Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
File: 5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa (raw, json)
Hash identifier: W2E+xyFDhySJyPDo+8Jy9hY/k8yLKo73Py/SyO6L64k=
Subject key identifier: 2E:43:C7:16:CD:EB:B9:C7:A6:78:90:AD:0D:90:03:90:99:F4:D0:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F0F5213F3209FE585FFF6A6C841767688E9079E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
Signing time: Fri 28 Mar 2025 17:21:42 +0000
ROA not before: Fri 28 Mar 2025 17:21:42 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f13:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:52:13:f3:20:9f:e5:85:ff:f6:a6:c8:41:76:76:88:e9:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 17:21:42 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:51:1e:3e:c4:c7:ad:24:55:2c:dd:c5:24:
af:90:4d:04:2f:90:89:53:70:0c:b6:f2:4d:b0:75:
f1:30:66:84:fe:d2:b1:89:57:80:e7:87:77:d9:4b:
77:94:63:05:6c:c8:e1:76:44:43:ca:89:8d:e0:97:
3d:33:6d:56:a0:76:4b:4e:18:d3:a6:0e:a7:a7:7d:
4a:22:ff:02:7c:db:36:53:d1:0a:6c:cc:78:5b:b9:
b3:24:7d:bc:d9:33:36:2e:18:2f:a9:c0:f9:c4:b1:
af:5e:6b:f1:a3:90:e7:c2:00:40:45:75:cc:a0:a1:
85:3c:e3:87:12:bd:a4:23:94:40:2f:65:a5:ea:18:
bf:da:6f:14:31:1b:d7:97:da:c1:36:71:72:52:47:
f9:6a:7f:a9:6e:05:54:9e:07:bd:2a:13:01:3b:16:
e0:06:f4:3b:ce:14:49:8a:1e:7b:99:77:5f:8c:70:
df:eb:c6:be:c9:a3:eb:ec:66:cb:cc:3f:b3:84:41:
07:ee:40:7d:d5:dd:f3:54:00:0b:15:62:db:f1:e7:
d8:2c:f3:eb:35:1e:35:0e:cd:55:02:8f:7b:6b:f0:
e1:a2:90:19:de:4b:d2:71:9a:d2:61:5d:02:48:9a:
21:39:38:74:ac:98:ce:60:e2:ce:1f:41:dc:e2:51:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:C7:16:CD:EB:B9:C7:A6:78:90:AD:0D:90:03:90:99:F4:D0:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f13:8000::/36
Signature Algorithm: sha256WithRSAEncryption
43:a8:81:3a:66:bd:1d:c6:ad:97:46:c0:72:82:10:e3:98:8c:
26:e1:f3:58:d8:72:24:16:f1:d8:e6:c2:46:1e:8e:26:ca:56:
84:62:cc:a8:7e:6b:1f:03:c6:76:ec:11:83:2d:9b:17:18:df:
46:80:ff:b9:33:21:14:67:28:e6:df:d2:3c:1a:79:6a:12:09:
bb:d7:60:cd:1e:2d:f6:71:f3:f2:e2:72:12:35:57:f7:66:5d:
f2:c9:a9:62:c1:ae:ea:c2:25:dc:40:ec:18:49:a8:95:79:91:
bc:21:a5:01:1e:e7:ab:dd:9c:61:ff:95:11:36:1a:7e:8b:17:
f1:62:6f:38:ef:14:db:84:53:7e:7a:84:ce:18:5d:9f:84:9e:
14:1d:12:ac:0d:b0:da:f0:71:da:f7:63:4c:6b:94:dd:3c:ac:
1b:cd:2a:18:d4:03:53:29:0f:3a:27:e9:45:65:92:22:2e:d4:
7a:7e:a4:52:20:af:45:06:8b:a1:41:81:34:55:d8:eb:e8:4c:
7a:37:27:76:ce:24:bf:8a:af:54:87:25:8a:50:57:19:c4:9f:
22:97:07:c7:3e:79:78:96:2f:2e:2f:4f:2c:52:7b:45:19:02:
a5:48:d1:13:62:56:15:48:e9:8c:f3:05:00:d0:e3:ce:9d:f5:
2d:4d:4c:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:25:22 2025 by rpki-client