Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa
File: 1e601690-d98c-4d0d-8f50-2f457decb102.roa (raw, json)
Hash identifier: BTrKoZ4pCa3q2tmcZIQ8qJ1QHPGXO9kgqSKKlzyP5sw=
Subject key identifier: 18:54:45:2C:A6:19:8B:59:69:EF:0A:77:CF:77:5C:EB:29:3B:77:F3
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 751B4F50BBFDD762F3569B5EBAF2A24D1B26EB80
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1b:4f:50:bb:fd:d7:62:f3:56:9b:5e:ba:f2:a2:4d:1b:26:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=b949fd49e2be852147dee31a6afa67de885998eaf287c99fd3d630ee1debcf0e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:2b:54:45:37:7c:db:a9:ea:17:76:1c:cb:
57:c1:b2:69:d1:30:de:c0:84:2c:00:86:59:8a:5b:
b9:64:dc:49:ec:b9:a9:f0:db:6c:b1:52:2c:56:fc:
dd:18:a4:12:b9:9e:67:dc:15:38:5f:35:45:11:59:
29:e0:fa:1b:fc:96:9e:4f:06:48:f4:df:2a:bd:47:
fd:1d:d5:c2:f9:78:ce:b2:b6:ec:c1:a5:78:33:11:
a9:3a:7e:50:30:11:25:87:f0:66:2c:83:26:4b:cc:
64:26:91:84:90:31:75:47:30:94:ed:e4:4a:ec:7d:
ec:59:49:c5:16:3a:63:a9:54:10:ab:5b:c2:e4:67:
1f:62:4f:6e:01:ec:42:13:09:5a:a0:45:54:3b:83:
fa:84:7a:5e:5e:d8:37:ec:04:31:06:03:76:54:b7:
11:b8:04:1c:a7:1d:c4:85:86:34:44:7b:b9:2b:29:
dd:27:68:9f:2d:3b:10:12:d8:30:4b:39:c2:c5:bc:
28:a3:d7:cb:b2:e5:b3:c7:7d:5c:c7:b8:78:6c:02:
a1:53:fe:91:4b:b9:b3:3b:c7:ba:37:4d:c5:ee:14:
b7:56:35:48:27:c5:35:e8:e9:71:ad:3d:f5:f3:3e:
3e:20:3e:66:7b:cb:ea:c1:03:8d:5b:f2:fc:e5:d0:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:45:2C:A6:19:8B:59:69:EF:0A:77:CF:77:5C:EB:29:3B:77:F3
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
8a:63:a5:cf:06:32:0a:83:aa:6c:91:98:21:e7:08:f5:24:f3:
b5:e2:d1:58:92:04:db:f8:d3:97:04:38:e8:09:c0:4e:38:5c:
82:de:bf:ec:5e:15:e5:a9:c5:45:61:6c:52:91:e6:ed:71:39:
1e:47:e5:d3:9d:e7:c5:30:87:b9:29:a5:35:78:2e:fa:01:ac:
dc:49:64:7c:76:f3:45:83:4f:76:be:1c:c1:b6:1c:02:d6:23:
bd:ac:11:51:85:b4:03:21:5b:28:51:11:5b:b4:52:96:7c:1a:
43:17:41:12:9a:ea:ca:73:00:2e:64:41:73:22:96:9e:9f:2d:
09:8e:4a:df:70:61:ee:7e:9e:30:ef:b5:d6:54:da:95:fe:5b:
ad:9b:22:53:7d:81:24:03:49:6b:71:92:ea:dc:20:34:98:64:
6e:ef:4d:c7:27:ed:71:c2:79:e3:be:bf:22:13:9f:92:05:66:
4b:4f:a3:8b:e3:ca:a5:56:ed:00:e7:64:14:55:a8:52:54:61:
88:ab:ab:ad:14:0c:d7:fc:30:d4:ff:d4:00:54:17:64:bc:e7:
2d:2c:ba:48:72:30:90:a3:4f:83:39:9a:34:8a:cb:e3:70:4f:
43:46:7f:ee:66:e0:94:c0:9a:96:e1:f7:04:55:e1:b5:cf:b7:
aa:be:c1:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:32 2025 by rpki-client