Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eba38095-a2fa-46c3-926b-3eae22565fa7.roa
File: eba38095-a2fa-46c3-926b-3eae22565fa7.roa (raw, json)
Hash identifier: O83wkQXsbSF/ciGA2to2ZKC6T9xYpCpmPgQHO910m4o=
Subject key identifier: 16:14:DF:A0:12:20:B7:20:24:1C:41:5E:2E:84:E9:6A:17:E5:ED:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 723BCA0CC05E0A234E625886ED31041D36CECDB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eba38095-a2fa-46c3-926b-3eae22565fa7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f13:4400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3b:ca:0c:c0:5e:0a:23:4e:62:58:86:ed:31:04:1d:36:ce:cd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=09f3bf2ae7de9606b86f3d3357382a6556cbdd300104d7daa7a0f9bc9ded94e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:52:06:dc:70:b4:b4:8c:a9:01:f6:ad:43:b9:
62:58:8f:6c:84:ee:a5:9d:21:b9:ad:32:a4:8f:e0:
44:ca:c4:35:09:ac:97:85:1c:ee:23:68:28:79:32:
79:cc:d3:f2:04:69:08:9c:4f:b6:09:e8:e2:0e:ec:
2a:d5:52:bb:61:b2:41:0c:dc:f0:7a:11:9f:f7:1a:
10:f0:3b:61:d3:58:0d:a2:32:94:d5:3e:97:e5:6a:
53:82:30:5f:e6:05:00:83:ca:a9:a4:44:54:32:b7:
b5:42:d8:9e:21:dd:ce:eb:9d:66:30:97:bb:c7:d4:
8c:6f:e7:9e:ae:2a:43:4c:ad:c8:24:d0:07:37:d6:
ee:84:a0:06:4d:e6:7c:7c:4e:a1:ed:a2:6c:99:5a:
2f:04:d5:12:cf:a2:53:07:0b:b0:50:6e:7e:aa:07:
0a:ea:b3:a0:8d:86:2b:b0:0d:17:cd:ad:4c:b6:85:
b7:e1:c4:fd:9c:7e:ce:34:d5:96:29:66:c2:1a:dd:
04:f7:1c:7b:1a:97:1d:8e:22:43:79:6f:f5:a9:83:
93:2c:56:d0:2a:4d:39:b2:f7:ea:c5:7d:bd:3a:e1:
6f:7b:31:6e:4b:57:93:18:b7:d4:7b:97:ca:b8:bd:
9f:db:76:ac:e0:e2:e1:f0:fc:7e:27:88:46:51:46:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:DF:A0:12:20:B7:20:24:1C:41:5E:2E:84:E9:6A:17:E5:ED:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eba38095-a2fa-46c3-926b-3eae22565fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f13:4400::/38
Signature Algorithm: sha256WithRSAEncryption
a3:1a:29:5a:d9:5b:8e:e6:82:67:cd:f9:27:0a:b1:74:bf:8f:
a9:8e:7d:0d:22:16:f0:4b:34:8b:55:3a:a4:82:1c:89:13:40:
53:29:be:64:23:6c:e4:42:ed:09:34:b2:a6:65:ce:2c:04:73:
be:88:62:21:9b:07:4f:b4:08:91:2e:b1:52:e4:0b:ca:f7:63:
c1:a1:d0:a9:fa:8d:0a:d7:8d:43:68:65:32:ae:52:29:44:42:
0b:81:d0:9f:e4:c3:1b:0d:7a:c1:fc:62:04:30:7e:32:69:a9:
71:b4:27:c5:fb:e5:94:2b:9b:e8:88:93:80:c3:95:e9:86:17:
e5:13:7e:09:eb:56:4e:5f:b7:9f:31:e1:0e:45:98:3d:27:7d:
cf:bd:74:b0:dd:a9:37:32:fe:91:fe:62:7e:cf:b3:88:c7:eb:
2e:c8:c1:78:c1:4e:a2:0e:f7:ab:39:bb:a9:d8:12:98:33:92:
4b:60:a0:84:19:d3:c3:c0:2b:cf:01:19:fe:34:a0:4f:69:d9:
a1:72:33:c3:0d:33:ff:90:ee:a8:d0:0d:c3:de:eb:4d:e4:be:
86:e4:9f:53:fa:43:2c:7e:73:d3:f2:6b:7e:5c:3b:9f:8a:e4:
c4:b0:99:bd:a5:39:24:99:dc:3d:2a:cd:5a:99:cb:79:eb:1e:
98:b5:3d:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:07 2025 by rpki-client