Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa
File: 6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa (raw, json)
Hash identifier: rgx+8iKnxS8yi0PLl3ODAz5rGr1tJWyyN+4HBR/eS/A=
Subject key identifier: 81:10:A7:3C:E7:61:58:92:EA:23:42:6B:5A:F7:C5:62:45:2F:CF:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A4A24E1AF322ABA5A8719486F9567A12BA7C2AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa
Signing time: Fri 28 Mar 2025 15:50:25 +0000
ROA not before: Fri 28 Mar 2025 15:50:25 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ffb:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4a:24:e1:af:32:2a:ba:5a:87:19:48:6f:95:67:a1:2b:a7:c2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:50:25 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=10c89a7242620a4ad4d7228f8bcf217d535a80727948ec64aada522d0c3ad515, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:0e:44:33:1e:ed:1e:ac:76:d8:9f:b9:41:
6c:e4:c8:29:6b:40:27:bd:84:d0:cc:be:2c:b8:f8:
37:7b:c2:e0:fd:0a:90:40:9c:f1:25:9f:5c:da:82:
96:ef:a7:ca:59:1e:f6:ba:d0:77:91:26:4e:86:54:
8b:06:9f:c9:c9:70:65:38:41:fe:6b:77:95:71:ee:
67:ec:89:98:7f:ae:ff:8f:84:0c:38:9a:e7:8a:9e:
ba:d8:d9:0c:f6:b3:47:d6:b3:3a:74:12:69:90:33:
a0:f0:d9:e8:db:c1:b5:96:cd:0e:0d:9b:aa:fb:2b:
2d:f6:20:d1:c5:e2:c8:a3:c9:32:d0:51:1f:1c:1c:
b7:8d:79:05:99:47:dd:cf:6c:36:f6:2d:a0:98:ac:
b6:72:03:b3:b2:e8:7d:78:66:d3:07:e9:57:85:6c:
7e:0c:81:04:8f:40:fd:36:43:44:fe:5b:da:f9:89:
fb:f3:30:e9:89:d4:12:be:ae:8a:90:51:a1:f0:83:
0d:ea:c6:86:0a:58:31:ef:1e:03:f3:a6:9d:d7:c9:
c1:52:c6:63:44:eb:e6:7d:58:1b:41:53:f4:2f:26:
58:13:26:8c:3a:1d:45:93:bb:b0:ef:81:d4:a3:74:
31:f3:23:f2:ac:e9:d0:06:e0:d5:80:a1:62:e7:e3:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:A7:3C:E7:61:58:92:EA:23:42:6B:5A:F7:C5:62:45:2F:CF:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:5000::/40
Signature Algorithm: sha256WithRSAEncryption
af:49:76:53:36:26:2b:09:e0:bc:53:98:82:9c:56:83:90:18:
be:83:14:86:ea:fc:f7:b7:ef:f3:1d:be:3d:49:90:ed:53:b3:
c8:c8:3c:9a:d9:c8:02:68:3a:29:65:34:15:e3:5c:aa:49:06:
48:7d:63:c8:01:dc:1b:b4:fd:db:86:74:7c:4c:33:2c:c9:04:
53:e2:a7:28:91:7c:8c:b9:22:67:a6:56:2b:fe:2d:1d:1e:f9:
1a:cb:11:1f:a3:8f:12:7a:e7:72:05:a9:7a:1f:83:b7:94:59:
7d:0d:bf:8d:cd:15:84:aa:cf:b8:06:43:bf:7c:2d:50:e4:cc:
cd:34:61:e9:70:c5:66:ef:5a:65:92:6c:cd:6a:96:01:74:5d:
a7:9f:9b:aa:a5:54:57:e5:24:53:a0:3a:d7:ef:98:62:27:75:
95:0e:71:cd:4a:0b:04:7e:89:9a:78:f8:86:42:3b:13:e0:b3:
16:24:84:7e:1f:ec:bd:c4:ac:80:1e:7c:44:d5:cd:66:4c:e7:
cf:57:d3:35:2e:9a:57:99:32:be:c1:4b:4b:a5:05:df:85:bc:
85:4e:16:3c:85:a4:fe:a8:96:d3:a0:3a:26:61:7a:19:a8:7b:
87:d0:22:00:1f:cb:6a:7d:f0:13:a0:fc:c6:cc:97:2d:ef:01:
2d:40:02:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:07 2025 by rpki-client on console.sobornost.net