
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfb629f-53b7-4fea-9274-7632a64078e2.roa
File: 2bfb629f-53b7-4fea-9274-7632a64078e2.roa (raw, json)
Hash identifier: GJi1/E2oi47VTihiJyXaOROvIqQ8tVqRVDEL/zGOV3E=
Subject key identifier: 28:68:AF:B2:E2:4B:63:0D:F0:B1:85:BC:34:72:47:72:D7:5B:32:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D33964819A59129CCD65E836500017226AEA0D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfb629f-53b7-4fea-9274-7632a64078e2.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f00:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:33:96:48:19:a5:91:29:cc:d6:5e:83:65:00:01:72:26:ae:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:3f:9c:8a:0c:f4:10:14:91:c1:1d:8f:df:
ac:9f:a0:cb:8d:ca:a5:8b:3c:be:ae:82:21:4c:82:
08:fc:e9:ae:9d:2b:d6:50:52:1e:a6:ac:ef:1c:1c:
1e:e1:9b:83:c8:2d:f6:44:84:65:99:0f:41:bb:4d:
a2:f0:7b:82:29:b9:af:34:02:2a:75:b0:55:2a:7e:
a6:d0:ce:a0:79:d8:14:38:68:cc:cb:e0:e3:e3:44:
59:3c:d1:27:cf:7a:24:0d:e6:bf:11:d6:76:d6:e2:
ef:5a:af:e6:68:30:5d:0b:f8:0a:f6:07:67:15:31:
af:f9:fd:81:75:aa:a8:a9:38:a2:22:87:6f:3c:6b:
c5:67:09:7e:2d:08:44:bf:64:ab:c2:b1:09:86:f7:
11:76:52:6e:1e:11:fe:ec:28:4c:a9:13:6d:31:8c:
64:61:0f:f5:27:37:30:39:e7:b8:03:48:82:22:92:
69:16:65:1d:34:53:dc:71:77:32:9c:21:8f:ae:74:
dc:09:bb:fc:a7:2a:2d:a4:61:86:ea:ef:5c:51:18:
d2:a0:95:84:8b:78:17:02:e3:36:43:8f:cf:62:dc:
c3:92:35:9c:20:90:ad:35:5e:70:b3:02:91:cd:ea:
23:c3:d4:d9:a6:df:53:9e:40:9f:de:31:94:5d:09:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:AF:B2:E2:4B:63:0D:F0:B1:85:BC:34:72:47:72:D7:5B:32:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfb629f-53b7-4fea-9274-7632a64078e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:2080::/48
Signature Algorithm: sha256WithRSAEncryption
d4:b2:87:77:ed:06:82:45:98:a4:75:70:6a:0a:3c:c8:c9:5a:
b7:30:c5:09:14:e9:bf:6a:0d:c2:52:27:f3:73:02:72:0f:49:
eb:bf:de:6b:a1:47:2b:5b:7f:27:36:b6:97:5d:dc:6b:5b:58:
2d:87:4b:93:1b:10:e3:f6:a8:4a:dd:77:39:4c:bb:59:75:ed:
31:09:0a:d7:f1:50:69:48:8d:e3:57:23:70:82:14:b3:07:cc:
e4:9f:a0:24:4f:a5:80:e9:47:50:bb:c4:63:8c:ec:51:7d:93:
25:0f:24:3a:e3:e7:94:13:bc:ae:36:f2:dc:d0:a1:6c:8b:eb:
27:91:5b:83:71:41:3e:0d:19:b2:5d:41:af:3e:3f:6b:20:32:
aa:00:74:09:26:23:9d:3d:30:a2:67:a3:10:fd:1a:e9:1d:23:
75:48:61:de:6f:50:65:80:ea:18:fb:5b:b1:5b:5f:a3:7f:cf:
7a:9e:07:ac:3c:c7:7f:42:91:69:c6:b5:18:62:6a:f4:7d:3a:
87:30:9b:56:2d:b1:be:1b:a6:5f:a2:1a:4b:ff:0c:4f:65:cc:
1e:03:01:5e:96:29:af:e3:14:96:ad:73:da:34:3d:54:bf:1c:
15:cf:fd:99:9b:f7:90:45:56:48:ee:2c:3b:49:98:1c:58:3c:
ce:8d:14:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 10 17:36:38 2025 by rpki-client