Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13d09994-f2ef-4644-8fc0-f2e52c858b32.roa
File: 13d09994-f2ef-4644-8fc0-f2e52c858b32.roa (raw, json)
Hash identifier: teekUACz8h7Y1+2Ij+MFakGJB+lb/GtcvDeTWeNa/6w=
Subject key identifier: AD:DB:F9:B5:88:A3:2C:05:3D:81:39:61:B1:67:D3:54:11:19:B1:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 529A4DEBFCE366835EE1C76A3449B206A7CBC4C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13d09994-f2ef-4644-8fc0-f2e52c858b32.roa
Signing time: Fri 28 Mar 2025 00:51:18 +0000
ROA not before: Fri 28 Mar 2025 00:51:18 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:2080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9a:4d:eb:fc:e3:66:83:5e:e1:c7:6a:34:49:b2:06:a7:cb:c4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:51:18 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:98:67:74:79:6d:34:48:3b:b3:f9:20:c4:
62:cf:e2:d8:6c:27:b3:41:bd:03:63:d0:4b:40:9a:
70:7a:76:20:30:10:de:a7:67:60:1a:89:5a:ef:01:
0c:92:fa:14:15:11:33:3f:27:75:8c:7b:55:85:71:
58:c3:b5:4c:94:5a:d3:d6:93:2f:32:87:bd:bb:07:
f7:c3:be:e8:27:10:0e:6a:48:df:be:fc:35:7b:9b:
de:15:28:b3:9c:8e:49:ce:3a:f9:d7:42:82:18:c9:
e1:cf:52:5d:41:24:75:55:94:67:e5:42:d1:50:28:
b0:c9:7b:fb:2f:62:d3:f7:ed:69:a9:ba:8c:d9:0d:
78:12:47:5b:21:df:a2:1d:70:44:ec:50:0a:39:57:
c9:62:3f:74:8d:37:2b:99:93:11:7a:00:33:ed:17:
28:f5:5d:09:79:74:ef:96:14:97:b0:02:21:88:eb:
bc:a6:ae:92:22:af:d8:e9:35:da:e8:69:ec:39:e4:
25:7c:00:5e:ae:f7:81:ed:4a:76:14:b7:87:0b:9b:
14:fc:5a:95:c6:6f:a7:5b:3c:68:97:1a:3e:35:2d:
8e:ec:b2:6f:d6:37:b1:45:56:93:1f:ef:cb:9a:09:
b3:eb:e1:65:82:aa:c3:00:95:28:3c:a0:02:55:17:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DB:F9:B5:88:A3:2C:05:3D:81:39:61:B1:67:D3:54:11:19:B1:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13d09994-f2ef-4644-8fc0-f2e52c858b32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:2080::/46
Signature Algorithm: sha256WithRSAEncryption
0d:50:9b:83:a4:20:59:38:c0:eb:19:f5:04:8e:83:74:81:30:
c2:26:03:55:1a:ff:42:84:4a:e3:48:ee:80:61:06:e6:81:10:
df:eb:a9:a8:48:6a:b7:bb:d1:7a:4d:68:3e:26:1b:cc:07:ee:
33:05:84:17:a5:bd:4f:d4:8b:01:c7:1a:df:ae:ea:31:3c:17:
fc:ef:5d:86:a5:41:d3:75:8b:1f:92:0a:4a:9d:bd:41:0a:c7:
f3:98:01:d1:52:38:f4:ff:c9:e3:c3:24:d0:31:42:57:7b:5f:
0c:81:34:cf:64:b4:97:48:f2:81:38:71:26:08:8d:fe:e5:7a:
1a:36:78:28:05:87:fe:b3:02:b4:09:89:53:9e:e3:ed:45:2b:
4f:46:86:4a:6e:74:84:1a:30:c0:87:6d:a0:1f:ef:9e:45:33:
af:35:80:9f:1c:07:e7:84:54:d5:62:c1:ef:1f:1c:51:fa:45:
fe:a5:9f:26:ff:45:f7:de:46:15:3b:db:88:17:17:35:29:96:
49:bf:d4:90:fb:31:d4:0d:81:51:ef:1e:a1:dc:d4:c5:7e:c9:
c4:7b:08:ab:8b:ef:38:90:de:9b:bf:e8:fb:5e:14:cc:65:54:
52:dd:43:a6:f7:99:fb:ba:04:9a:6e:56:f5:bd:57:9b:bc:70:
a1:b7:44:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:49 2025 by rpki-client