8:70:d0:1f:72:27:b7:38:25:77:09:36:16:a4:
30:70:17:fe:6b:53:a8:45:f6:44:2b:d4:6c:61:a2:
70:80:53:2c:6b:bb:a4:c0:9f:95:39:26:d2:e3:a2:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B8:BA:5A:12:A1:C7:D0:A6:7A:0D:41:B2:A2:AD:CB:CC:9E:C7:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:2000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:1b:8d:11:bf:ad:8c:4f:7f:5a:5a:16:27:95:28:db:41:ed:
74:c7:15:ec:dc:0d:00:98:a6:c0:ac:94:97:d6:66:58:29:f9:
ef:2e:ea:d3:34:cd:7c:55:06:4f:6c:20:ec:dc:94:89:65:5e:
80:3d:fb:df:c8:8b:6d:b3:a8:1f:f0:88:c5:97:db:8f:be:8b:
01:d4:dd:1c:a3:b2:e8:78:cb:84:8b:90:0d:f5:95:d5:2b:b2:
01:0e:98:b3:27:72:66:54:c8:48:4e:a0:a6:02:3f:eb:81:37:
dd:72:61:40:43:33:5e:84:5c:2e:7b:b0:2d:3e:bf:f7:9d:7e:
e5:b9:e4:66:7d:cf:15:67:ff:d7:26:ea:aa:dc:15:e1:93:bb:
3e:e8:0d:d0:78:ad:8a:0b:72:bb:55:90:81:cd:dc:6f:1d:bf:
93:ac:f2:4e:74:6f:a8:51:5a:58:64:30:5a:23:3b:9d:49:eb:
d1:70:59:80:c7:2f:3c:3b:7f:f2:07:8e:3f:4e:36:ab:95:d0:
2f:c5:06:0b:e4:29:a9:65:bb:5b:1c:38:b1:2f:96:c3:ab:1b:
2b:3f:48:50:11:b6:c4:36:20:8c:8a:c5:ab:11:21:ce:e0:c0:
36:2d:f1:d2:c9:fe:0f:5a:8f:e1:b7:6a:90:c7:c4:a0:78:05:
d7:34:c9:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:47 2025 by rpki-client