Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
File: 55066f75-b858-4558-bcfc-5a7f53c92745.roa (raw, json)
Hash identifier: V1prMmEHeROIxOF1ABvQbDefNruMhDfVkMwOfb7bJSU=
Subject key identifier: E7:38:CE:49:A6:64:D8:9A:D4:5B:C5:41:C9:26:86:C5:3B:7E:A7:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C5AFE2326922C6E1AB8C5E5DF40D197A209D4DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
Signing time: Fri 28 Mar 2025 00:22:02 +0000
ROA not before: Fri 28 Mar 2025 00:22:02 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5a:fe:23:26:92:2c:6e:1a:b8:c5:e5:df:40:d1:97:a2:09:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:22:02 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:2b:2a:02:9a:06:79:fa:0e:c7:e3:e4:5e:
57:25:c8:fb:26:eb:13:a2:e6:97:03:8d:cb:b0:40:
32:35:ba:c1:1d:c0:ee:1e:62:5d:f4:8a:d7:99:01:
a8:a3:f8:e7:e5:7a:f8:a6:ad:8a:c8:28:a1:b8:2c:
99:7d:01:8a:ee:02:d5:d4:a0:10:84:41:f8:51:aa:
5b:d3:b9:85:14:3c:de:bf:a7:ee:b2:0d:7d:92:46:
b9:fa:a6:ad:e5:73:6a:b7:a4:88:8b:3d:71:2c:35:
49:97:1d:46:81:aa:35:c3:14:43:07:54:99:8a:4d:
2c:c9:12:0a:47:bd:3f:66:8f:ca:ee:4b:25:5e:8a:
3a:8e:17:c3:32:25:07:36:dd:c2:1d:ca:b8:4b:ca:
e1:18:54:ea:f1:36:18:1a:89:44:9f:c0:f6:ae:a9:
e5:a8:4a:30:09:32:85:2a:b5:3e:23:84:d7:d3:73:
07:2e:f5:a4:7f:13:95:49:11:88:30:25:82:2c:f3:
bf:95:73:07:d2:78:b3:22:91:2b:84:79:35:63:eb:
56:a3:28:16:fb:42:cd:e6:6f:9e:92:1e:d3:de:9e:
12:57:a6:d2:5d:04:87:d9:44:86:77:0d:ed:b5:37:
a5:e9:05:4d:7d:7f:cf:21:63:93:8b:02:3f:e1:9e:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:38:CE:49:A6:64:D8:9A:D4:5B:C5:41:C9:26:86:C5:3B:7E:A7:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:c000::/40
Signature Algorithm: sha256WithRSAEncryption
60:44:1a:cd:de:0d:b0:86:5b:3b:cd:f1:b6:95:c0:4e:d5:7c:
a5:56:cd:cb:de:83:af:86:84:26:e3:12:67:73:07:e6:6a:b7:
9e:55:95:8f:45:d7:c8:66:70:27:dd:28:7c:0d:48:a4:0a:77:
4d:0a:23:27:9d:54:30:84:bc:a3:01:aa:74:ae:41:1e:34:fa:
90:cd:71:d4:7f:3d:90:96:83:2a:a4:1b:fc:83:f0:ea:b4:27:
e8:83:4d:d7:cf:f9:a8:94:24:af:8c:85:3f:66:7f:7a:dd:52:
01:5c:9d:76:ae:0b:2e:dc:55:a5:e8:a4:c6:8b:a4:bb:49:f2:
89:45:cc:d5:29:48:52:fc:51:d1:26:d5:27:3a:fa:46:03:9c:
ab:07:ee:68:9a:43:f2:e7:19:fc:06:25:db:52:50:11:0e:89:
f7:f7:ee:be:1e:6c:aa:d2:eb:fd:0e:ee:85:51:3a:99:d7:63:
4c:73:2a:c6:50:0f:02:03:a0:3d:4d:07:4e:b6:95:30:fb:75:
da:c9:4a:ea:d9:6e:c5:a4:8e:94:32:d2:11:7e:87:96:43:47:
6f:a6:8f:8c:55:c0:e6:bb:f4:96:0c:08:0b:ba:6b:4d:00:ff:
85:07:ec:6e:e8:d7:d4:2c:7a:c5:5c:74:71:c8:d8:be:48:e6:
5f:eb:de:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:49:57 2025 by rpki-client