Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa819602-1206-4fd0-9abc-526fb9b408b8.roa
File: aa819602-1206-4fd0-9abc-526fb9b408b8.roa (raw, json)
Hash identifier: XZMOwOaV9GVVLqcdbsddkGL4Lk5HBIAxN2rIFkCpboo=
Subject key identifier: 54:10:BB:5E:78:2D:D4:7E:1F:C0:60:3B:13:6C:B4:35:82:51:38:1B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0ABDE4CC524F89291EBEBC6779A2BC9B97AAC106
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa819602-1206-4fd0-9abc-526fb9b408b8.roa
Signing time: Sat 15 Mar 2025 00:21:43 +0000
ROA not before: Sat 15 Mar 2025 00:21:43 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f24:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:bd:e4:cc:52:4f:89:29:1e:be:bc:67:79:a2:bc:9b:97:aa:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:21:43 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:d3:5b:0e:9e:79:1b:98:2a:a4:76:ab:2a:
2b:48:1d:fc:3a:f5:4b:3c:10:80:b1:c2:09:19:27:
f9:a3:63:2a:af:cc:15:c6:1c:57:5b:33:c4:ab:a8:
9e:52:6b:08:0c:9a:f8:82:9c:fc:3d:8b:8d:0d:d1:
f8:de:2c:80:85:79:bd:a3:fe:9c:eb:03:bd:1b:7a:
3d:24:56:7a:88:e9:b3:76:7c:a8:45:09:f6:aa:bc:
74:ff:e1:3d:23:b5:a2:d5:92:1f:d2:cd:42:b6:87:
3e:65:08:d1:4b:da:16:03:32:c5:ac:8c:c4:85:dc:
9b:00:92:0b:e6:9e:b7:e3:e5:d3:e2:d1:a0:39:ee:
67:1f:c5:5f:44:f0:56:b5:5b:98:0f:d0:69:5e:11:
48:b0:a4:83:3d:87:60:b3:1d:0d:70:d3:8e:fa:73:
ed:03:48:e9:01:f0:ba:73:75:7e:8e:24:32:63:f4:
fd:65:85:c3:db:fe:62:84:e1:30:ef:05:74:cd:07:
45:6a:85:09:04:76:db:ca:33:a6:0c:45:ed:78:eb:
9d:67:21:11:a1:04:5b:1a:f7:fe:56:8d:75:95:2a:
c9:bc:d8:db:6a:c5:c0:91:e5:de:10:1a:68:26:88:
dc:ee:3b:07:1a:c3:b6:6d:f8:28:45:6f:2c:b6:9b:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:BB:5E:78:2D:D4:7E:1F:C0:60:3B:13:6C:B4:35:82:51:38:1B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa819602-1206-4fd0-9abc-526fb9b408b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f24:8000::/36
Signature Algorithm: sha256WithRSAEncryption
cb:b8:2b:34:79:41:38:29:34:44:af:b9:f5:1c:be:ca:9b:2f:
5b:63:1b:23:2d:3d:a0:49:99:d2:95:57:93:99:f2:8a:7c:be:
79:aa:6e:80:7c:fc:f8:f5:25:e1:4d:90:bb:34:af:dd:98:57:
5b:cf:26:2c:cb:47:74:d7:90:0b:a9:cd:95:9b:c0:48:f0:d3:
f9:b0:31:89:9d:47:f8:8a:b5:94:c6:00:f6:99:8e:4e:35:73:
20:24:af:7d:61:62:90:ec:28:dc:b4:04:a2:bb:69:54:bf:f7:
e9:12:10:7c:35:a0:f1:80:71:9f:22:b9:0d:cd:e8:07:22:3d:
54:0f:0e:dc:f6:d6:6f:05:7b:06:b7:60:e9:d0:62:46:a9:81:
55:b2:e3:42:28:22:52:22:74:53:c5:37:e0:34:00:b1:ec:82:
7a:73:03:a1:b4:14:f9:4d:71:45:3b:11:fb:1e:3a:cf:4b:97:
4c:11:97:26:aa:e7:65:80:6a:0f:b5:a6:e3:8d:01:51:88:24:
15:38:6b:d1:2b:5d:ad:ab:a6:03:43:cf:0c:26:1e:7f:6c:41:
bb:dc:34:ff:3b:77:bd:cc:05:65:21:a4:8a:66:1a:2d:a7:f7:
d9:6f:20:60:1a:7c:8c:69:2f:dd:37:3a:8c:d3:4c:27:0b:5f:
b4:11:bb:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:39:30 2025 by rpki-client