Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
File: 80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa (raw, json)
Hash identifier: 9bWlwGpj5Z9FyA+9rvO99c8ZzQMZHNFKTiiGlaFrzmw=
Subject key identifier: 2D:C4:34:F3:FB:BC:B0:7E:36:36:2D:4A:67:6B:0B:D6:9B:B0:6C:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CE2425A5440AA8A7206419946581B80DB7B554C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
Signing time: Tue 08 Apr 2025 00:10:21 +0000
ROA not before: Tue 08 Apr 2025 00:10:21 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:84bd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e2:42:5a:54:40:aa:8a:72:06:41:99:46:58:1b:80:db:7b:55:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:10:21 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=d8173d8ef4b7665b16e7ffb6e45c03b68fd5582cc4c2aefb37af4bc0b78f15e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:03:fb:20:56:5b:db:08:34:84:35:b5:18:
c2:09:cc:2f:fb:d1:93:bb:2f:a5:c7:ce:52:0f:28:
7f:57:65:2c:72:05:ab:91:14:75:24:1c:46:78:0e:
f5:b3:49:4c:62:21:c6:0d:d4:0c:a4:c4:94:29:d2:
9d:67:1c:56:ce:77:f1:85:cc:4c:9c:41:57:5d:82:
f9:4b:49:bb:3e:bf:1d:e6:68:38:da:39:62:ae:55:
97:7d:3c:0e:64:95:fc:dc:9a:71:81:7f:9b:18:e5:
16:9e:54:ca:6d:de:1a:a6:39:1a:a8:c1:db:1d:23:
43:12:f4:58:61:e0:44:8b:fb:73:ea:2b:f4:58:12:
1f:c0:74:c7:d1:72:10:73:ba:8a:1b:1e:68:08:46:
dc:7f:e8:ba:b4:4e:38:07:ca:c2:d1:9b:06:5e:f8:
7a:06:a9:70:db:a8:40:f7:17:d9:5d:f0:20:b2:71:
e7:d3:ce:01:c0:6c:b1:3c:44:7d:9b:46:7c:aa:51:
d4:fe:4a:55:72:93:b3:4e:fe:91:65:f7:48:5f:b6:
77:ba:69:fb:00:9c:e0:21:98:a2:a7:32:e3:dd:ec:
11:81:50:6a:5c:29:39:13:d6:9d:c9:69:16:d9:6a:
02:4a:3c:05:93:53:33:21:2c:ee:e1:5f:20:b3:8e:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:34:F3:FB:BC:B0:7E:36:36:2D:4A:67:6B:0B:D6:9B:B0:6C:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:84bd::/48
Signature Algorithm: sha256WithRSAEncryption
42:c7:68:bf:44:67:01:3f:6b:db:6c:f7:00:24:59:53:75:73:
00:5d:f3:ec:9c:2b:27:38:a9:a3:9f:5c:9f:75:0d:cd:1e:01:
2e:f7:d7:be:33:54:45:44:f1:f5:85:85:86:39:3f:ef:b9:1a:
16:68:32:09:95:8b:54:49:14:01:01:ac:54:cc:a0:71:2e:a6:
93:f9:51:0d:b2:f1:9c:9f:a8:98:16:a9:0b:58:1b:9e:a4:52:
d1:6a:0c:5c:28:27:26:6d:df:fe:11:26:51:f9:8a:00:bf:c4:
6a:51:c2:55:59:6a:27:2c:29:64:97:15:61:a3:67:cc:a0:89:
9b:a3:d0:93:dc:43:79:3e:cc:7b:35:cd:30:d4:8a:18:ca:6f:
51:d6:a9:25:27:ef:e2:44:ab:fe:69:a6:8c:5c:9b:53:96:09:
4f:74:90:4d:35:6c:5d:16:23:2d:cc:23:ee:bd:f1:38:ee:96:
a7:ee:ff:08:09:fa:31:b0:9d:78:fb:32:28:70:06:6f:23:d9:
e4:dd:2e:61:fa:00:ad:c0:c4:2a:2d:1f:c5:dc:53:90:2c:5f:
dc:e6:aa:4f:a6:09:96:0d:8a:4a:bd:84:09:bb:ee:55:f3:02:
15:e0:45:ec:34:92:28:41:21:04:86:df:e7:0e:57:05:38:1c:
9b:88:24:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net