Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f04d57fe-7a5c-4b38-8f4c-48ae5fa96f8c.roa
File: f04d57fe-7a5c-4b38-8f4c-48ae5fa96f8c.roa (raw, json)
Hash identifier: ge4VTmrA5qhKrjpaTW2/tqvxa49YD0iUs0VKF/45h50=
Subject key identifier: 38:AE:9A:67:D8:5F:7C:0B:0D:D8:4C:18:5D:81:7C:9A:95:38:CB:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 213368335B3C93CE3C25B1D709E63748F77B8635
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f04d57fe-7a5c-4b38-8f4c-48ae5fa96f8c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:e0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:33:68:33:5b:3c:93:ce:3c:25:b1:d7:09:e6:37:48:f7:7b:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=e2434fa04701539550d159b4281fdd92435a0cb192bb3cfcbc456f42eef34476, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:4b:51:ef:9e:7e:9a:bc:86:ed:d8:76:27:
ed:71:04:2e:74:5d:2d:7c:49:57:c2:f3:8a:f4:02:
80:78:1f:ee:8f:41:38:0e:81:ec:67:c2:46:7f:35:
2e:08:82:f2:10:f1:fb:e1:00:fc:c9:39:db:e6:59:
5e:5d:df:01:bf:e5:f3:cc:0d:25:8d:5d:3f:24:78:
90:5d:f2:b7:13:1e:21:08:3e:eb:72:43:72:f6:5d:
15:05:c6:bb:16:2e:3c:5e:be:12:7b:a0:d3:d1:83:
23:8e:9d:11:60:b1:14:71:8d:ed:5a:56:f5:28:97:
65:d5:4e:a9:c0:2e:0f:01:fd:cf:a3:0a:16:1f:d9:
14:ca:19:ce:eb:05:8a:ec:70:64:65:91:b5:53:ad:
6d:58:be:97:c1:39:cb:1c:bb:c2:95:fc:0a:d4:97:
6e:bc:a7:b5:de:1f:1d:2f:80:96:1b:8e:4a:83:cb:
65:b9:93:df:16:e5:07:63:9d:06:cc:c6:c6:33:f3:
3f:9b:fb:84:aa:2d:ad:15:5b:18:b0:71:df:57:62:
95:e6:b5:95:40:a6:fb:bc:31:69:9b:6c:e3:3f:f6:
f4:5e:29:9a:06:a6:06:cb:0b:64:84:1c:b3:a4:cc:
68:dd:d2:7d:aa:5e:f4:3f:f1:99:3a:7b:7e:d4:c3:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:9A:67:D8:5F:7C:0B:0D:D8:4C:18:5D:81:7C:9A:95:38:CB:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f04d57fe-7a5c-4b38-8f4c-48ae5fa96f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:69:2e:2d:eb:c4:87:91:59:92:67:48:42:79:d8:50:95:a9:
f7:ce:da:4d:2e:f8:ad:0e:57:71:bd:d3:2a:64:e3:d7:79:ac:
dc:42:b7:ff:ad:32:2d:f4:90:27:48:37:7a:4d:85:4d:24:7a:
02:74:c1:e9:41:3a:e9:cd:1e:4b:2c:2f:37:f1:ae:a8:cf:97:
1e:d4:61:ed:1a:57:86:4e:f7:b0:ab:73:82:73:40:ab:55:4d:
65:9a:26:d4:8a:21:56:55:0b:0d:81:5f:41:4b:ba:b4:64:68:
df:ff:98:51:81:02:15:4b:8c:f9:5a:ad:5c:01:29:e3:e6:26:
69:ee:0f:35:17:4c:0f:52:58:f0:e0:98:cf:a8:75:2e:43:5b:
5a:15:94:05:e7:7a:22:47:92:a5:93:b9:02:61:df:8d:47:9b:
ff:24:2d:c1:fe:82:09:2a:8a:d5:c9:4e:1f:86:35:5e:3e:e7:
cb:09:c4:de:2f:c3:41:c8:3f:d4:18:8d:62:82:57:ab:9d:ec:
c2:36:f7:13:f0:0c:e7:b9:32:93:64:84:c3:12:7e:f5:ea:bc:
2e:0f:b2:a1:99:eb:b9:ee:d7:86:9e:56:30:73:30:2d:b7:73:
5b:10:15:0e:8a:ff:a5:f7:e8:6f:7c:79:83:1f:79:ac:b2:84:
ed:ad:66:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:11 2025 by rpki-client