
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
File: 403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa (raw, json)
Hash identifier: AGxXP13W3KQ2MMPHiuPPkbfAaEqL/ON32/iAFESkUJY=
Subject key identifier: 5D:0F:50:61:04:88:89:59:67:10:CA:E5:45:AF:C0:4A:7D:3D:9E:00
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 076458A0278992D222C53259EED06B050C547F61
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
Signing time: Mon 17 Mar 2025 15:31:01 +0000
ROA not before: Mon 17 Mar 2025 15:31:01 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c0b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:64:58:a0:27:89:92:d2:22:c5:32:59:ee:d0:6b:05:0c:54:7f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 17 15:31:01 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:07:46:e8:e1:3b:1a:a4:e4:05:32:99:73:
9f:41:2e:9f:7c:fd:11:4d:ca:84:a2:20:7f:b5:eb:
ed:14:20:67:46:1f:1b:46:ad:39:d2:d1:2f:65:8e:
f4:6d:17:39:51:5a:7a:64:1e:72:36:fc:af:24:60:
01:ab:96:2b:93:1d:aa:6e:ca:dd:32:55:d1:7e:fd:
9b:34:c5:0e:a4:38:85:cd:99:ce:2d:2b:f7:42:85:
72:9d:76:57:96:26:fe:78:eb:61:e5:1b:91:cf:fe:
d4:7d:00:25:c2:f2:ca:d7:0b:d4:b5:0b:ef:d4:2f:
e0:08:f9:cc:54:a6:e2:9e:02:0d:43:b3:13:86:91:
31:f4:d9:e2:c5:82:00:97:b1:b1:1d:f6:de:8a:27:
75:b6:55:7e:60:ba:dc:c1:16:19:40:98:69:8e:55:
1a:93:9d:c1:37:7e:f4:20:04:14:31:9a:04:5a:d9:
18:90:bb:17:ff:1c:1c:53:07:06:34:17:bc:e5:e4:
4e:4d:90:45:d1:79:aa:5b:63:25:5a:3d:96:6d:a2:
6f:1e:1b:ed:52:16:95:32:45:d0:84:1b:23:96:7c:
9c:1b:10:7a:7c:2d:72:5e:bc:df:1b:e0:35:40:fc:
66:77:05:b0:27:48:88:de:8c:fa:3d:b5:20:87:27:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:50:61:04:88:89:59:67:10:CA:E5:45:AF:C0:4A:7D:3D:9E:00
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0b::/48
Signature Algorithm: sha256WithRSAEncryption
17:63:5a:65:02:89:b3:f8:75:e0:64:38:5e:92:92:95:e2:d8:
90:12:68:fd:1e:9c:fb:07:9e:0f:be:93:f6:4c:4a:04:49:75:
fa:0f:d7:0f:fb:80:6e:a0:6d:af:a3:62:d6:03:d7:5b:44:70:
a4:87:bb:13:8b:3b:4c:d6:c8:e9:ff:55:05:74:3c:33:0a:93:
9d:c3:ac:1e:78:7e:cc:30:73:23:c1:79:8b:b8:10:14:a9:e6:
f0:bf:7b:3e:4e:86:49:05:e4:0e:82:b8:bb:1f:38:8c:de:00:
5c:94:be:05:9e:46:c9:3f:42:25:d1:f5:c2:77:19:61:7d:e7:
21:7c:81:1a:65:85:ac:2c:3a:d4:19:5c:22:4d:4d:29:e0:c4:
8b:4b:30:f7:18:2d:cd:2f:20:d4:ca:13:c6:7b:ba:dc:aa:6d:
fe:39:ee:d1:ad:42:69:d5:be:10:65:62:04:e8:a2:39:29:05:
8b:95:45:41:ba:e1:cf:d9:4b:48:69:82:4a:e7:a1:05:4b:06:
a1:8b:28:e1:62:fc:08:d9:8f:64:88:a2:9a:7a:84:57:73:4d:
f5:84:c8:b5:7a:cd:ce:8f:9f:72:f8:9e:8e:ec:5f:59:25:bd:
f9:99:37:e2:1a:12:ed:44:33:3d:14:26:ab:22:93:4f:89:be:
75:f9:ba:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:30 2025 by rpki-client