Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa
File: aecb2898-1ea4-4169-a334-e907e8dc483a.roa (raw, json)
Hash identifier: 1IoRC81B1MJLFZAsPFyp7RuB5TuT++mdm90QM7S9CBQ=
Subject key identifier: B7:BC:EB:C9:DF:BE:27:B2:D6:50:8A:5F:92:6B:07:51:33:8A:72:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6BE920AC5AF4E22FEAE33F1E137EE9E7F3FC9F08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa
Signing time: Fri 28 Mar 2025 16:51:52 +0000
ROA not before: Fri 28 Mar 2025 16:51:52 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f17:4000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e9:20:ac:5a:f4:e2:2f:ea:e3:3f:1e:13:7e:e9:e7:f3:fc:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:51:52 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:d3:c3:01:06:c4:5a:f1:da:35:a6:e5:87:
2c:47:92:dd:38:53:43:e2:f2:fd:7e:76:f7:cd:7b:
dc:69:a6:4c:bc:ee:77:e4:3d:3a:58:f4:ac:d7:d4:
dd:06:4b:7a:6f:51:a5:5a:a1:b2:e3:59:fc:aa:52:
c9:51:c0:46:fe:c5:e6:55:73:13:b4:0d:9d:33:0e:
f1:52:a7:55:c1:de:19:b6:b0:e2:05:1e:d9:92:36:
40:a7:01:88:06:9c:2b:49:bf:28:6f:1b:91:7c:3a:
39:92:f0:4c:8c:54:a5:d9:19:d0:5b:db:b1:ee:b4:
dd:11:51:cf:b7:dc:99:0b:82:62:ab:85:f1:8a:bf:
d3:cd:fe:45:c6:ca:25:2f:b3:db:28:0c:ca:a9:33:
30:4d:4b:6b:c5:47:55:84:91:e9:2e:07:d3:13:9d:
e4:2f:06:39:9c:d0:1b:50:2e:01:fd:3d:dc:d3:aa:
66:a7:f4:eb:21:6d:39:94:bc:68:b6:0c:25:e3:34:
d8:6c:1c:1c:e5:b1:82:77:43:20:99:db:c6:25:40:
98:b2:6c:3c:51:1c:a3:c8:9b:59:a1:94:91:13:3f:
6b:0d:fc:7b:4b:94:c5:f3:d0:7e:7a:ee:bc:15:c7:
91:94:0f:2a:21:7b:45:fb:5d:3c:b8:88:9e:34:cf:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:EB:C9:DF:BE:27:B2:D6:50:8A:5F:92:6B:07:51:33:8A:72:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f17:4000::/38
Signature Algorithm: sha256WithRSAEncryption
9e:a1:69:52:a0:6e:68:85:4a:50:68:c8:0c:9a:38:73:3a:f7:
23:0e:39:23:32:28:cd:c2:a7:e5:22:1a:0c:e9:75:59:dc:da:
b2:25:7f:e7:30:a0:c1:e1:fe:b1:06:44:e9:a1:42:8a:ae:f8:
16:40:bf:c8:16:2d:e5:94:7a:47:d1:dd:64:e8:a1:94:e7:42:
2c:11:09:05:0f:02:a9:f9:51:df:01:dd:2c:e5:4c:62:d0:3c:
fb:f7:17:52:ac:2d:01:7f:f8:3a:db:32:fb:37:28:9e:e3:96:
75:96:2e:e3:35:b6:0f:16:92:20:ea:45:eb:3d:0a:9a:0b:b4:
8c:d9:8f:dc:2c:02:13:57:dc:be:bb:43:21:a9:ff:70:59:29:
24:64:cc:59:79:01:94:95:cb:59:f8:ee:b0:da:5b:3e:53:be:
ed:d5:ca:71:a4:d5:cb:b2:3b:1a:d5:75:ca:68:fc:5b:d1:3b:
44:68:c2:25:62:3e:44:d2:2c:1d:7a:df:77:5d:2b:db:40:a4:
b9:b1:4e:86:70:28:76:4c:59:cc:7b:73:bc:2b:5e:4b:98:91:
8b:79:aa:80:7c:c0:c9:87:52:81:14:b1:b8:5d:76:d8:73:dd:
e7:9b:2b:97:16:de:63:41:35:61:66:49:53:50:41:34:38:4e:
05:4e:0a:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:58 2025 by rpki-client