Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f18406b-7ef4-46c2-bd9a-2b43a7fcf2f2.roa
File: 8f18406b-7ef4-46c2-bd9a-2b43a7fcf2f2.roa (raw, json)
Hash identifier: MMxzLJmoPW5mQjV9juVHjEbvk7YkjLCpevrOTrW9oyo=
Subject key identifier: 67:23:0E:E4:CC:F8:72:EC:D4:31:38:40:44:28:71:16:54:DC:32:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 74F0D009AAAF6A7D7120DC21A5663E5AF1C76962
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f18406b-7ef4-46c2-bd9a-2b43a7fcf2f2.roa
Signing time: Fri 28 Mar 2025 16:30:23 +0000
ROA not before: Fri 28 Mar 2025 16:30:23 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb9:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f0:d0:09:aa:af:6a:7d:71:20:dc:21:a5:66:3e:5a:f1:c7:69:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:30:23 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:fc:bb:eb:59:28:ec:ea:20:df:6c:82:ea:
5d:47:76:42:fa:ab:1b:00:97:dc:37:ec:cb:8c:76:
d0:84:79:49:cc:0b:a6:b1:d5:a9:fc:5b:39:54:c1:
86:0c:5a:53:b2:11:d1:f0:08:b9:15:c4:ba:75:63:
ea:f5:90:28:89:53:94:4f:f1:4d:b3:09:c7:aa:6e:
02:65:a5:69:c9:f7:ac:48:7d:e2:d3:a1:21:03:01:
89:1c:9e:ef:28:7f:33:00:ad:79:6b:42:9e:b5:ff:
4c:80:bc:61:06:c4:6d:fb:8e:c2:10:7f:47:4d:3c:
9b:27:2f:f8:72:64:82:22:54:18:bb:bd:4c:1f:14:
c6:01:dc:c1:c9:e4:b9:d4:cb:ae:5e:de:82:88:41:
f5:10:95:c5:cb:87:87:94:de:a6:5b:9a:d2:2b:fb:
c3:65:93:b3:8c:50:9d:c7:fa:0b:83:1d:4d:d2:f4:
2e:43:5b:a6:bd:c6:10:24:38:48:c5:ef:36:7d:4b:
21:57:26:1d:db:1e:e3:9c:e7:97:99:33:2f:7f:9b:
f5:de:b4:b8:d3:24:1f:d9:b4:b8:d7:f2:2b:08:f6:
33:da:af:52:ce:1e:5e:dc:ac:9b:f4:e8:6c:3f:ff:
9e:83:40:e5:d2:46:9c:9c:32:80:2b:80:90:67:d7:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:0E:E4:CC:F8:72:EC:D4:31:38:40:44:28:71:16:54:DC:32:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f18406b-7ef4-46c2-bd9a-2b43a7fcf2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:e000::/40
Signature Algorithm: sha256WithRSAEncryption
04:f9:e2:61:e3:cb:08:ae:59:c7:33:83:ce:65:c9:7e:33:7f:
4e:91:9b:c0:f9:96:b4:fe:77:26:fb:34:64:82:3d:40:b3:2b:
77:84:6f:d4:e5:17:17:ee:df:33:24:19:12:05:18:cb:cb:ca:
ce:86:18:85:91:f1:b8:47:58:fb:bc:5e:04:90:0f:c5:bb:96:
95:42:46:91:5b:f3:e1:61:43:4f:87:20:84:a8:31:d6:ab:a9:
1a:34:34:a5:cc:d7:4c:28:82:c4:45:bc:03:12:fd:78:a8:e1:
a2:49:eb:91:e8:77:fc:d6:a4:94:d5:9d:d8:bd:96:c9:2b:9e:
5c:fb:3d:89:f9:97:57:33:f5:4e:1f:d2:91:5d:23:56:a8:73:
12:92:c4:f2:39:45:e8:fa:26:74:dd:51:2a:e8:3a:a4:1f:9d:
3e:21:e5:46:7c:4a:00:a8:79:15:b8:37:68:c5:09:6b:5e:b0:
00:0c:e2:26:f5:3e:50:09:44:fe:d1:fc:cd:fc:e4:be:44:4d:
dc:21:3e:f2:bb:cd:b8:30:2a:b3:4b:ba:d1:5d:bc:34:b0:aa:
8e:6d:af:1b:14:b5:d3:92:28:d6:df:99:d1:6e:51:0d:07:79:
02:50:fb:00:aa:cb:87:32:b2:cc:55:e2:fd:3a:85:38:a8:5d:
a4:0f:dc:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:47 2025 by rpki-client