Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edd1223a-6776-4911-b74c-bf19916f1367.roa
File: edd1223a-6776-4911-b74c-bf19916f1367.roa (raw, json)
Hash identifier: Uv1ul36YLmb6Ect3/lyBc+EPBIaYUjYJozxYay0x/l8=
Subject key identifier: 7B:90:10:D1:46:6B:A7:EA:CE:59:93:52:98:4F:94:0C:A8:E1:D0:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FCD010063CCF53BB992E3C0EA22641B12229B24
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edd1223a-6776-4911-b74c-bf19916f1367.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:8070::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cd:01:00:63:cc:f5:3b:b9:92:e3:c0:ea:22:64:1b:12:22:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=26333712303e50f2a83cb65c641cd8a85dbdf746b8cfcdb7dee82a8ec3f05498, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:25:ec:24:7a:d9:00:3d:6a:b5:dd:12:b0:
fd:49:87:55:e3:d5:3d:e6:e5:04:40:8e:1f:f1:f8:
cc:89:2d:56:4f:50:8c:d5:cb:f4:88:b3:11:0d:71:
e5:e2:87:7f:83:96:bf:18:79:ec:2b:3f:68:eb:53:
50:06:be:a9:b1:ee:ab:96:cc:f5:09:0c:2d:10:b7:
1d:70:8a:fb:12:02:be:c5:71:be:ea:14:01:ed:57:
29:88:8e:6e:6e:19:db:2c:2a:07:10:e6:0a:8c:e5:
f4:61:7c:7e:b9:0b:57:16:cc:d7:d4:7f:34:2e:0f:
6e:8b:dc:95:04:16:82:0d:d9:53:af:6c:73:6c:a5:
11:6c:c0:2f:67:71:5a:1e:f4:47:f1:49:eb:11:a2:
b8:4b:dc:6a:13:dc:b9:01:9d:a0:50:2c:74:2e:3d:
4f:12:fe:47:4f:3f:0f:f9:3a:b6:66:4d:ad:bd:8c:
dd:82:5b:43:49:53:8c:a4:c1:fa:bc:17:bf:10:88:
e0:57:43:59:e9:59:3c:23:e3:9b:07:05:fc:23:f1:
7c:35:b0:64:a9:3a:63:cb:40:55:80:29:a4:c0:32:
33:ac:20:27:50:dd:60:68:2c:bf:b9:a5:64:3f:74:
f0:b1:71:fd:cf:b5:ec:17:65:d5:86:6b:ba:e1:48:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:10:D1:46:6B:A7:EA:CE:59:93:52:98:4F:94:0C:A8:E1:D0:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edd1223a-6776-4911-b74c-bf19916f1367.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8070::/48
Signature Algorithm: sha256WithRSAEncryption
7e:6f:8e:c0:0e:0c:46:f3:b7:15:b6:3d:74:4f:07:2e:17:37:
59:25:01:5f:c6:68:a4:bb:1e:8f:0f:ce:51:84:e6:62:9b:0e:
f9:72:61:18:04:17:0f:ee:f9:8c:2a:13:a9:25:f1:c5:19:80:
71:4b:d5:28:7b:42:de:e9:3b:86:6d:0e:a0:1c:3a:e4:f4:5b:
ed:a9:e6:ee:20:11:3b:88:ea:37:bb:35:ae:2c:ce:26:df:c4:
b0:cf:6a:b0:6a:81:d2:97:5b:51:9a:55:72:d2:59:18:54:72:
2e:38:3b:c2:02:5c:d5:42:9b:9c:74:9d:93:41:27:56:0c:bf:
ce:0a:a1:59:9e:e7:f6:be:28:51:55:fb:5e:71:43:4f:dd:a6:
2b:49:1a:a4:09:48:81:ea:ee:ba:ac:07:10:27:93:00:a4:6a:
c8:b0:e0:89:91:9b:1b:0b:f7:88:5b:1e:7f:7f:95:d2:56:9a:
08:6b:f1:6e:a6:24:dd:e5:9d:45:87:81:ce:c5:c0:37:2d:c4:
52:bc:3c:70:c5:4e:f7:ce:92:ce:3f:b0:1a:98:e1:d3:6a:ab:
a8:2c:ef:3a:be:8d:f0:00:c7:a2:b2:f2:ca:12:c3:e9:49:96:
13:dd:d8:d2:91:a9:8c:78:e6:b3:82:19:ab:b8:36:fa:1b:0f:
20:b5:3f:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:20 2025 by rpki-client