
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
File: 8305547a-da17-456f-b279-caefe677572d.roa (raw, json)
Hash identifier: cjl3D8nPCGDAKMIwp7fgmyZbt6EOEpzhODxqKhP8mBw=
Subject key identifier: 55:0C:85:23:39:08:26:5E:89:88:CB:70:8A:0F:BD:C0:72:40:5D:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 296502B1A31B4A842709EDBF60116B093F11989D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff7:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:65:02:b1:a3:1b:4a:84:27:09:ed:bf:60:11:6b:09:3f:11:98:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:c8:87:15:c0:7d:2e:c3:58:b3:09:b4:6f:
19:61:50:36:1d:a7:65:12:e1:20:e6:ae:49:6a:89:
bf:b7:59:5c:76:d2:47:24:45:51:01:6b:d8:20:04:
d7:d1:cb:eb:60:24:b8:36:40:dd:fb:ae:ca:69:5d:
6d:8e:1a:2d:9a:ab:5d:14:d1:25:a0:33:f8:0b:d4:
f1:d0:2f:18:73:20:bf:12:16:05:73:a3:b8:cb:7b:
82:c6:39:27:5a:50:70:88:9a:56:ad:03:e5:af:cd:
49:38:03:ca:5a:e9:ea:51:9e:15:b3:e5:b6:f4:8b:
80:11:59:67:c1:6c:4e:a5:37:64:39:7d:6f:c0:13:
11:af:00:99:63:30:4a:1a:f9:6f:d6:e6:14:d8:8b:
c0:e9:0e:3e:6e:2b:bd:e5:69:b7:9d:8a:d3:64:56:
2d:d8:ee:ec:78:dc:3c:3e:30:29:34:0c:92:6e:31:
58:a3:5c:14:3a:5b:6e:6a:35:24:d9:42:09:e5:4b:
30:e7:c0:75:bc:ce:a4:49:9d:c7:76:4d:a7:a6:56:
54:e5:ad:8a:71:1e:90:a5:a8:39:4a:67:b1:2e:72:
46:c5:7c:92:a5:c3:71:da:fb:05:08:96:8b:fb:b1:
d3:81:09:d0:7b:1a:62:78:ed:72:5a:83:77:f6:c5:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:85:23:39:08:26:5E:89:88:CB:70:8A:0F:BD:C0:72:40:5D:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:a3:28:70:2a:7f:d7:5d:3d:d9:bc:f4:9e:54:08:0b:44:34:
db:38:5f:32:2d:40:d9:17:e2:7b:f6:bf:8c:00:a0:08:cd:4f:
fb:ce:6c:0c:7c:4a:3d:ea:32:80:5f:96:da:85:d5:1d:0d:4f:
7b:1a:58:25:ca:98:8e:73:68:b1:48:33:76:25:eb:9a:06:4a:
9a:99:c2:ec:05:59:f9:d7:a1:30:03:69:cf:6a:31:ad:1a:64:
97:5a:47:ca:d7:89:2e:70:f6:14:8c:22:85:9d:bd:1b:19:f5:
a1:4e:82:bd:60:de:c8:e4:d4:32:67:e7:a0:fc:73:d4:79:3a:
0b:fa:2b:5e:86:34:62:fc:a9:90:77:54:b9:00:49:8f:80:02:
1c:4d:f4:01:62:e1:38:4b:dd:e3:9d:f9:20:70:e3:9c:ca:34:
db:44:61:2f:07:c7:f7:63:61:1e:47:2d:6a:d3:c6:f9:e4:3b:
cf:9a:ac:16:b6:f0:6f:fa:50:17:98:3f:ce:ba:dd:a5:6c:4e:
44:e2:75:7a:59:69:2f:59:0d:30:62:70:32:3a:f1:74:94:c4:
8b:d1:00:ac:68:e0:a6:21:33:8b:93:25:de:e6:41:78:f8:af:
2e:78:2c:71:ef:f8:eb:df:30:30:c9:07:7e:8c:11:52:46:e0:
34:e8:7c:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 10 17:07:49 2025 by rpki-client