Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa
File: 79483f1f-35c5-4ee2-9db8-c98fac055e03.roa (raw, json)
Hash identifier: fJrWQ5ccQQUxQSsb12x3obScUQl9xzGj0JHCoeupyic=
Subject key identifier: EB:71:48:DC:C2:50:09:CB:4B:BC:D9:BE:AF:8F:F2:A6:87:41:6E:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B2ED1D11385F19DE0AEFE3699572C7635664768
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa
Signing time: Sat 15 Mar 2025 00:10:53 +0000
ROA not before: Sat 15 Mar 2025 00:10:53 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:a400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2e:d1:d1:13:85:f1:9d:e0:ae:fe:36:99:57:2c:76:35:66:47:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:10:53 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:bb:dc:87:22:a7:5e:62:dd:98:8e:aa:8a:
53:c2:9f:e1:a9:ba:e6:f8:ab:e3:66:7f:0c:d1:3e:
75:cf:0e:cb:99:2a:ab:ac:6c:d4:40:1a:36:86:51:
f6:d6:86:4d:9f:fc:9a:2b:c4:d3:ac:5e:56:66:ad:
97:19:9c:a4:33:72:ca:4e:87:5c:ab:97:ee:2a:cd:
b6:88:69:3a:67:67:92:49:d7:98:cd:ba:f4:74:18:
32:32:26:16:a6:4e:e8:fd:8e:e1:93:64:a9:8e:91:
e9:06:fa:48:79:6d:62:39:30:91:4b:d2:ed:8a:dd:
ea:80:bb:48:b8:fe:78:fe:a9:d9:23:86:fc:53:05:
64:d6:7a:6e:12:05:d8:7b:e5:40:61:0e:4e:b5:94:
e4:ef:bd:8f:69:cd:f7:0e:c7:31:6a:d3:ce:78:fc:
d7:4a:d9:f8:97:2d:c3:2a:5b:74:82:51:ff:66:f4:
2b:78:3c:3b:31:11:8e:eb:a2:f0:66:54:c2:f5:66:
43:c7:6d:93:03:45:2a:a2:5f:7e:4a:e1:6c:07:b5:
6d:e2:9f:da:7d:a7:41:e5:72:87:5c:b1:c2:cd:cd:
72:bc:81:38:a9:2f:66:5e:56:ab:a0:c8:b0:9e:f2:
a6:63:26:02:46:81:a8:f3:77:ba:e2:1e:4d:ab:a8:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:48:DC:C2:50:09:CB:4B:BC:D9:BE:AF:8F:F2:A6:87:41:6E:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:a400::/40
Signature Algorithm: sha256WithRSAEncryption
84:11:00:db:62:8e:29:ac:61:ef:aa:16:7a:27:4d:60:2c:fa:
04:5d:6a:08:ee:2c:9f:7d:4e:83:33:0e:f4:6b:96:32:98:4c:
d3:1a:5a:c0:a1:98:07:53:01:e0:13:54:56:b1:52:bf:22:90:
1f:90:11:eb:2d:1f:29:c3:c4:26:03:b6:2c:33:c1:fb:3c:27:
68:83:90:3b:4c:ef:c9:5f:e0:9c:4d:27:aa:a1:97:98:14:1f:
86:d7:1b:1c:c9:0e:e4:fd:b5:a1:d2:14:f2:b7:d4:79:ef:a2:
41:14:d1:df:44:1b:1c:1d:d3:97:40:02:e8:b7:9c:5b:cd:67:
d4:c9:e1:12:d6:35:bf:29:15:ea:49:10:e3:74:d1:8b:e8:9a:
b9:da:89:0f:37:71:b1:80:22:e7:a0:e4:64:93:a9:ea:a0:c2:
58:23:dd:8d:08:30:b1:e5:41:d4:c4:77:7f:15:dd:ca:ad:06:
95:fd:67:ba:cb:7b:3b:3e:45:af:f4:73:05:52:e3:71:14:64:
0e:90:ca:9e:db:0b:e0:9b:d8:03:54:7f:58:8b:7e:1c:51:8c:
2c:13:69:f0:61:ee:1b:b7:24:2c:bb:b1:02:af:28:55:4d:26:
da:2f:c9:a2:ae:2b:7c:02:9d:8e:9f:d2:bf:43:ce:b1:be:19:
31:fc:e9:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:40 2025 by rpki-client