Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa
File: ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa (raw, json)
Hash identifier: /06bHhpHULL6BLfGfeHXFS2vXYdbehznHCb3Uo70zdg=
Subject key identifier: 46:C4:ED:EC:99:CE:5E:D0:61:E9:92:03:7A:33:64:96:13:7F:5A:E6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 623DD6C00C99703A13924DF5E92027B25D7822F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa
Signing time: Fri 28 Mar 2025 17:20:55 +0000
ROA not before: Fri 28 Mar 2025 17:20:55 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2e:4000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3d:d6:c0:0c:99:70:3a:13:92:4d:f5:e9:20:27:b2:5d:78:22:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 17:20:55 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:44:27:ef:0a:d3:2f:18:17:30:8a:50:00:
c3:3c:61:6f:f0:6d:f3:c5:01:aa:e6:6e:48:0d:90:
40:31:53:92:5d:9a:00:6f:de:59:0e:72:89:ae:d0:
fa:75:53:99:76:b2:ad:72:96:ed:73:d9:69:9b:f2:
17:e7:29:7d:e8:d8:c7:ff:df:70:ee:6d:ab:a5:8a:
75:44:2e:d3:ab:b1:c6:21:2b:b6:8d:01:08:53:4c:
4e:20:e6:30:cd:9e:16:c1:90:11:19:2d:f6:16:07:
28:93:42:57:75:76:c4:67:c3:dd:96:58:d8:bd:70:
c9:c4:03:b3:cd:cd:c9:ea:38:28:79:43:07:ee:fc:
7f:72:f3:21:a2:95:94:b5:18:e6:7c:27:c3:cb:c8:
95:2c:c4:86:41:1f:de:b0:d5:3c:bb:9c:95:54:7a:
5d:e1:c7:27:ad:b1:d4:d6:a6:0a:0c:27:d6:6d:9d:
60:c8:33:2c:97:74:bc:eb:83:f2:54:bc:23:98:f5:
59:1b:b3:4e:c1:8f:d0:aa:b6:12:c1:32:ef:2e:cd:
1a:96:34:0f:5b:86:bf:7f:1c:81:53:98:1c:7a:be:
e8:06:c4:e3:f3:16:5c:8b:7c:e7:9a:c0:69:b4:d7:
64:9a:fa:31:07:6f:ca:9a:c8:15:67:bb:89:57:5b:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:ED:EC:99:CE:5E:D0:61:E9:92:03:7A:33:64:96:13:7F:5A:E6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2e:4000::/37
Signature Algorithm: sha256WithRSAEncryption
51:3a:97:32:48:70:a7:2b:d2:bb:a6:25:2a:7f:09:ba:78:cd:
fe:d2:2d:49:77:e5:f6:59:c4:ac:7d:8c:cd:e2:df:0a:77:ce:
52:fb:dd:cc:2c:9c:e4:3f:95:65:13:fa:48:c9:e0:cc:f5:ac:
0d:2c:0b:13:e7:12:22:48:13:90:cc:d4:af:78:98:a0:47:8b:
a4:73:a1:ab:cf:dd:1f:9c:ff:92:52:31:7c:5a:99:62:50:df:
d9:df:43:93:b7:7e:e9:b1:f8:7b:de:ae:8c:76:b1:57:ef:c4:
6b:fb:37:5b:87:f8:ae:8f:f8:33:a2:4f:ec:c0:50:b4:0a:3b:
8c:8d:ae:8f:5d:1c:1b:37:20:95:a4:96:43:44:be:fe:9d:42:
a9:3a:6a:75:e2:11:bb:2a:ec:8e:d4:7b:76:da:66:88:46:51:
68:59:21:08:a2:3d:bd:cd:08:9f:0f:e5:00:c6:be:36:91:be:
48:aa:8a:8b:1b:46:60:92:ad:fb:ab:d6:07:1c:dd:40:55:84:
e5:c9:3e:65:b0:28:1d:5e:b8:1e:c5:19:09:2f:7d:9c:23:3a:
8e:df:c3:66:3a:ab:72:81:87:5f:01:ab:5c:bf:52:9a:aa:30:
05:49:37:29:cd:a9:91:a2:a1:8a:ef:44:de:3a:f7:ca:3f:25:
ec:2d:28:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:16 2025 by rpki-client