Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094147a3-9d33-49eb-8c70-b86fab9e06fb.roa
File: 094147a3-9d33-49eb-8c70-b86fab9e06fb.roa (raw, json)
Hash identifier: HKiNicw9+r1OpyAkL+vUAiTWkM1iRzWwMz01ejC8iZ8=
Subject key identifier: 31:7E:7D:24:09:32:12:FE:96:E9:99:5C:29:D8:88:83:07:B3:FA:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7119F53D64372555E2070410C9F5C60C80E6F480
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094147a3-9d33-49eb-8c70-b86fab9e06fb.roa
Signing time: Fri 28 Mar 2025 16:01:46 +0000
ROA not before: Fri 28 Mar 2025 16:01:46 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:74c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:19:f5:3d:64:37:25:55:e2:07:04:10:c9:f5:c6:0c:80:e6:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:01:46 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:83:62:b9:cc:10:9e:5c:9c:e1:e7:ae:5c:
d6:15:03:fe:11:db:32:46:bc:a2:e4:38:27:78:e2:
50:d9:79:08:72:77:8f:f1:06:70:6f:c7:4c:23:c9:
2e:f0:d0:35:df:5a:d2:c2:07:e9:42:10:c5:40:b5:
7c:3a:ea:2d:75:68:dd:1a:90:5e:42:71:9c:9d:25:
a3:55:e0:90:12:45:7f:1e:e1:f8:dc:62:b8:35:e4:
41:f3:ed:78:ce:41:87:13:ed:36:82:f7:fc:10:12:
a2:65:27:bb:4d:ae:1b:6b:f8:a0:5b:32:74:0b:cb:
73:70:5d:fe:2d:cd:c2:f3:5f:37:a9:35:56:7b:2f:
71:5a:45:19:b9:b9:b4:0c:d1:7d:39:cb:16:1d:82:
1a:fe:2e:f7:21:c7:9c:46:7f:ce:3f:f0:c0:21:bc:
e6:ff:6c:ca:66:94:ac:d3:e4:11:a5:5e:3b:38:e1:
c1:dd:d8:0f:03:b2:90:43:1a:18:35:0f:6b:7a:7f:
68:68:90:87:c8:cf:49:01:e9:26:6a:73:ce:30:83:
29:8c:89:b9:a7:58:98:83:c3:dd:0a:c2:c4:38:69:
df:5c:9d:1e:52:fa:fc:af:c8:66:1f:2a:71:e9:58:
18:40:99:23:fd:cb:ce:9c:de:44:cd:d8:61:e7:81:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:7D:24:09:32:12:FE:96:E9:99:5C:29:D8:88:83:07:B3:FA:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094147a3-9d33-49eb-8c70-b86fab9e06fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b4:14:21:95:10:56:b5:0a:e3:8b:45:c3:33:71:b0:d1:21:
17:54:c4:68:7c:43:6e:86:b2:e1:6c:fe:6c:77:c5:9c:f4:73:
72:99:d6:2e:79:72:2d:56:d6:99:df:46:9a:1e:73:08:ce:6a:
ec:92:06:5c:40:df:52:a4:6d:fa:2b:ec:d2:f8:72:82:7b:c1:
66:44:15:fc:d2:7e:75:16:cf:d7:a0:e1:f9:90:e6:8a:aa:cc:
d2:e0:17:1c:64:08:b8:1c:19:eb:bc:f5:f9:11:be:c5:28:d9:
b6:eb:d6:90:a0:3b:fb:53:22:df:7a:49:e1:f3:64:65:64:44:
bd:39:04:eb:bb:3e:d8:9f:dd:43:ad:98:2a:23:79:75:6f:de:
22:d3:7d:f7:f2:17:6b:dd:d4:b6:1e:6d:01:90:18:b7:62:a1:
b7:aa:b2:f9:9a:38:48:79:c1:d2:b8:07:f1:a0:95:31:a8:bd:
52:74:39:46:45:05:60:da:a5:77:d7:56:e9:b3:20:51:7e:89:
ec:2c:e4:16:f3:7f:c1:15:82:51:ef:52:d5:49:e0:d0:f2:10:
e0:29:b6:6f:b9:54:61:9a:c4:05:22:63:1d:25:4e:75:a6:6d:
16:2e:16:65:48:14:9e:6f:53:a7:f7:55:93:b6:21:76:95:51:
3e:f9:49:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:25 2025 by rpki-client