Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa
File: 9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa (raw, json)
Hash identifier: W5BJnZZ1Oag2ktkNaU1DiH35jKqFKsjWaBP1W29d5Ak=
Subject key identifier: 4D:A6:ED:53:3B:6B:79:FB:DE:BD:F6:B0:A4:D2:AA:C1:3F:1C:1F:69
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6FDEF36F37C8AF128203FC7438CD26CC2239E4FD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 19047
IP address blocks: 2605:b940::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:de:f3:6f:37:c8:af:12:82:03:fc:74:38:cd:26:cc:22:39:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=5df74afcb01856a4c0dbeec69e0d7fa384f43f79368c4fabb3e9a273044c4a26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:03:fa:1e:89:bb:fe:d1:03:37:75:2b:8d:
3e:f8:06:85:9b:e6:c0:7c:ff:e9:ce:89:22:29:19:
2c:71:a6:56:e9:cc:85:db:ae:1d:fe:99:99:07:39:
42:6d:a4:e5:7e:e4:3e:f9:2f:af:ea:9f:17:fb:e6:
48:8a:12:1b:17:80:5d:c1:0d:dd:bb:8c:cc:07:f2:
30:8b:d6:1b:64:50:ad:55:e8:2b:74:ed:33:86:aa:
cd:94:c1:58:6d:ca:05:3e:f1:b0:e5:24:cb:f1:f2:
2e:dd:34:a7:d5:7a:62:7f:cc:0b:96:4e:8e:74:38:
f7:d9:24:fb:13:b5:da:92:be:18:af:50:3a:d0:ea:
ac:5a:76:98:0f:98:42:08:37:99:9e:6f:66:da:97:
7c:26:38:ea:ba:80:6b:82:ff:d3:61:86:52:b4:0c:
56:e0:e3:69:a1:92:ad:49:95:c3:18:73:50:67:db:
a4:c9:b9:ee:94:44:31:56:1b:26:e4:2a:08:64:59:
06:3f:0f:95:cb:eb:5a:c6:97:7e:34:94:52:eb:45:
20:94:69:97:49:40:92:bc:95:c9:ca:03:92:86:0c:
ff:52:69:0a:85:b6:96:d2:20:43:93:a4:73:66:98:
e7:da:92:e5:9c:c8:79:4b:df:c5:b3:a2:65:9b:64:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:ED:53:3B:6B:79:FB:DE:BD:F6:B0:A4:D2:AA:C1:3F:1C:1F:69
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:b940::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c9:06:57:17:9e:99:02:2d:34:79:b7:2c:c5:09:5a:c3:16:
e7:3f:86:70:5d:b6:f8:ca:d1:c3:a0:06:30:25:02:62:85:d1:
e7:e3:04:ca:b5:56:23:0a:db:e1:65:0f:6d:e8:61:59:b5:46:
3d:a9:23:bc:8a:75:6d:07:93:ca:61:59:ac:b3:e3:eb:00:ea:
f0:46:46:48:46:4d:a9:9f:32:83:52:01:bb:90:34:c9:e1:bb:
a0:1e:5f:b6:ae:1d:ca:52:77:db:4f:ac:c1:1c:9f:54:5c:2a:
a6:a5:5d:65:5a:4e:92:14:91:3d:77:57:87:55:dd:f5:e4:6c:
11:84:d2:93:ff:c2:17:ed:1f:51:c8:ab:0a:e9:9a:68:77:48:
31:29:30:9f:59:ae:1a:6d:f8:29:9b:ea:5e:09:df:e2:86:ec:
81:4f:5f:f2:35:5d:ad:92:4c:49:69:c8:b3:5b:1f:2e:75:3d:
8e:17:5d:d7:f4:00:2f:a8:11:64:0d:fb:b8:84:df:42:79:e8:
8d:4a:61:1b:a9:19:b3:e5:dd:27:a4:d6:6c:7d:03:1a:99:9c:
3d:6c:3a:fd:b9:8b:f1:ac:63:8f:40:46:18:94:0e:98:00:86:
77:73:87:ca:53:d2:58:73:23:2c:40:64:66:57:ac:e4:98:c8:
9f:72:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:33 2025 by rpki-client