Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
File: 451673e6-334d-4e4b-b936-5534942489c1.roa (raw, json)
Hash identifier: iPE1r0yhIjFastyeERA/9OdNRCSfOSr/GlyZJAuTBsQ=
Subject key identifier: 40:21:DC:F7:15:F5:17:D1:06:4B:F1:9E:3D:69:0C:4E:59:88:F6:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CFAE15A585490BF10FB3EEB09678403411202B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
Signing time: Fri 28 Mar 2025 00:41:28 +0000
ROA not before: Fri 28 Mar 2025 00:41:28 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fff:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:fa:e1:5a:58:54:90:bf:10:fb:3e:eb:09:67:84:03:41:12:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:41:28 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=46bc618482e930c43763bf479bdf1f3fae260799c47668ca29159b5901d99cc8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:04:cf:fe:00:eb:da:e1:08:11:12:74:84:
f8:9d:d2:a5:be:cc:49:5c:58:3a:d7:72:0c:58:e5:
5f:02:90:a3:b1:1e:ae:03:c0:23:9e:81:64:ba:18:
5a:49:54:ed:14:54:77:f0:b5:cc:4f:62:73:77:cc:
1d:23:14:4f:92:3a:66:a7:52:af:3f:69:64:95:fe:
14:1b:cd:6a:e9:89:93:2c:b4:80:25:ae:eb:7f:ba:
74:f1:13:a2:db:84:76:d5:fb:b0:7c:62:1a:5b:29:
a1:d2:ce:48:6a:a9:d7:8e:69:77:ee:7a:a2:ef:36:
54:80:3a:9b:fa:20:91:df:71:3c:d9:8a:25:b5:7a:
a4:ca:5c:4c:1d:a9:7c:53:5e:8f:e4:a6:3f:97:41:
86:c8:33:39:a2:91:0b:a0:3c:de:c4:f5:d5:5a:54:
56:3c:92:9b:c0:07:2d:f1:9e:c3:1e:68:8b:1a:71:
57:ed:1e:59:13:ea:21:a4:f9:4e:a0:cb:ea:60:d2:
0d:98:db:fa:61:22:2a:68:6a:1d:8e:a5:f4:35:7b:
6a:2c:a3:8c:5f:81:dd:bf:02:1a:4d:b3:15:f6:ca:
21:9d:15:76:56:a1:15:4a:3a:57:a3:a2:27:cb:7b:
ea:bc:42:64:87:a7:a4:2f:43:2a:f2:6c:30:91:84:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:DC:F7:15:F5:17:D1:06:4B:F1:9E:3D:69:0C:4E:59:88:F6:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:5000::/40
Signature Algorithm: sha256WithRSAEncryption
3b:a0:bf:d6:cb:cf:11:db:ff:59:1c:c2:99:85:b0:ed:c9:e4:
7d:bb:31:8e:44:6c:0d:12:c5:a3:63:2c:c2:e3:17:27:8c:75:
6f:71:f5:f5:ed:e1:3a:d5:09:7f:fa:06:48:d9:c9:d8:d6:97:
e8:ae:e0:b2:2e:cf:b1:5b:61:4b:b4:62:fe:cb:19:d6:c6:27:
f9:8a:54:97:d6:38:ca:23:0e:e0:d7:cb:e6:57:d9:d8:c7:cb:
e3:6c:80:74:a4:6c:d3:77:4e:d8:80:be:64:56:81:7d:8c:32:
60:68:2f:65:11:f2:91:a4:3c:18:9a:42:52:84:85:24:48:e2:
b4:4e:71:57:92:a4:9c:a2:84:bc:23:5a:c0:cd:51:28:67:a9:
fb:1d:ca:76:bd:f9:b8:c1:97:36:b2:6e:44:e2:8b:b3:72:38:
d6:79:36:a0:3a:fc:9c:9c:c5:04:1e:fb:78:49:99:5c:0f:65:
f5:37:b7:37:41:f7:b0:89:3f:7e:62:66:d3:41:ec:b4:85:3e:
a8:6b:8d:84:ba:32:41:fd:ed:57:07:23:a9:0a:ad:1d:55:9d:
ca:35:be:3a:e6:89:ef:5c:e4:3f:ff:fb:18:c1:83:82:b9:bc:
dc:0a:f7:86:30:96:98:a8:30:8c:4d:61:51:1c:a2:e6:41:2e:
24:7d:ed:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:04 2025 by rpki-client on console.sobornost.net