Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa
File: d16323a6-1daa-4972-8271-04fee1ea157d.roa (raw, json)
Hash identifier: jRDcgvsiYJ1dsot49as8mCrEQipiCSTSsSeNPt/a5kI=
Subject key identifier: 44:B6:B7:21:9E:89:46:73:8B:FE:D1:37:DA:F5:15:C3:7A:22:C5:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1851A278DDA23BDE31BA20600735C4171F7BB22C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa
Signing time: Sat 15 Mar 2025 00:21:07 +0000
ROA not before: Sat 15 Mar 2025 00:21:07 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f68:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:51:a2:78:dd:a2:3b:de:31:ba:20:60:07:35:c4:17:1f:7b:b2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:21:07 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:dd:ff:91:e2:49:1b:31:8b:3e:a7:99:ca:
fb:f2:0d:cc:a1:b6:8f:97:41:ae:e1:80:0a:48:1f:
04:8c:ee:1b:5a:84:a4:24:22:25:f0:37:ee:c7:fa:
65:18:c3:38:d8:18:8a:e3:d8:ee:85:30:9f:6e:7d:
16:87:ec:5f:ae:08:dd:ff:23:7f:4b:7e:23:0e:31:
f0:75:5f:5c:6f:02:67:ce:5c:c5:f1:91:d5:5c:ce:
2f:d5:92:3f:8b:41:b1:9b:c1:3d:76:65:ea:07:cf:
40:41:99:55:f6:d5:71:fc:af:2f:df:40:ea:4c:d6:
02:93:a8:68:f3:00:db:61:ca:4e:f4:61:80:e8:a7:
f2:10:83:2b:48:81:90:da:28:f1:e2:80:3d:4a:f2:
67:3c:aa:d8:c1:a3:c1:d1:d7:22:f8:1f:42:18:a6:
06:29:de:54:fb:be:a3:e2:11:38:64:b9:c5:19:31:
ba:88:00:82:d2:7b:56:97:7f:4b:06:9e:f8:ea:f1:
af:5a:58:cd:c2:77:d9:5f:d9:34:66:8f:0a:fd:b7:
43:74:9d:34:c7:b6:9a:05:83:a8:fb:67:9b:5c:86:
95:90:45:d2:d6:c0:d3:c5:85:ea:93:c4:be:b6:12:
cc:8d:cd:7f:17:61:9e:2c:fb:f0:eb:27:bf:29:7b:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:B7:21:9E:89:46:73:8B:FE:D1:37:DA:F5:15:C3:7A:22:C5:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:2000::/40
Signature Algorithm: sha256WithRSAEncryption
d7:7a:8f:dc:5a:bc:27:ef:f3:28:70:bd:02:ce:3c:a0:44:71:
36:3b:e6:93:c6:e4:66:af:d1:25:e8:8d:fc:7a:57:0e:a8:c4:
35:a0:9c:a6:10:65:2b:4c:0b:4f:09:39:64:09:ca:fe:e4:f1:
f4:a0:31:8a:30:04:44:61:9b:05:08:7b:21:2e:d7:39:4e:24:
31:9d:f0:2d:0c:b7:46:4b:19:25:92:02:e5:05:ba:53:1f:71:
f0:e5:e8:23:71:47:4e:4b:b6:3c:b5:9a:03:64:bc:4b:e6:fb:
db:60:f6:eb:b1:09:da:45:3c:06:61:9b:4d:12:1a:f7:e2:48:
29:a4:b4:d0:56:28:28:e6:cb:30:2e:fb:a7:db:59:45:ae:d6:
10:c4:01:9d:56:a3:4e:74:68:77:e2:00:89:43:3a:b2:65:de:
82:4a:fc:47:ee:a2:d3:c8:6b:57:21:c7:87:9c:35:e2:ed:85:
24:59:e1:3c:cb:7b:0f:fa:e1:db:ca:e6:3c:2a:8b:16:19:ae:
79:c0:46:d4:3e:92:4f:8b:06:ef:80:d8:20:3d:0d:6e:eb:63:
82:85:20:73:47:9e:b3:19:20:c0:51:9a:74:6f:bf:32:75:81:
3e:08:56:9f:a0:92:1f:2f:72:92:a6:65:93:8f:59:e5:d2:e3:
db:92:49:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:11 2025 by rpki-client