Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa
File: 15573dbf-b10c-436f-b5d6-7526187c5030.roa (raw, json)
Hash identifier: +59MgPb2JH+qxiWBpeCOgfBkYnI9bJKa7fW2mqBb0kk=
Subject key identifier: 55:2B:3F:7D:99:9A:AD:A5:83:01:D8:A3:80:33:35:7C:17:F6:73:D8
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 67968DDA66BF55391957BC012EF156BD01FCB73B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa
Signing time: Fri 07 Mar 2025 15:00:56 +0000
ROA not before: Fri 07 Mar 2025 15:00:56 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:54a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:96:8d:da:66:bf:55:39:19:57:bc:01:2e:f1:56:bd:01:fc:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 7 15:00:56 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:8c:3a:1e:25:51:37:9e:df:c6:92:de:75:
19:0c:8c:94:17:4d:39:2e:c0:05:87:3a:4f:7b:c3:
54:f5:fe:9d:3b:20:32:70:72:49:d7:e5:c4:dc:d5:
66:10:91:01:0a:7f:51:fe:c4:ae:dd:cf:97:86:e1:
f1:25:71:91:95:25:77:87:2c:e5:60:fc:13:38:d7:
74:e1:68:0b:13:c3:31:a7:b7:e8:8a:0e:59:ca:3b:
41:3f:1a:89:fa:af:b5:c0:fe:d2:5f:00:11:93:5c:
7d:55:53:20:b8:50:71:97:69:fc:7a:82:f5:07:dc:
9d:f2:cf:c1:13:7d:73:12:74:2a:12:33:52:5f:55:
5a:20:79:6c:81:ea:0e:56:00:27:3c:3d:e0:79:dc:
30:0f:16:a9:4c:c4:06:48:0f:86:cf:b9:29:e2:49:
8e:7f:44:b8:55:3f:d1:7e:e9:8f:c1:be:54:ca:bc:
bd:b6:3c:e3:2c:22:73:e7:88:be:a8:8d:e3:d2:9c:
87:64:a3:a8:d0:66:12:ef:4f:fc:f7:40:01:5f:de:
5f:bf:cb:d8:fe:d8:1c:27:f1:4c:9c:f1:f9:6b:03:
5e:ab:26:0f:82:f5:20:a8:e3:c7:d7:e5:b3:09:3a:
f7:65:f7:0b:a7:a5:80:da:86:f8:ff:1c:08:c3:8a:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:3F:7D:99:9A:AD:A5:83:01:D8:A3:80:33:35:7C:17:F6:73:D8
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:54a::/48
Signature Algorithm: sha256WithRSAEncryption
7c:02:1f:3d:d7:c4:9a:fe:73:98:dd:75:7f:15:7d:1f:22:70:
44:5e:7b:0c:9d:aa:84:5e:ee:79:fd:91:61:d8:c7:93:64:bc:
dd:67:bd:6a:88:6c:8a:4b:64:e5:58:8e:0e:bd:72:c9:ad:3b:
d3:a2:a2:c2:17:2b:2d:58:70:a4:3c:39:bc:c6:16:cb:fd:14:
ae:65:ac:c9:7f:20:aa:ef:b3:05:5a:41:ca:45:42:50:dc:5a:
2c:95:25:f4:2d:14:f0:75:df:80:84:66:f2:16:40:ba:a9:4c:
a6:0d:08:2f:1c:01:03:bb:d8:51:4a:1e:8a:2a:61:00:d1:33:
a2:4e:70:59:4e:60:8a:d4:ea:e2:1b:cd:58:f9:6b:1a:bc:fe:
d8:3e:a5:e8:21:ef:00:da:e3:c8:9c:4d:97:40:b6:25:b0:b4:
ff:7c:52:43:87:2b:db:07:c7:f8:d8:7b:1d:40:d4:7a:f7:e0:
50:6e:38:e5:a1:35:e9:9f:61:0f:87:4b:b7:58:d6:99:21:ac:
98:59:0b:79:60:e1:dc:5d:f1:ee:57:bd:e2:19:73:fc:b0:59:
90:6c:4a:a2:68:42:50:1d:80:55:b1:1d:c7:59:dd:5c:21:22:
83:6b:8f:ee:ff:f0:bc:6f:e8:de:9b:16:00:fa:0f:a4:44:99:
d2:8d:f2:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:10 2025 by rpki-client