Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a62d8c7f-ef73-408c-a11c-ae164bfc2a92.roa
File: a62d8c7f-ef73-408c-a11c-ae164bfc2a92.roa (raw, json)
Hash identifier: my4X/CUEeq/CILIMq+Rue4s8oyfQYC7/cCvPYwC8LUE=
Subject key identifier: 3D:F3:3E:E8:94:00:43:7C:4D:E7:8A:68:31:8A:AF:06:5D:F0:E5:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E7F67C6E9B7148ECD734EAB45608FF8C9A0F098
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a62d8c7f-ef73-408c-a11c-ae164bfc2a92.roa
Signing time: Fri 28 Mar 2025 16:20:23 +0000
ROA not before: Fri 28 Mar 2025 16:20:23 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:a400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7f:67:c6:e9:b7:14:8e:cd:73:4e:ab:45:60:8f:f8:c9:a0:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:20:23 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:4d:9d:8f:b8:9b:cb:99:f1:2d:e2:f9:2c:
96:12:37:e8:d8:f2:65:cf:38:75:22:d4:87:80:83:
10:ae:3b:d9:1c:02:9c:33:c5:5f:fa:62:eb:64:54:
7b:4c:0b:5d:9e:f9:d7:2a:bd:41:fb:c7:a7:52:ef:
61:22:52:a3:6a:2e:6b:9a:4a:ea:d5:31:e6:b9:59:
76:22:d1:bb:26:4e:68:a6:58:48:30:f0:d2:71:70:
64:51:b5:12:7c:f8:de:9c:fb:fc:95:92:d8:ce:36:
25:16:8f:ab:58:0d:a9:73:ab:99:8b:23:3d:24:1c:
e5:0a:4d:9c:d9:b8:bd:a2:f8:3a:be:e3:5c:27:63:
d0:eb:25:bf:c7:63:90:96:5b:7a:a1:35:f9:52:41:
9f:fe:e6:f4:82:ee:2d:89:87:9a:27:7b:67:2c:e4:
54:47:a6:69:15:a1:ee:cc:e0:8b:98:77:fc:81:16:
b0:ca:a0:44:33:85:09:fe:f2:08:1e:79:b8:9c:b7:
90:ef:fe:06:8c:6d:c4:c1:4d:76:61:ca:6c:c6:57:
1f:2d:26:c7:19:18:27:ff:3c:e1:29:57:b7:2e:aa:
d7:28:a7:be:4a:5c:fb:a0:36:e5:01:de:4e:fd:65:
90:cc:0c:92:15:b6:a1:52:bd:72:22:5b:e8:be:a9:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:3E:E8:94:00:43:7C:4D:E7:8A:68:31:8A:AF:06:5D:F0:E5:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a62d8c7f-ef73-408c-a11c-ae164bfc2a92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:a400::/40
Signature Algorithm: sha256WithRSAEncryption
38:11:da:08:30:42:2a:6b:7d:57:45:cc:05:a0:79:31:ae:05:
43:d7:b6:f0:aa:51:ea:d4:c0:f1:d8:60:fd:84:6c:d3:77:75:
0b:63:06:cb:22:a7:22:77:34:ca:ca:fd:e2:46:6e:bf:02:6f:
74:62:25:ba:d9:4b:a8:f0:a3:18:ca:71:f5:a8:cd:04:fc:cf:
d2:56:82:dc:44:f3:64:2c:c9:4e:a5:fb:d3:70:f7:a1:f1:7e:
07:89:64:ce:67:c1:4f:47:da:db:26:a1:de:bc:c7:75:45:12:
95:43:c3:51:e0:51:a1:16:74:d0:09:87:91:86:8d:12:29:ab:
5c:51:0f:ac:70:7b:d2:aa:d3:21:f1:db:07:7e:c7:e5:d0:ce:
4e:b3:bc:ed:12:43:e6:78:65:11:c7:44:43:97:43:d1:70:5a:
bd:65:b4:52:e4:ea:a0:ad:c1:10:fc:03:c8:7c:47:9c:bc:dc:
e5:3f:81:a2:ab:49:db:84:89:a6:be:db:be:44:c7:ca:78:9f:
ae:96:17:6b:e3:2b:6b:68:6d:8d:a9:d2:81:6b:56:2e:7f:63:
ea:61:f7:44:1e:67:88:2b:e7:79:f2:f3:2a:48:c8:af:4c:b0:
37:3a:74:4d:c8:b1:f7:ff:65:58:cc:99:26:c5:6e:88:1f:fb:
42:53:43:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:55 2025 by rpki-client