Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
File: 5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa (raw, json)
Hash identifier: Fz+Ruy0dusPGtfeZeS4/oSYBPXPD5S2tpCB4woi60lA=
Subject key identifier: 6B:59:19:40:8A:9D:92:A3:CE:8F:91:D2:51:05:DE:6A:9D:FE:19:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0904A822FB27ED093A0208439C9428CB1743C0B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
Signing time: Fri 28 Mar 2025 16:21:22 +0000
ROA not before: Fri 28 Mar 2025 16:21:22 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:04:a8:22:fb:27:ed:09:3a:02:08:43:9c:94:28:cb:17:43:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:21:22 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=77d245d7313b36eafab3f8b10e37dcdb2deb3c17170015aac289e39c144c0692, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:37:62:2f:96:e0:2b:ff:a4:2d:15:e9:13:
06:6a:b2:14:57:51:6c:85:ae:da:b9:ac:25:83:36:
7e:97:72:a1:c3:ba:73:aa:79:43:b9:52:71:0f:68:
ac:9c:28:ee:48:b4:cf:cc:22:f7:4d:97:cc:f9:25:
26:f5:ba:8f:df:77:7a:41:3e:bc:2a:6e:65:6d:d2:
9f:80:5a:2a:eb:53:04:77:26:5a:02:7e:1f:e7:78:
9d:d0:58:c3:c9:d4:1e:15:eb:3d:19:52:35:b3:72:
45:9e:af:50:59:b4:63:09:b1:e7:12:c1:70:ce:48:
fb:89:27:60:7e:4a:b5:35:df:b7:83:48:dd:8c:a9:
d4:dc:44:cb:cc:96:0c:97:b8:52:65:15:a9:b3:63:
00:b4:71:73:18:2f:fe:48:f5:fd:39:39:69:73:36:
da:1e:dd:26:04:33:6b:9c:b6:05:24:30:1a:1b:ee:
0a:fd:e4:9d:44:90:f8:7f:08:5b:aa:c7:02:08:16:
32:be:60:b2:ce:a7:b1:0e:d6:45:e3:27:a5:d9:0c:
cf:6a:31:ba:47:29:f4:69:75:53:53:8b:99:e1:5f:
4e:bd:22:ec:b4:c4:82:b6:f3:19:9b:01:2a:32:c2:
2c:b2:d8:2f:de:80:fe:45:ea:f3:71:64:bf:29:31:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:59:19:40:8A:9D:92:A3:CE:8F:91:D2:51:05:DE:6A:9D:FE:19:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:8000::/40
Signature Algorithm: sha256WithRSAEncryption
95:64:3d:0f:b9:c8:85:a7:65:ce:2b:7c:3c:12:35:25:60:0d:
d3:ed:1a:35:bb:9f:e1:a1:16:58:58:ff:b6:68:48:30:41:0d:
f9:f3:cf:67:3d:1d:af:73:96:e0:60:4a:a2:9a:b0:69:ba:eb:
c5:9a:6f:4b:c2:3f:54:96:e7:6c:65:02:4e:09:1a:17:7b:3d:
d6:a3:74:dd:4a:8a:d5:d2:f9:1c:bc:f3:cb:07:da:23:d1:ab:
b2:bd:d2:8f:04:9e:41:7f:cb:94:e8:ad:3a:ad:22:0a:b3:c8:
42:be:0a:61:cc:11:84:94:90:69:4c:d6:67:01:5e:cb:81:9f:
db:9a:51:93:79:c6:f0:a9:08:5a:ff:ea:7a:79:3c:3c:05:b5:
84:3d:e5:5e:69:52:b3:22:d2:16:be:34:b8:ce:21:c5:1a:20:
bd:2f:bb:5b:73:f5:7a:4d:00:a9:92:19:7e:5b:48:3e:a8:6f:
14:5e:32:c1:f8:3d:00:34:64:12:b3:9f:0e:13:e9:3f:cf:94:
f6:b1:fb:02:b4:06:93:a3:66:72:1d:84:92:24:28:bb:80:f3:
4d:be:0a:a7:03:5a:a6:4a:2f:63:c5:a2:b5:04:07:9b:a4:55:
cf:63:fb:a8:69:1e:59:b0:56:ab:12:bd:08:fe:e0:14:ba:b4:
ed:83:9a:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:07 2025 by rpki-client on console.sobornost.net