Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
File: f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa (raw, json)
Hash identifier: 2cKCJOpZu+FRAWs+WfoD8Q7YmDUBiEpJzJK2//MFz8c=
Subject key identifier: 93:6A:3F:5C:A1:53:0A:C5:02:0B:EC:69:E4:E3:FC:8B:65:C8:8F:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 443928663BF0E4BF4CF2BDDEFB08BA6F35907B6A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f16:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:39:28:66:3b:f0:e4:bf:4c:f2:bd:de:fb:08:ba:6f:35:90:7b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7850c05043c5957ba7fc7ec1e5a10456c8617e4e358afc843b1a571e12ca419d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:54:b1:d1:49:43:de:c1:0c:e3:a2:b2:79:
99:5d:ad:27:29:b3:23:14:c2:8b:d5:b9:2f:ef:df:
77:0e:ee:ff:c4:60:42:20:c8:00:57:1a:4f:0d:4b:
72:8d:20:f4:31:2b:2c:37:e9:2e:7d:ad:d3:4d:b6:
c2:eb:94:c0:b4:d9:c9:3e:f5:c1:48:e6:36:7c:87:
40:dd:9f:88:69:4e:8b:34:bc:fa:e5:ab:c2:53:d4:
5b:25:9e:ab:29:d2:ff:d8:68:48:3f:aa:e5:fa:33:
93:37:3b:97:1d:8b:5a:4a:c7:58:4b:76:14:d1:94:
06:1e:3a:70:21:8d:c1:d4:65:b1:d9:a8:64:34:31:
d0:fe:14:6c:bb:47:05:8a:c5:ea:2b:04:49:ed:a8:
d7:c4:c1:a2:24:8c:54:49:51:04:9e:7b:17:77:4d:
eb:24:62:2d:29:3d:ea:32:0a:0c:2c:a2:1b:b1:92:
9b:1c:e8:2e:82:86:72:33:0c:e5:a7:e9:17:24:f4:
f5:26:c0:3e:d9:3f:d9:4c:b8:ee:fb:a3:3b:6d:39:
20:d2:90:2c:15:01:0e:4e:ad:cb:65:a7:47:16:2c:
15:09:78:64:8c:9f:ff:3e:38:02:92:d9:7b:e6:83:
8c:7c:73:25:18:8e:d0:ad:96:c3:24:ec:fb:0d:9c:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6A:3F:5C:A1:53:0A:C5:02:0B:EC:69:E4:E3:FC:8B:65:C8:8F:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f16:c00::/38
Signature Algorithm: sha256WithRSAEncryption
c8:5d:91:6e:38:fc:92:f6:2f:96:91:49:25:af:67:f5:e6:87:
95:52:3f:b6:cd:19:ec:95:6a:36:d5:71:9d:75:b7:ec:5f:ae:
96:24:4a:cf:d4:a7:0c:89:01:93:ef:77:77:3d:99:13:9b:68:
47:23:9c:f1:bd:b1:be:92:f3:7d:0c:ab:9f:6b:6d:a6:36:34:
00:a3:7a:dc:55:d2:96:0f:22:f9:3f:99:d2:d5:ef:b5:32:c9:
94:88:df:e0:cc:d1:18:9e:bc:3f:74:80:d6:61:43:40:50:b4:
57:c2:e5:22:9b:1b:b3:75:5c:4f:b8:21:0c:02:af:25:75:fe:
01:29:2f:a2:49:da:64:c3:c9:d6:ef:1e:28:c4:12:de:08:e0:
6d:56:c8:fe:55:e9:00:35:73:a8:2b:d6:eb:b4:12:b4:0e:60:
fe:62:c9:bc:ee:63:95:bc:28:68:fd:bc:9e:c2:ea:5b:38:b5:
42:6b:e2:1a:c2:c3:d6:e9:61:ed:57:c0:14:52:d5:18:78:03:
bc:c4:34:75:08:cc:0d:5d:9f:20:47:ac:7a:63:47:1c:be:66:
d8:48:db:16:db:36:9f:e2:5c:5e:00:7f:f5:e1:4c:67:6f:2c:
08:f0:be:00:94:60:de:09:4f:13:e1:16:d5:8c:72:85:b9:63:
af:bc:90:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:30 2025 by rpki-client