Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff5e0b2-3bfd-4a74-b978-4ff516262357.roa
File: 0ff5e0b2-3bfd-4a74-b978-4ff516262357.roa (raw, json)
Hash identifier: nxAq5Gw0ii0ghkOc9iWXurj90LMStQJNqN74yGTqhWE=
Subject key identifier: 02:AC:23:1D:E6:4B:47:F2:34:38:56:AB:12:F9:8A:48:B5:07:52:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63F2545BD7E70933A2F5C8C6A8A7CFDADBEA4D34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff5e0b2-3bfd-4a74-b978-4ff516262357.roa
Signing time: Fri 28 Mar 2025 16:10:56 +0000
ROA not before: Fri 28 Mar 2025 16:10:56 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff5:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f2:54:5b:d7:e7:09:33:a2:f5:c8:c6:a8:a7:cf:da:db:ea:4d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:10:56 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:b8:02:6b:dd:c2:34:65:51:ed:cf:b1:89:
43:86:6c:22:fa:11:58:a2:7f:71:19:e3:28:e2:2e:
c7:5f:d3:e5:e4:3d:ab:7d:20:41:d4:26:ff:2a:79:
97:0a:7c:de:dd:d7:c7:ae:a3:ab:d7:95:08:7f:28:
f7:95:48:68:23:e3:34:0d:ab:99:c2:39:6a:86:e2:
df:b2:3e:91:b7:69:47:4b:33:77:60:ae:01:74:20:
53:2d:68:83:26:76:2e:fe:72:ae:bb:a8:b1:4c:11:
80:2b:74:81:30:6c:30:e5:1f:dd:03:22:21:dc:c2:
f3:13:10:5b:e7:71:3c:a5:de:fb:83:1d:88:1c:c7:
60:39:40:7f:29:90:fb:c7:f6:d3:a6:86:fa:12:68:
74:dc:fb:3c:b0:82:6b:85:1e:6f:20:32:61:9c:8e:
d6:b8:9c:dd:2b:67:be:63:9c:20:d3:05:30:6d:92:
89:a5:64:63:e9:07:24:f6:47:3a:8c:49:b4:bf:01:
10:f9:15:f5:44:9f:64:a5:91:b2:ee:fd:f6:3e:38:
62:47:a1:9f:4f:89:0d:a5:b5:e9:b9:f0:0b:14:05:
a9:20:6a:5c:95:8c:de:cd:f7:ff:28:74:cf:62:49:
29:42:5f:31:2d:c6:62:7a:17:58:60:00:36:b4:21:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:23:1D:E6:4B:47:F2:34:38:56:AB:12:F9:8A:48:B5:07:52:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff5e0b2-3bfd-4a74-b978-4ff516262357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:5000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:0d:20:bb:d4:b6:b3:27:51:50:7f:5b:fe:84:4a:2a:dc:ed:
eb:99:9f:65:8d:c2:c3:7b:de:43:e2:c0:6f:62:07:94:9b:fc:
57:de:55:dc:1b:e9:c1:87:87:49:47:71:1f:e4:ec:4b:47:cb:
2a:cd:26:2a:56:50:52:2e:43:aa:65:37:e8:b5:25:1e:42:69:
48:36:52:e4:f3:25:26:03:4a:7d:5e:7f:e9:42:21:73:e4:e3:
20:de:7a:be:f9:29:37:cf:ef:7d:ec:fd:62:77:1b:1b:9a:f7:
30:ec:95:58:41:81:a9:7d:22:5d:f9:3d:01:04:b6:29:4d:ac:
60:19:b4:ae:df:3b:28:b4:a6:97:99:3a:0c:4f:13:4d:a2:cc:
ca:ee:29:5a:a5:1a:38:9f:f7:61:45:c2:16:df:9c:e7:c3:f4:
6c:0a:94:21:ca:6d:9c:f0:d6:9f:a7:9a:f7:ea:66:a9:02:34:
a1:bf:27:b1:3a:24:25:a5:1b:7d:09:89:6d:d2:0f:00:5e:f2:
d4:3d:8c:45:3e:55:e1:86:f4:5d:73:3f:e4:86:42:dd:99:c0:
b4:39:01:1a:5f:33:3a:1f:94:bf:0e:35:8b:f0:ef:b3:48:38:
2c:39:6c:7c:e4:64:7d:59:d8:2a:44:18:2a:70:15:a5:6f:48:
61:af:a9:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:40 2025 by rpki-client