Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
File: e6538696-8c8b-4e22-8582-42e86ff86c5f.roa (raw, json)
Hash identifier: pPixyRc4GvBzhyPIjTEAXYHEFZFApF3QjxyUF+LCs0M=
Subject key identifier: 46:CF:37:DF:BA:81:DD:FC:07:84:03:EE:D1:47:5C:57:CC:1D:05:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 016D2E124A1EA04B2C6CB3878B8028C1F70C0692
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
Signing time: Fri 28 Mar 2025 17:01:11 +0000
ROA not before: Fri 28 Mar 2025 17:01:11 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2f:4000::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6d:2e:12:4a:1e:a0:4b:2c:6c:b3:87:8b:80:28:c1:f7:0c:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 17:01:11 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:0b:50:b5:7d:4d:48:7c:ef:7b:22:92:09:
8f:bd:a7:6c:46:1b:06:a2:5b:b5:6b:d8:12:41:f7:
52:87:b8:7b:73:77:57:2a:9d:02:17:70:b5:ae:51:
0b:ba:17:f4:f2:06:d8:38:36:52:94:93:0e:92:fd:
c9:1b:97:76:f2:0e:22:47:0f:b5:45:55:21:9f:f8:
fd:c7:85:cc:2f:e1:de:e7:75:df:6f:26:41:3b:15:
43:6f:02:25:55:00:80:c4:48:07:5b:58:55:ed:d7:
62:1c:2f:f9:f2:64:05:aa:94:e7:bc:dc:49:32:65:
fc:1b:ea:04:6c:a9:27:94:84:87:8c:2b:af:81:32:
02:b7:cd:20:5e:0d:b4:87:69:95:ac:96:6e:58:7e:
c2:4b:ce:a6:01:fb:01:8c:a7:51:ed:db:c8:e5:f5:
27:57:89:ab:3f:96:91:f4:65:b0:e5:e1:c4:80:8d:
d7:0f:aa:cb:92:af:20:c8:81:92:61:7c:10:05:c9:
72:9d:8e:eb:fb:d2:ce:a3:c8:8b:3d:ea:60:04:ba:
ac:c5:4e:a1:cc:71:e4:2d:2d:ff:da:56:9b:a0:f0:
51:34:ce:92:a3:80:9d:87:89:77:5a:96:b6:df:ba:
2f:57:5b:c0:4e:50:0d:9b:da:1e:77:17:d0:ad:24:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CF:37:DF:BA:81:DD:FC:07:84:03:EE:D1:47:5C:57:CC:1D:05:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2f:4000::/37
Signature Algorithm: sha256WithRSAEncryption
0b:95:9d:fa:d0:ec:2c:ff:fd:00:66:90:49:39:65:58:14:3f:
60:19:10:31:9f:25:2e:f4:b0:3e:6d:36:53:43:94:e1:4a:f3:
30:db:af:be:9c:28:0e:ed:11:e0:59:cd:f7:9d:67:eb:55:65:
8a:58:14:fe:ad:ed:8b:c0:88:c8:37:02:06:15:b1:f3:71:a4:
4a:15:01:77:21:fd:8a:e9:37:df:1e:c2:a0:5e:be:8a:57:a5:
0e:38:c0:1e:7d:5d:a8:bc:0f:ba:86:0f:cb:1a:0a:c2:a4:ff:
d3:82:c6:0e:60:19:a6:27:2d:67:df:b8:24:2d:02:c8:54:72:
e6:49:ba:69:c8:47:8d:4c:79:b4:5a:70:de:3b:43:69:87:7d:
ef:26:f7:cc:15:d4:ca:1b:54:a2:e3:2f:77:7f:3e:7d:21:ec:
c7:8a:f3:08:54:e8:33:63:1f:f3:29:97:67:11:ea:19:16:39:
97:d7:74:37:7f:d5:16:44:7a:87:b6:8f:a3:1a:67:c1:a9:d6:
83:26:e7:4e:38:eb:5a:45:83:0d:2e:60:e6:d4:15:5c:98:7a:
d0:e5:51:14:ce:77:b6:02:03:05:a1:45:0c:12:5e:96:14:d8:
d2:3b:8c:08:0e:4d:84:54:74:ba:12:3d:a1:04:1d:79:1a:e1:
34:3f:6f:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:09 2025 by rpki-client