Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04a1d081-ae93-459e-88cf-fe92a8d30013.roa
File: 04a1d081-ae93-459e-88cf-fe92a8d30013.roa (raw, json)
Hash identifier: gJLtmxpbdYC9itH8j4AoWDwZ049BOdTgz32jNLrDO7s=
Subject key identifier: 1F:07:AB:C6:FB:44:E0:F5:45:5E:9C:92:15:7D:F0:99:7B:42:EC:1D
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6A7EF37BE340C3373686D451B609D18C2D038877
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04a1d081-ae93-459e-88cf-fe92a8d30013.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:546::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7e:f3:7b:e3:40:c3:37:36:86:d4:51:b6:09:d1:8c:2d:03:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=d3cb23fc5cb9b5db60b963e1375034e93afc2d6f73ef15f04ba848fdc180cd8b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b8:f5:a8:e7:54:f1:d6:14:60:ce:a8:87:df:
72:64:7d:f2:7e:3b:6a:c6:c0:95:fb:4e:47:aa:72:
b8:61:49:1e:2b:5d:ab:51:46:d6:ce:a3:89:93:f5:
54:85:1d:75:5c:78:64:4e:6c:d7:5b:1f:72:06:ed:
7f:61:f1:c8:0e:7d:be:a3:4b:7d:41:32:e6:f4:ef:
b1:9a:67:45:9d:ae:0e:53:9b:87:17:2c:66:96:72:
cf:4e:d9:4a:5a:5a:4e:56:81:ac:f7:7a:13:45:55:
52:0a:2d:dd:47:d8:72:68:11:2b:81:15:d7:90:f8:
4b:d8:b4:f2:c0:51:c4:69:c2:ed:a7:ff:9a:5a:76:
62:f2:b2:99:aa:81:e3:81:79:d0:8b:84:68:b3:8b:
bd:f6:67:e2:26:a3:25:25:68:58:99:06:67:1b:1a:
c1:fa:7f:e5:5c:8d:8b:d1:14:96:af:0a:32:41:fa:
32:4a:0e:b1:d8:97:b0:b6:9c:02:b2:6d:c9:69:a0:
36:89:a0:28:42:5f:15:fb:39:24:04:2f:1d:ac:de:
60:13:03:19:db:db:b3:ba:87:5a:fa:37:95:77:70:
91:55:43:12:00:07:4f:43:c1:30:60:e8:98:75:77:
f3:7e:22:85:17:05:98:27:3b:8b:8e:53:34:1d:71:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:07:AB:C6:FB:44:E0:F5:45:5E:9C:92:15:7D:F0:99:7B:42:EC:1D
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04a1d081-ae93-459e-88cf-fe92a8d30013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:546::/48
Signature Algorithm: sha256WithRSAEncryption
6e:85:8f:70:c6:06:3b:e5:ae:1d:8c:da:a3:56:66:87:29:63:
a6:c4:e0:c3:7a:7d:79:86:dd:fd:7a:f6:d3:48:71:c7:9c:84:
b6:00:f6:74:f2:6f:56:49:ab:cb:b9:ad:86:96:1e:53:0c:94:
44:6f:7a:27:df:07:72:4c:8e:c6:40:d8:8d:23:4a:b8:25:bd:
d3:73:7b:25:c1:f6:e5:1b:da:9f:7b:08:7c:46:52:8c:fd:3f:
6c:ab:a4:49:3c:73:22:31:7a:f5:a1:86:bd:df:50:92:46:7b:
ff:79:ce:a4:7d:5e:01:c9:a4:fd:6c:04:e8:f1:e1:d4:78:26:
aa:0d:ea:cd:c7:40:1b:66:4b:82:ab:91:cb:0c:b5:5d:c6:0d:
c7:0b:46:70:90:46:4a:96:0b:6b:4d:56:00:bd:ea:2f:f8:35:
83:25:2d:43:76:19:6a:6f:b7:3c:7d:d9:03:94:ea:28:59:7f:
59:91:61:bf:53:af:98:f4:12:51:74:1b:30:54:91:46:de:63:
d0:15:b7:d8:1e:2a:62:bc:32:b2:28:62:be:28:ca:24:5b:05:
07:8e:a3:ea:4b:95:98:f3:d4:73:bb:e9:3e:50:9a:dd:b5:ff:
6e:58:39:1a:d2:4b:2d:79:42:fe:f7:e4:65:bc:7b:6f:89:cc:
93:ee:9a:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 7 18:39:53 2025 by rpki-client