Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0492de3-6dec-4437-b63c-91630e1f4dbe.roa
File: c0492de3-6dec-4437-b63c-91630e1f4dbe.roa (raw, json)
Hash identifier: 0mtV6lmZlzS5fXd/YEGgPXkTvm0eQuLqFV0wmdbF5ZU=
Subject key identifier: 33:B3:4D:46:58:71:23:E6:0A:89:DC:68:AB:85:E8:76:3E:1E:8B:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73AB205D953B23B962916C0D265611DCA4E9B58B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0492de3-6dec-4437-b63c-91630e1f4dbe.roa
Signing time: Fri 28 Mar 2025 17:11:01 +0000
ROA not before: Fri 28 Mar 2025 17:11:01 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f21:4000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ab:20:5d:95:3b:23:b9:62:91:6c:0d:26:56:11:dc:a4:e9:b5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 17:11:01 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:2f:25:9f:3d:04:0b:51:9e:b8:4f:fb:3a:
ed:70:fa:63:46:26:50:a6:6e:0f:c8:95:27:c6:df:
ff:cd:41:7e:d1:7b:01:b5:db:4d:78:a7:05:eb:9b:
d8:45:2c:27:a7:00:ce:87:08:84:27:79:91:39:5d:
ef:6a:c2:dc:eb:8f:3d:47:77:75:42:64:05:f1:13:
04:7e:be:af:4c:a6:8a:91:76:b5:39:fc:9f:03:3e:
b9:06:db:8c:49:44:63:96:7c:07:a6:00:84:ba:bc:
ba:eb:da:ab:d2:d0:f0:46:81:10:fa:f1:49:33:96:
be:40:38:54:f5:f5:85:84:48:a6:9d:05:e0:b4:12:
9a:ed:8d:99:f4:83:84:58:eb:48:71:a8:15:38:5f:
67:1b:8e:fb:ed:53:b4:c5:b4:65:71:c4:74:70:b6:
5f:5a:4a:79:06:5c:92:4b:ce:44:ad:52:1a:eb:65:
a5:2f:ee:ef:87:b0:b8:ca:3b:78:00:17:86:ab:d9:
9e:20:a2:5e:1f:64:4b:cb:6d:3d:49:cf:e5:f6:38:
96:bc:23:5d:21:32:ba:79:ea:b3:15:66:bc:9b:df:
67:70:e5:06:27:0e:54:ff:95:15:c4:5a:67:ff:7a:
1e:62:36:2f:10:da:96:00:a4:81:8b:f5:83:3c:65:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:4D:46:58:71:23:E6:0A:89:DC:68:AB:85:E8:76:3E:1E:8B:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0492de3-6dec-4437-b63c-91630e1f4dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f21:4000::/37
Signature Algorithm: sha256WithRSAEncryption
1e:90:b8:17:75:5c:b6:08:47:8e:47:2a:34:85:6f:9a:f8:c5:
5e:c7:42:bc:89:10:98:ee:8c:40:cb:78:e0:5b:0f:b5:c6:a7:
8f:68:f9:bc:e0:a5:e7:f0:55:ad:af:ec:81:db:3a:6b:88:a2:
62:b6:80:9f:40:0e:88:ca:d0:83:3e:21:76:ed:a4:34:df:2a:
07:5b:72:16:34:d5:ef:f3:9c:95:a8:af:2d:b8:04:05:ef:04:
95:dd:2c:57:98:14:98:bb:92:9f:53:47:30:fd:51:60:d2:e6:
ad:c2:49:1b:f4:65:2a:86:8e:de:d5:22:21:8a:1c:1b:b4:31:
71:61:1c:b8:99:a6:85:bd:20:0f:49:8d:eb:4e:6e:44:22:82:
18:4d:bc:18:4e:e7:2d:ce:7f:fc:8d:3d:15:47:39:b2:45:74:
ce:ef:6e:af:26:54:9b:2f:e0:01:55:10:b2:0f:4d:fd:c7:88:
4d:97:2a:45:76:e8:32:f8:74:ab:91:6b:25:7d:41:e1:a2:83:
34:e3:a7:4a:82:06:37:f5:d9:9f:db:bf:78:e0:d1:dd:3c:23:
dd:78:bc:66:e9:b5:93:40:ca:29:47:5c:15:a9:d4:43:34:cc:
62:ea:13:e5:aa:5d:de:4e:d5:0a:35:3e:9f:c7:f4:a0:8f:84:
5c:86:df:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:27 2025 by rpki-client