Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c084fbad-9ad4-4870-96e6-822ef8e85953.roa
File: c084fbad-9ad4-4870-96e6-822ef8e85953.roa (raw, json)
Hash identifier: i+PQiHfCAc7020cTveK23kDQp8C0GUezolHJ3oshVhc=
Subject key identifier: D5:AF:B9:B0:FA:99:03:44:96:28:20:3A:E7:9B:FF:8C:6E:93:60:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5DEFA50883FF9B6D3E860EEF93DF4D502081D28E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c084fbad-9ad4-4870-96e6-822ef8e85953.roa
Signing time: Fri 28 Mar 2025 16:21:03 +0000
ROA not before: Fri 28 Mar 2025 16:21:03 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fee:3400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ef:a5:08:83:ff:9b:6d:3e:86:0e:ef:93:df:4d:50:20:81:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:21:03 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:14:cb:83:5a:86:76:5e:e8:e2:98:7b:93:
48:80:69:f8:37:98:35:ff:0a:2c:bc:e5:1d:61:32:
a8:08:a6:8e:de:19:ca:a1:61:6b:20:b3:9d:15:c1:
14:fc:ef:2a:9b:dd:08:11:3c:e8:0d:1c:eb:21:83:
7d:72:e0:0f:7d:80:b4:14:a8:14:ef:98:4d:11:22:
91:64:15:6d:97:99:4a:a4:b9:37:43:02:8b:8e:06:
d9:9b:32:96:51:21:07:2f:ac:28:18:a1:ed:86:7a:
69:c7:ff:21:bc:c1:3e:c5:b0:65:5f:58:84:cd:b2:
be:5c:bc:70:4e:98:bd:b0:40:68:43:23:54:2e:61:
e8:af:fe:d4:d8:72:66:88:11:42:44:59:ce:d7:21:
19:73:11:b1:df:13:c4:e7:d3:51:7c:e0:5b:57:39:
2f:2e:c9:ab:02:0a:fa:b0:2f:8e:67:36:90:47:4e:
9e:08:26:de:88:55:2b:04:3f:4c:04:fc:66:71:f5:
9a:3c:2f:5e:30:79:40:f1:18:b8:c7:16:3f:f7:5d:
b3:8d:c0:c1:69:f6:f3:b2:af:3e:5a:0e:e1:ae:26:
1f:29:8f:0f:5c:37:a4:3f:b5:bb:f0:db:05:c3:e7:
91:35:62:09:ca:7b:be:57:dc:75:cc:80:52:9c:0e:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:B9:B0:FA:99:03:44:96:28:20:3A:E7:9B:FF:8C:6E:93:60:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c084fbad-9ad4-4870-96e6-822ef8e85953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fee:3400::/40
Signature Algorithm: sha256WithRSAEncryption
88:94:1c:cf:81:c3:ad:b8:dc:73:12:7d:ed:0e:79:24:61:df:
4b:65:f5:c7:fc:ad:2a:aa:08:9b:75:8c:5b:67:99:1e:4f:c2:
48:2c:a9:60:5f:0f:c4:19:1e:2b:ef:5d:3f:05:d0:39:b0:81:
78:52:19:a9:e5:85:11:c8:d8:d6:6f:11:ed:9e:e3:4d:64:99:
06:22:0e:82:bb:13:f8:2e:8d:53:4f:f6:17:73:3c:e1:6a:0a:
1d:54:29:12:5f:2b:56:51:46:8f:6f:cf:e0:c2:cd:cf:50:25:
7a:c4:36:d2:5e:df:65:2b:93:9e:da:6d:51:6f:4b:d9:b8:78:
a8:e0:03:32:0d:5e:24:96:63:01:71:a2:80:9e:cc:cf:b3:56:
4d:84:1b:e0:d4:f0:d7:8f:07:12:44:79:f9:fc:ef:ef:b8:a6:
d4:a5:13:fc:bb:c6:4d:4d:b8:c7:d8:5a:96:93:5b:0b:cc:e1:
22:d1:cf:d1:a2:f7:29:0a:bc:5c:bf:c4:d5:0f:eb:11:23:f6:
67:62:0a:d7:79:ae:cd:0a:4c:7d:7b:be:e1:19:9a:48:11:60:
5b:33:b6:4d:28:d2:5b:43:08:3f:9c:6e:80:00:bf:81:e0:eb:
c3:e8:57:2f:52:f9:c7:85:c8:af:0f:82:8b:d5:ee:75:ab:aa:
59:3c:cc:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:47 2025 by rpki-client