Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb10fb94-3d16-4b9e-8d6d-96abb41130cc.roa
File: fb10fb94-3d16-4b9e-8d6d-96abb41130cc.roa (raw, json)
Hash identifier: Fze6A99mFJG8A8WTc7yK/k80zL2odobQZsqMAmv6ACM=
Subject key identifier: E8:0F:11:15:AC:84:7C:57:CF:27:61:2D:CD:20:55:EE:F6:69:1F:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4EBA1A4C5E00A40521483EA114605F5F845956D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb10fb94-3d16-4b9e-8d6d-96abb41130cc.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:7400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ba:1a:4c:5e:00:a4:05:21:48:3e:a1:14:60:5f:5f:84:59:56:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9922eace600b2567fb4075aba37b79fdbbf5f3055ec976d66b48a15e35336fd6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:3b:e4:f4:02:d3:39:dd:59:ec:c1:18:32:
fd:96:52:a9:c4:c3:66:98:44:d8:b0:9b:28:e1:b0:
d6:bf:2c:96:16:80:59:34:16:85:06:08:28:43:0b:
aa:88:de:48:59:4a:35:d4:eb:42:9b:70:27:13:f8:
43:6a:01:5d:d7:a1:18:eb:a9:32:ce:ca:89:94:5e:
65:e0:5d:4b:9a:e0:fc:f2:4e:b0:8f:01:85:0a:b5:
f8:aa:b9:70:de:58:4e:21:ce:49:ed:32:59:2b:3f:
0d:b6:c4:75:e4:08:10:00:57:85:28:dd:8a:a9:cb:
d7:ca:10:1e:cb:fe:e4:12:0f:bc:8e:4b:b1:90:6f:
90:4b:37:f8:19:fd:2e:e0:49:ed:cb:1c:2a:18:59:
31:38:e4:b4:bd:9c:b9:4f:75:46:fb:76:9d:49:43:
93:25:fa:73:a1:94:90:e7:41:eb:1d:0e:a1:63:2f:
88:d3:02:18:9b:a7:5d:02:d6:ca:b8:b7:a9:cc:9f:
4b:91:fe:6e:25:11:37:42:35:c8:57:43:df:07:c4:
c8:1a:1a:81:ce:ff:1e:b9:7d:64:72:e5:df:53:bd:
e5:d7:39:10:a0:53:23:ea:dd:63:a1:a6:0f:c9:57:
13:9c:0e:1e:45:14:40:11:cd:b6:46:7a:ca:63:1b:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:11:15:AC:84:7C:57:CF:27:61:2D:CD:20:55:EE:F6:69:1F:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb10fb94-3d16-4b9e-8d6d-96abb41130cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:7400::/40
Signature Algorithm: sha256WithRSAEncryption
bb:b3:40:86:27:6b:7c:47:1e:4f:31:c1:44:e2:7a:66:97:e6:
1c:b1:94:e3:6a:24:ed:e4:17:69:9c:06:fb:33:5e:83:80:e8:
18:d8:c4:3f:9a:a4:a4:22:3c:20:6d:9e:34:15:f7:5b:f7:96:
b5:51:d9:02:0c:ae:18:9d:33:a2:08:02:5b:be:24:38:a2:b6:
e7:60:9e:1e:54:f9:03:18:64:5d:33:20:83:1c:1d:c6:af:7f:
25:18:61:9d:a9:54:2f:7b:ba:a7:29:f2:b6:01:ae:a7:c2:fb:
fe:e9:a8:69:21:d9:1a:70:5c:15:24:ec:32:ad:fa:fb:18:b5:
68:87:70:5e:fd:1d:03:57:71:b5:ae:06:ae:5f:2b:5c:19:07:
4b:28:54:a5:66:3c:c8:e0:8e:48:de:7b:54:6b:80:e3:da:ba:
13:80:6a:e5:3f:e5:6c:63:c8:d1:a1:77:9d:3e:a6:4a:ed:59:
7e:1f:b5:59:ad:aa:64:52:5f:66:90:e8:1d:80:a0:c6:56:b4:
e9:82:d3:e6:56:0a:ae:56:3c:ab:84:9b:af:e8:8e:4e:fc:2a:
0f:b4:c3:c3:ff:46:3e:6f:17:88:15:d7:46:0b:57:17:f0:36:
12:b2:50:68:9f:67:90:4c:c1:0a:85:c3:92:be:b6:59:16:c3:
a2:21:c2:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:48 2025 by rpki-client