Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce670738-d498-4176-afd2-5eae2a1ad57d.roa
File: ce670738-d498-4176-afd2-5eae2a1ad57d.roa (raw, json)
Hash identifier: pA+CCD3idnCsFtTBNu43Xs0h+EfDvHMV6KNAHCt2fsU=
Subject key identifier: 63:19:EE:19:4A:09:E0:68:9D:2B:42:2F:F1:1F:DA:4F:E4:ED:58:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D6ECE67FEA3BA6EED0249A83A13F0671783E8BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce670738-d498-4176-afd2-5eae2a1ad57d.roa
Signing time: Tue 04 Mar 2025 17:00:13 +0000
ROA not before: Tue 04 Mar 2025 17:00:13 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2620:107:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6e:ce:67:fe:a3:ba:6e:ed:02:49:a8:3a:13:f0:67:17:83:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 17:00:13 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:92:ac:81:2f:cc:f8:bf:89:e5:61:5d:57:
4b:4f:1b:2d:4b:e9:d9:99:16:58:a0:2f:51:ca:68:
3d:4c:64:e3:db:16:81:79:56:34:5a:04:fb:c5:a9:
47:91:76:c3:e9:bc:7e:fa:e4:ec:86:9c:41:f2:ae:
3e:c8:7b:22:ed:57:81:2c:1f:fb:1d:ba:d8:48:47:
7c:24:d7:27:c5:03:51:9d:b2:b4:a3:e6:58:b5:92:
33:b9:24:0a:21:74:fd:73:6a:c5:b0:23:9f:57:6f:
8f:e3:67:9d:d3:51:bd:58:d9:32:ad:93:d5:7e:bb:
d8:6c:78:e6:1a:7d:25:d6:01:30:e0:52:1e:be:ca:
a1:4d:8f:98:5b:09:3d:32:54:a1:9d:f5:dc:92:9d:
ae:7b:f2:ed:e2:7c:ad:52:e6:ea:0e:51:72:dd:9a:
9f:9c:8f:41:71:b9:c9:31:f8:3b:b1:a2:06:6c:6f:
66:f7:72:58:e0:8e:04:51:3f:f3:81:cf:16:9d:55:
5e:96:fe:b4:76:92:22:98:89:e0:42:5e:ae:4b:ac:
e0:d6:49:62:3f:30:79:8f:a3:e0:77:7b:a2:92:f2:
7c:c0:d2:17:6d:f2:74:36:5f:37:4b:d6:28:9b:5d:
91:de:05:de:dd:b6:40:d6:70:d3:21:83:57:98:b0:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:19:EE:19:4A:09:E0:68:9D:2B:42:2F:F1:1F:DA:4F:E4:ED:58:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce670738-d498-4176-afd2-5eae2a1ad57d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:107:4000::/48
Signature Algorithm: sha256WithRSAEncryption
90:2d:48:d6:84:db:48:7a:8a:1f:e7:bf:43:71:33:ca:6b:f4:
1d:92:e5:15:53:68:f9:3c:29:b0:d3:51:8f:62:64:04:bf:8e:
cb:1c:46:76:43:5a:e5:3f:fa:10:31:e0:be:e0:b9:23:da:a5:
5c:32:2d:86:23:c5:b9:7f:8f:01:82:d4:25:44:be:43:b2:a2:
be:8e:f3:2e:27:d5:b7:6f:a5:30:2c:af:dc:ca:0b:00:de:06:
31:a4:88:6b:4a:7c:65:e7:76:ed:3c:0f:ef:31:b9:d5:94:46:
92:17:11:4f:41:e7:2f:08:48:dc:2e:b7:28:3a:00:d5:bc:f0:
9c:24:e6:58:a6:df:77:d9:20:b0:a8:f6:89:a1:1c:17:16:57:
f8:ac:42:75:7a:8b:6f:41:15:09:0b:0a:83:a5:9a:64:5f:e6:
84:d3:f2:b2:1b:ca:e9:d6:4c:0d:08:37:c5:b3:9d:31:b6:b1:
3e:d2:62:70:f0:91:10:1b:dc:2e:c6:8d:66:d4:69:49:2d:56:
92:c5:22:3f:79:ae:3e:24:71:ef:ed:7e:21:7d:5b:6b:19:e1:
d9:fe:1b:a0:83:88:d3:ff:de:b9:91:3e:0f:fd:7b:8c:61:48:
b5:49:72:bf:bb:67:29:7d:f1:9e:99:9a:9b:d2:62:31:36:cc:
a1:21:f6:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:39 2025 by rpki-client