Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa
File: cd3025ff-3653-4276-a530-1fa2eed87e53.roa (raw, json)
Hash identifier: QVix+yGn+iI2dN7jq8dFpE8aeEThO6+AhUBcEYVmmfM=
Subject key identifier: 72:31:22:F2:77:76:5F:4B:5A:77:9F:F6:9A:59:7C:E0:F6:EB:8F:02
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 589A16766FF6962E90A4265821C83AB10AD12D71
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2620:107:3000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9a:16:76:6f:f6:96:2e:90:a4:26:58:21:c8:3a:b1:0a:d1:2d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=fe1f44e4aad18f90c9cbea39767aabfa2b1d3aec9f74c9b039b0bebb698f14e3, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:30:e8:22:1e:35:4e:55:67:ca:2c:6a:e2:
c8:b1:a8:89:10:ff:4a:29:9d:37:f3:f0:e8:06:7e:
35:90:cd:9b:d1:26:4a:ee:a8:bf:50:e1:d3:8e:08:
6b:93:4c:57:b3:c4:67:bb:f7:e3:31:bf:07:c7:67:
16:35:29:a5:eb:b9:a1:96:27:db:44:31:c9:02:7c:
cc:34:00:dd:19:74:97:e2:10:f9:ac:b1:bc:ba:8c:
fe:29:cc:d0:a2:f3:97:52:b8:d5:ad:c4:30:2f:86:
4f:db:77:7a:26:4d:c4:8c:23:80:b7:0f:77:b1:2d:
f4:a2:07:2e:ca:4c:8e:bd:b4:0d:e7:79:8d:21:d0:
4e:3a:18:24:e1:9a:3a:a9:7b:3f:95:8a:ae:41:8c:
1b:53:ac:5f:78:bc:4d:6e:10:f6:b7:08:51:01:9f:
5b:74:1a:e8:ab:92:2d:69:71:7e:7d:3f:d6:14:2f:
d8:8e:95:b7:74:3f:14:bb:87:1f:94:16:42:e3:54:
59:e2:dc:e6:2d:9a:fe:b7:1b:4e:82:e4:b4:b9:eb:
f9:11:a0:89:9c:c4:a6:ce:50:46:ef:e7:2e:75:87:
ee:6c:0d:02:24:2b:72:d1:91:c4:3b:4c:ec:42:8f:
4e:44:92:f1:c5:e1:8e:15:cd:1c:5c:11:56:43:84:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:22:F2:77:76:5F:4B:5A:77:9F:F6:9A:59:7C:E0:F6:EB:8F:02
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:107:3000::/44
Signature Algorithm: sha256WithRSAEncryption
97:f0:bd:08:d4:f0:d2:41:fc:63:cd:00:6b:e7:50:4b:fc:7b:
22:1e:db:f2:3f:54:34:39:1a:60:f2:d3:69:c6:c8:d0:ad:77:
be:73:e3:7d:70:76:8c:94:d3:47:cb:67:54:d1:81:23:57:72:
76:0d:96:2e:1a:23:11:88:eb:fe:43:0c:79:25:d9:c0:eb:e9:
bd:79:dc:62:f1:c1:a0:25:c3:4f:4f:d7:40:70:de:a9:05:52:
97:1e:57:3c:c0:e0:24:70:16:c6:81:10:f4:28:60:f7:59:3a:
d8:b1:9d:88:28:c2:78:1e:60:e3:a0:57:2b:2a:cc:1d:0e:1c:
9c:67:86:be:1a:54:f2:a8:b0:ae:09:09:8a:40:5e:ec:dc:ad:
73:16:fa:c6:09:74:50:08:50:6b:39:33:2a:7e:ff:4b:a3:a4:
fd:28:53:e1:39:1f:38:86:7c:9d:9a:f0:f5:f8:2f:1f:ad:8a:
8b:53:2e:cc:20:9e:e8:ff:14:af:17:15:dd:4c:a1:da:a0:ea:
1a:78:b3:25:02:37:74:e1:f2:b6:3b:e8:63:87:9e:89:13:78:
17:4e:ac:69:ac:1a:7f:47:0f:88:49:f6:ff:82:3b:d2:1c:cf:
99:e0:f8:5f:50:af:5f:a5:86:b3:dd:0c:c2:59:3a:1b:20:36:
62:1e:56:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:56 2025 by rpki-client