Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa
File: f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa (raw, json)
Hash identifier: OauKvKLpx7acdDx2FxvtO/Hhd4xRN2fnfGl0bj7W3ps=
Subject key identifier: F1:27:96:F0:0C:1F:57:CB:77:31:9A:CA:B8:7B:C8:16:45:8D:53:87
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 617C869E4A28D0C1D78F81A02785858FA5FAD769
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 801
IP address blocks: 2631::/24 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7c:86:9e:4a:28:d0:c1:d7:8f:81:a0:27:85:85:8f:a5:fa:d7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=f1972664269a620da83c793920dde30a982e0e2dfda6b47ef616c47a3b997764, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:c6:73:ca:5b:53:08:72:3a:1d:8a:cd:ca:
5d:8a:70:aa:f9:2c:ae:a9:7e:de:16:ee:b7:f1:b9:
27:9a:d2:55:6b:6f:ca:8d:bf:be:f9:0d:0b:6a:23:
40:0b:2e:ef:5c:06:61:b9:c4:89:9d:33:41:95:50:
8f:78:eb:48:71:9c:9e:51:16:79:7c:d1:cd:f6:b5:
14:ee:ac:03:95:65:d6:d4:0b:9c:28:f9:d2:4e:6e:
df:12:63:d3:b2:18:c9:20:41:20:2d:10:ae:ee:1c:
42:8b:04:29:c2:23:87:bd:bd:59:a4:c0:8f:23:f3:
bb:13:6d:4c:4b:d6:27:5c:26:0c:b9:ca:ee:47:9a:
19:5f:74:0e:6a:ba:1d:e4:e4:ff:7e:14:f3:62:65:
0b:11:05:ff:16:d2:29:da:d5:dd:ad:62:e6:30:70:
d9:28:1c:21:b9:5d:27:f3:ed:f6:0c:a9:79:87:04:
cd:cb:4c:c0:50:42:c6:29:24:ee:b0:f6:e5:44:21:
0b:22:ac:5d:b4:14:a4:12:85:14:fe:d2:2d:7f:33:
56:40:bc:66:19:4d:95:25:b1:ee:4f:71:21:43:2b:
2c:f1:87:19:26:0f:4a:61:6f:6b:8c:4f:ea:78:2e:
80:2f:f3:46:3a:21:da:bd:37:b3:63:e6:02:d3:61:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:96:F0:0C:1F:57:CB:77:31:9A:CA:B8:7B:C8:16:45:8D:53:87
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631::/24
Signature Algorithm: sha256WithRSAEncryption
66:b8:aa:7f:1b:11:43:ac:03:d6:4a:5a:bf:2c:69:c0:6f:d3:
53:eb:5c:4b:ad:d8:5b:31:ac:d8:a0:51:da:b9:22:94:24:5e:
3c:48:75:1f:c3:54:08:74:23:09:43:b0:1d:9e:22:ef:54:c2:
c5:2e:3a:e1:22:f5:3e:77:98:1f:83:9e:e8:7e:ab:8e:be:8c:
0e:97:41:81:b9:4c:a0:f5:5b:bd:85:ac:e6:d4:1c:d4:bb:01:
ab:75:0e:37:78:56:f1:c9:fc:07:0b:37:df:41:9c:b7:6a:80:
72:8c:38:27:4f:7a:21:4f:a7:b4:a1:cc:dd:ac:16:4c:a1:80:
6b:73:64:6d:67:33:0f:1b:05:7a:1c:54:bd:31:4d:01:69:29:
b4:d0:e1:f3:06:17:e0:c3:68:45:5d:17:98:8a:09:e7:bb:9c:
f3:40:8c:e4:7e:a4:c9:e1:9a:77:79:50:08:e7:cb:9d:04:b3:
5d:50:a7:ad:d1:3f:ce:4f:17:f0:97:8d:34:66:cb:9c:0f:71:
37:01:b9:df:bf:72:8d:2c:a7:23:10:94:ee:92:b0:ee:41:d3:
8c:b6:dd:99:94:f9:ef:d0:69:b2:11:8f:08:a7:a3:b5:ff:33:
80:00:ad:f3:63:5f:2c:32:5f:50:fb:67:4f:14:48:72:71:25:
6c:39:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:22:26 2025 by rpki-client