
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c98928b8-879d-4f9d-b85e-bd0ebd8535db.roa
File: c98928b8-879d-4f9d-b85e-bd0ebd8535db.roa (raw, json)
Hash identifier: MCa5MZ606MZvnLSYeVyq1ipjvHLcWm+7OCYPSeEKZr8=
Subject key identifier: A2:58:41:DF:6E:27:13:68:FD:FB:90:2C:7D:2B:66:63:1D:CF:9C:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37E5495C695D43B897494B4C3502DF2A91F87DA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c98928b8-879d-4f9d-b85e-bd0ebd8535db.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f30:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e5:49:5c:69:5d:43:b8:97:49:4b:4c:35:02:df:2a:91:f8:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:bf:a3:f1:aa:d1:dc:d4:8e:e8:55:9e:85:
97:8b:72:43:7e:f6:26:a4:28:ab:7a:c1:66:1d:2e:
7e:b5:80:9f:24:aa:40:7f:00:0f:57:e9:20:80:fd:
74:7f:c9:f1:98:94:2c:a3:3c:91:fa:88:9d:c6:f2:
c6:24:3a:a5:a8:97:06:55:fc:d4:3f:d5:3f:75:00:
34:a4:c1:d5:d7:f9:7b:97:dd:9d:1c:56:c3:c2:b0:
a3:f6:21:15:54:21:4b:e3:06:d3:17:4f:09:09:cf:
43:03:ef:da:33:3d:f6:56:86:d7:88:4b:b6:e3:3b:
1a:81:8c:07:eb:eb:ab:8a:82:b0:3b:8c:fd:b0:34:
e5:19:7d:c8:f5:3a:21:bf:d2:49:31:7b:69:f1:34:
80:30:f5:67:cd:e2:8e:35:a6:56:65:f0:f5:81:5c:
3f:e5:d9:22:a1:ec:ae:9a:be:4d:8c:73:0e:99:d4:
05:32:b2:44:3e:8e:3d:dc:3d:f4:60:9b:a3:88:8f:
cf:39:6a:0c:1c:ef:44:13:68:80:de:2d:3a:4f:6f:
a9:d0:07:cf:98:e7:2c:5b:52:85:5e:b0:3d:8b:6c:
a7:6d:64:42:19:43:d6:c1:21:f5:eb:91:93:c1:c2:
55:c5:75:a8:24:4e:47:81:9c:03:40:2a:90:3a:ab:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:41:DF:6E:27:13:68:FD:FB:90:2C:7D:2B:66:63:1D:CF:9C:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c98928b8-879d-4f9d-b85e-bd0ebd8535db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f30:5000::/40
Signature Algorithm: sha256WithRSAEncryption
42:f3:d1:82:68:4d:4e:d9:b7:68:23:19:de:9d:25:0e:fa:b5:
1a:6f:b1:75:f8:f6:c1:31:db:78:22:a5:e2:f9:d5:24:91:b9:
36:39:2e:27:20:3d:c6:80:36:fb:40:06:19:a0:99:cc:8d:98:
f1:d7:bf:c3:df:63:70:60:dc:69:19:67:07:59:7c:01:7e:46:
ed:c4:6a:cf:d6:92:ad:f6:b5:29:cc:a2:3c:88:ea:4d:8f:d6:
4b:8f:e0:04:5f:df:79:a0:7c:c4:30:f4:9e:fb:49:bd:3a:ce:
e2:9b:f5:13:b8:33:eb:10:df:9b:2f:14:d5:8b:c8:bd:8c:17:
14:18:b9:d2:01:20:6d:a9:75:23:5b:65:90:06:5e:b6:b7:de:
3a:10:b7:c4:a0:77:77:3c:0e:39:9f:86:49:ad:f8:86:54:7e:
77:80:6c:77:3f:f2:2e:ef:12:88:13:3b:4b:ce:99:f6:14:81:
e8:f7:b1:07:52:22:ad:79:76:93:70:61:0f:8e:50:34:95:ba:
a8:0b:09:f2:0c:df:5f:e9:68:07:2f:40:67:ef:41:a6:e5:bd:
04:18:6a:c9:90:9b:8a:6b:98:35:d6:96:53:cf:bb:a8:b0:a4:
0f:d3:6d:b7:04:ee:5d:59:02:10:06:60:6c:bc:58:6a:eb:e0:
08:59:70:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 11 16:24:04 2025 by rpki-client