Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e69802-5856-4fad-bed7-454a20dc6b2a.roa
File: 42e69802-5856-4fad-bed7-454a20dc6b2a.roa (raw, json)
Hash identifier: 0KUOpxZFfKRsv++tvBB9ZGmoafJ3V2I6n81Liua1Ji0=
Subject key identifier: 66:F7:94:0F:DD:9A:97:49:62:89:85:38:91:C3:D4:97:82:6B:0F:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B78665DE513EC6AFB54C01B03F2605542D6224C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e69802-5856-4fad-bed7-454a20dc6b2a.roa
Signing time: Fri 28 Mar 2025 17:20:54 +0000
ROA not before: Fri 28 Mar 2025 17:20:54 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f14:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:78:66:5d:e5:13:ec:6a:fb:54:c0:1b:03:f2:60:55:42:d6:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 17:20:54 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:d2:5c:13:f0:4d:cc:28:d9:98:4a:16:fb:
65:80:17:c5:f1:95:ee:f7:18:b5:71:2f:f2:89:4d:
79:9a:2b:1b:eb:fa:29:46:b9:64:ed:d2:78:c0:f4:
95:a6:6d:aa:c3:e8:9e:b8:0d:4d:12:f0:f0:e2:1c:
75:ca:9e:80:b4:0f:70:4e:8e:53:d5:6a:99:fe:63:
b8:6b:df:a1:b5:43:df:be:7d:54:f7:a0:14:ee:c1:
d4:30:a2:52:45:40:5d:dc:13:81:fe:9f:7a:8f:5a:
6b:3c:2d:90:3b:c9:d3:a0:cd:74:64:7f:8c:5f:b8:
54:eb:05:ab:45:14:5d:d2:ba:ef:f9:02:c5:55:6f:
94:a1:3b:7c:11:c9:94:08:aa:1e:83:5e:8a:33:58:
cd:96:bf:11:ba:e4:ea:dd:ad:61:b5:8d:db:32:d2:
6b:bb:6a:d5:d1:4b:1e:b7:d6:d7:88:ca:68:ef:25:
15:ca:c8:15:b4:7d:4a:64:f1:f0:cf:e9:f4:34:6b:
8a:61:29:47:71:d0:f2:fb:28:f8:ff:b0:3c:23:0c:
26:5a:0a:4b:b5:54:b2:78:c2:6e:87:5a:c3:c1:e1:
07:90:ed:4b:ac:a9:24:30:cd:88:9a:af:4e:1a:d0:
02:b3:9e:63:2a:04:01:af:05:8a:f6:1b:15:56:53:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F7:94:0F:DD:9A:97:49:62:89:85:38:91:C3:D4:97:82:6B:0F:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e69802-5856-4fad-bed7-454a20dc6b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:4000::/36
Signature Algorithm: sha256WithRSAEncryption
35:62:9e:62:9e:a0:3b:5e:2f:57:0b:2e:d9:b6:93:3e:ef:b6:
01:2f:67:d5:41:d7:dd:19:ef:d9:3b:a9:24:fd:53:44:4c:30:
61:8f:02:6f:62:84:34:c6:d1:2d:d4:83:ab:41:67:44:77:25:
71:ef:bf:8d:65:73:35:e1:dc:b7:c4:fa:2c:48:f0:bc:b8:46:
19:a4:d4:81:f9:08:ec:2b:e9:64:30:18:bc:1b:a7:8a:64:69:
32:06:8d:0f:4a:a7:12:b4:dd:20:39:ed:4b:7c:1c:af:7d:aa:
d2:dd:4f:41:12:be:cc:68:2f:38:21:44:2e:27:af:4e:64:f8:
ab:d2:15:2d:fe:48:1b:1b:e9:8e:1e:22:42:f4:60:03:87:5a:
f3:9b:d3:af:e0:a4:09:92:72:10:95:06:e0:50:e7:01:e2:90:
22:2d:63:96:ac:ec:78:6b:1e:cc:13:8e:b1:62:2f:f2:de:34:
1c:27:ae:33:6d:8b:1b:c6:e5:3c:f8:be:0b:39:e9:b3:8b:7f:
6b:ac:94:33:36:1a:d2:e1:14:45:ee:c9:a2:58:a6:16:4b:e4:
5d:1e:df:a6:65:b1:1e:ce:69:94:f0:d9:45:1c:e0:48:26:d4:
b7:14:12:c8:d6:07:45:8c:50:ac:86:2e:4b:b9:0e:e3:e2:fe:
6f:9c:17:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:28 2025 by rpki-client