Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a934e471-5df1-4419-ac71-1200ef98b113.roa
File: a934e471-5df1-4419-ac71-1200ef98b113.roa (raw, json)
Hash identifier: kCbvPuAj/j1ri2WFUfyCApzKYHQEnrHoivf34Aymigo=
Subject key identifier: 1B:EC:6E:4B:DB:DB:B2:3F:C4:36:88:65:2D:7E:59:71:20:8E:98:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 354E2636109DF2AC45CF4A56D65EB5F72E570100
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a934e471-5df1-4419-ac71-1200ef98b113.roa
Signing time: Fri 28 Mar 2025 15:11:14 +0000
ROA not before: Fri 28 Mar 2025 15:11:14 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff7:2040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4e:26:36:10:9d:f2:ac:45:cf:4a:56:d6:5e:b5:f7:2e:57:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:11:14 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:88:33:02:95:3d:3b:a8:64:33:a9:cf:fc:
4c:ce:a6:51:74:43:16:5d:a6:e1:58:e1:10:c6:57:
e8:4b:3f:c9:0a:67:76:fb:e9:0c:da:91:c5:b0:3b:
7f:47:b0:bd:d8:76:f7:5d:46:16:9c:14:1c:a0:a7:
ca:9f:47:80:1f:f0:e5:fb:43:4d:b2:ce:28:3f:ea:
b7:7c:a7:73:99:4a:b5:f0:ce:49:2f:9d:ee:c4:90:
03:5d:e0:8f:a1:39:e4:5c:e1:ee:db:55:8a:74:ad:
61:9f:9a:07:ef:16:39:8f:99:ff:95:41:4a:1e:ba:
2e:10:f5:a7:d1:fb:09:7f:21:2b:4f:23:33:80:ba:
f5:34:90:60:90:d7:12:9e:8c:bb:9b:c2:54:c0:1e:
f2:25:48:57:5d:ee:82:d5:18:94:67:e6:a0:e2:d4:
bb:70:81:80:49:59:b5:45:d8:fb:c0:d1:f9:07:be:
96:39:a5:c3:19:c3:ed:99:15:af:5a:95:82:1f:56:
69:30:10:c9:19:35:42:ba:80:5b:30:7c:9e:e3:a9:
90:e5:e8:63:d5:e7:b9:31:b7:78:ea:70:e4:9d:67:
f2:c1:8b:3c:ec:af:b2:07:9f:be:61:24:0b:0a:7e:
9c:29:ee:d4:8b:de:27:44:ea:60:c6:dc:23:2d:18:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:6E:4B:DB:DB:B2:3F:C4:36:88:65:2D:7E:59:71:20:8E:98:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a934e471-5df1-4419-ac71-1200ef98b113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:2040::/46
Signature Algorithm: sha256WithRSAEncryption
2f:d5:fc:6c:61:7c:87:ee:2f:66:98:1b:9a:4e:ab:5d:e4:a4:
96:a2:82:c9:5d:d5:53:cf:7b:10:0d:77:0d:67:62:54:9f:52:
93:80:bb:43:18:83:38:d2:fa:88:af:1e:91:fd:25:38:db:00:
e7:89:0d:6a:65:94:56:2e:e5:bc:5a:d5:e9:cf:9e:01:11:7b:
00:54:1b:57:14:2f:f2:9d:5b:a6:d6:c6:24:f9:6a:f6:4d:a1:
fb:e8:0a:d7:ed:c0:ad:d5:13:c5:ee:39:11:9f:90:b1:0a:76:
10:17:29:c6:b5:3d:2a:e7:0f:07:b0:97:31:36:62:9b:91:0f:
15:82:2d:0b:8c:45:0f:1f:8c:75:71:87:0c:e7:1b:00:3f:70:
f4:f3:8f:65:6d:4d:37:8a:bc:11:47:0c:ad:43:e9:1d:d3:f5:
b6:6a:ed:74:f9:e5:d4:a5:92:28:8a:4f:92:2e:53:8e:c8:ef:
89:15:f2:33:ed:2c:25:9d:e9:37:30:88:06:e4:13:09:7a:ec:
09:ff:66:94:c1:94:61:56:65:58:5c:1e:85:98:be:ab:68:fc:
c3:d8:20:22:68:6b:7e:4d:e9:6a:a5:87:67:23:5c:d2:2e:5c:
94:5e:4b:13:41:68:8d:46:15:88:a5:89:e5:17:c3:78:32:88:
a5:d8:e9:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:38 2025 by rpki-client