Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34596f5f-17dd-4745-b0d3-0cdec552b218.roa
File: 34596f5f-17dd-4745-b0d3-0cdec552b218.roa (raw, json)
Hash identifier: KOlx1dtybNkHAi9jFSCFEgJ/lgzc7D0cGlyP6UN01qg=
Subject key identifier: 4F:63:34:50:A2:A6:ED:4B:B4:2A:91:23:0E:4B:56:A7:24:21:76:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5FF862D25C857BDCE933DA8DECAEED7EA1CB890E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34596f5f-17dd-4745-b0d3-0cdec552b218.roa
Signing time: Fri 28 Mar 2025 17:21:03 +0000
ROA not before: Fri 28 Mar 2025 17:21:03 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f14:c000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f8:62:d2:5c:85:7b:dc:e9:33:da:8d:ec:ae:ed:7e:a1:cb:89:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 17:21:03 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:4b:c9:e2:e4:0d:aa:12:79:ed:5e:56:22:
8a:16:43:08:34:9c:99:a2:a5:4b:19:b5:82:d4:3d:
6c:2b:3b:02:b8:45:72:19:bd:ae:b7:07:ee:be:48:
be:da:53:b1:5e:ec:0e:af:d9:aa:0b:89:5b:19:1e:
87:43:8f:e3:d9:2b:a8:67:d4:e8:8f:f9:88:03:f1:
56:72:8c:00:12:e2:46:8a:5b:90:d0:66:65:c5:d5:
61:7c:c1:3e:56:da:c4:07:90:bf:12:1d:4c:6d:a0:
cc:9f:83:5c:65:0a:13:44:4e:be:19:f1:8b:57:8e:
98:ca:82:a9:a6:76:3c:1a:7d:bd:ec:d1:05:45:a4:
5f:da:a3:95:24:24:53:50:d9:c7:f0:2c:a3:4e:62:
e2:73:cb:30:af:27:f4:d2:3f:16:08:4f:c4:49:08:
bc:f3:a4:40:2c:fe:54:ee:a0:03:44:1d:54:87:5c:
d6:19:7f:53:d6:5b:cf:eb:d1:52:2a:a6:38:63:36:
d1:b8:02:a5:25:e4:17:ce:a5:fa:42:ff:cf:28:9b:
02:f9:94:d9:c4:bd:47:30:09:cd:cf:74:18:fb:73:
95:8e:a1:44:3d:8c:1c:1f:b4:5a:3b:7a:48:e9:ae:
dc:43:34:69:21:38:d9:f3:31:aa:e2:bd:95:32:41:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:34:50:A2:A6:ED:4B:B4:2A:91:23:0E:4B:56:A7:24:21:76:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34596f5f-17dd-4745-b0d3-0cdec552b218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:c000::/37
Signature Algorithm: sha256WithRSAEncryption
32:c0:8c:20:81:4f:b1:5b:1e:d9:15:8b:01:46:ba:eb:24:10:
e7:8e:65:b4:b9:e7:92:57:d5:dd:c5:ee:9d:fc:e6:47:7c:01:
d2:e2:96:2e:54:1f:4c:e3:c1:15:24:c7:56:00:f9:e7:72:d2:
4f:36:42:a7:df:13:c9:d6:c9:44:d8:24:81:01:31:20:f5:61:
9f:78:0c:a1:fd:1d:7c:17:03:8f:56:9b:e2:75:db:e7:60:bc:
80:ff:a5:18:98:e9:3b:e4:5a:ad:7c:5f:1f:6b:55:ed:90:75:
38:35:81:81:a1:64:92:97:96:dc:12:86:60:81:82:6b:b9:2f:
07:ac:92:86:40:cd:7b:9a:07:0f:e7:80:8c:53:20:44:9c:f4:
39:85:12:cf:ea:74:23:13:a0:d9:7b:6e:24:f7:41:54:eb:d8:
4c:e6:bd:17:9a:60:3a:be:c3:25:b5:21:de:88:b3:85:db:d6:
8a:ad:b9:9f:8a:aa:cb:1e:3d:3e:c9:4a:9c:fd:9a:df:56:a1:
eb:d4:8d:1b:05:c8:f0:d6:b5:32:31:d0:cb:d3:43:ab:4d:19:
83:a9:c0:9d:d9:ad:e8:a6:ea:c8:02:0f:b9:c9:4a:f2:ad:dc:
cb:66:37:50:37:f2:b0:9e:f2:d9:2f:42:53:30:8c:05:a6:84:
5c:0a:37:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:32 2025 by rpki-client