Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b07534e-bc1a-4174-b382-3a0d284bf978.roa
File: 9b07534e-bc1a-4174-b382-3a0d284bf978.roa (raw, json)
Hash identifier: 5juKimO/E3vA+y4XEqSvBxbLBDUzcF+EFXsiv+vrpAw=
Subject key identifier: 8E:E1:24:B8:3F:AC:9C:FC:4F:C1:6A:B7:7A:4F:D1:96:4F:FE:A0:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71EEB3CE3A08875559D8E15EBAF1017269D42701
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b07534e-bc1a-4174-b382-3a0d284bf978.roa
Signing time: Fri 28 Mar 2025 16:01:31 +0000
ROA not before: Fri 28 Mar 2025 16:01:31 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:4180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ee:b3:ce:3a:08:87:55:59:d8:e1:5e:ba:f1:01:72:69:d4:27:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:01:31 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:cf:12:83:fb:c5:ff:c0:e7:36:ac:9f:82:
72:b1:a7:24:a2:44:d6:f6:be:78:21:70:ca:0a:c5:
75:bf:d3:7f:da:f7:fa:b6:e6:39:6a:c4:01:74:22:
02:a6:ab:b4:c0:76:de:be:84:f7:dd:c2:fe:c4:bb:
14:5c:60:ba:8a:2c:37:d7:e4:e6:90:ac:aa:05:da:
9e:b5:cb:57:b6:85:7b:37:16:e4:10:da:b3:a6:8a:
08:4a:3e:7c:a2:c2:51:aa:89:83:3a:90:c1:5c:d3:
38:97:42:b1:69:d8:e3:78:d1:8d:9f:cc:23:5c:c5:
9f:13:e7:37:e2:cc:ab:89:95:90:81:c6:c3:64:68:
34:e5:49:c2:96:d5:4d:d8:f7:8a:85:ab:b7:80:62:
78:2b:d4:19:77:cf:1d:72:0e:a7:55:1f:fc:13:a6:
98:a9:d3:9b:48:7c:00:da:b2:10:94:60:8f:fd:68:
78:b4:23:0d:bd:b6:43:f9:6b:8e:15:bd:7c:73:fb:
19:c4:05:b8:3f:d8:8f:5f:45:ef:22:e9:9c:f7:da:
8a:c0:10:5a:36:e2:5e:f1:c5:95:fb:1d:f5:80:99:
e3:3f:df:c6:02:c5:0e:64:d5:c9:b7:c3:3e:0d:9f:
ae:fb:00:2f:4f:7c:b0:8a:9b:c3:d6:84:ac:6c:db:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:24:B8:3F:AC:9C:FC:4F:C1:6A:B7:7A:4F:D1:96:4F:FE:A0:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b07534e-bc1a-4174-b382-3a0d284bf978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:4180::/48
Signature Algorithm: sha256WithRSAEncryption
34:aa:81:7b:16:cf:d5:0f:02:8e:df:91:c1:21:74:ec:d6:20:
b2:c1:fa:04:46:60:b1:98:95:48:a8:86:6f:b9:d2:61:c6:44:
fd:2e:3f:8b:33:84:b8:53:1d:13:4d:e4:89:46:e6:b1:4f:db:
6f:74:1d:36:23:6f:5d:1e:99:5a:03:35:78:1e:70:36:69:0a:
6f:35:c8:d0:36:71:9a:5b:da:2c:fc:82:1c:f0:ac:d8:72:8d:
c4:36:e1:1b:16:ef:05:df:66:8a:38:4e:a3:c6:9f:1d:75:45:
dd:81:9d:3c:5d:7f:3f:da:98:ea:ea:2c:98:ef:47:27:8e:4f:
c3:3c:89:73:43:ac:e3:f6:dc:d3:0a:00:2a:c0:9f:65:79:88:
44:f7:a4:42:49:49:c1:77:21:c9:66:2a:4a:9a:90:92:3a:72:
ca:dd:ee:25:c0:1f:2b:a3:cb:7e:f9:e8:d2:ed:47:85:27:45:
87:48:b8:b7:3a:ec:8a:96:f0:d8:84:60:f9:81:24:82:64:c3:
7e:e6:23:a1:91:ec:b7:b8:8f:bc:97:0a:9f:b7:16:c6:56:f8:
75:77:64:8a:20:91:d4:e1:03:c9:52:9f:4e:4f:42:c0:be:3b:
d6:04:83:36:6b:ad:d6:e1:3a:25:3e:a8:4c:17:65:a4:98:9a:
c3:d3:0b:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:12 2025 by rpki-client