Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/475cc5b7-0cb2-405e-b609-203b983a6087.roa
File: 475cc5b7-0cb2-405e-b609-203b983a6087.roa (raw, json)
Hash identifier: Wqhpg5xE35UdijSCyr3hxy4ZCBaQx3yWdHQIG2jFzBU=
Subject key identifier: 8F:C3:6A:94:F5:6B:13:AE:7A:22:BC:CC:01:E1:1C:7C:1A:5D:B6:89
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 454A0473F2C69D65D4F69AC49203AABE8083BA5C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/475cc5b7-0cb2-405e-b609-203b983a6087.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:ed00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4a:04:73:f2:c6:9d:65:d4:f6:9a:c4:92:03:aa:be:80:83:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=3a1e38f47275e06932f7c3d3588dec8495cd45d4e66767cc0d2a3ae20a4a6dcd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:2f:84:b6:64:60:48:53:96:11:44:e6:00:
6c:56:62:85:35:14:b4:7f:d3:13:91:96:dc:a2:21:
e4:70:cd:3f:ea:d9:84:df:3c:92:88:7d:e2:12:e5:
05:dd:d6:03:3a:81:51:e5:f7:8d:31:d4:13:ef:47:
7d:86:a1:67:e6:d6:89:af:80:e4:3b:8d:90:b4:b7:
fb:78:aa:6e:cb:0d:f0:7e:6d:4d:af:a0:74:79:d1:
88:6d:67:db:3b:27:d0:68:ce:48:b6:bf:b2:f0:9a:
88:2b:03:dd:96:2e:1a:f2:8e:46:64:0e:69:9e:b2:
29:1d:8f:f9:58:e4:db:fe:a2:51:81:67:96:07:d5:
de:0e:19:e6:9b:3f:7f:02:f1:ad:a3:d2:77:93:3b:
06:7d:8c:f5:35:bb:3f:cd:62:8f:7e:81:b0:ad:6a:
50:e0:d7:e8:e4:12:80:b9:4e:c2:7e:f4:05:e2:cf:
fe:b0:ea:f7:50:6e:87:92:31:32:a2:0d:a8:ce:51:
e5:c0:c1:d8:4d:13:45:d6:6c:63:33:05:e3:ad:7b:
f1:e2:a7:87:42:3a:78:36:ff:1a:1a:af:06:71:04:
5b:86:b9:73:c7:5c:8b:bd:a6:06:7b:4c:c3:7d:a4:
63:be:60:ff:4a:94:94:c4:56:cc:45:1f:5a:68:0d:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:6A:94:F5:6B:13:AE:7A:22:BC:CC:01:E1:1C:7C:1A:5D:B6:89
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/475cc5b7-0cb2-405e-b609-203b983a6087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ed00::/40
Signature Algorithm: sha256WithRSAEncryption
92:e7:e3:e4:6e:3d:ec:4a:f0:5a:45:b8:83:bf:19:1b:ff:4e:
d3:e5:fc:03:b8:d8:ba:fb:cc:73:88:37:53:c1:99:ec:8b:77:
ba:35:f5:69:b4:9b:a0:cd:f1:ca:90:80:c6:67:d7:dc:59:7d:
82:80:34:81:5d:6c:e3:14:de:d8:e1:80:9c:9f:78:11:3b:6e:
7f:89:0f:28:01:ac:ef:49:17:74:e5:e9:12:80:8c:26:33:69:
e2:a7:e6:fe:16:61:b1:56:ad:50:1c:65:a4:cc:9b:13:0c:73:
9d:c0:9c:70:6c:c4:a7:05:ab:ed:d9:09:43:4e:65:6a:8b:43:
46:aa:b8:48:e9:f0:48:23:28:da:d9:01:5f:11:b1:93:c0:0b:
36:4d:ff:ea:bb:4e:57:27:0f:3e:be:1b:a3:f4:0a:d5:44:01:
7e:ae:01:e8:ab:23:0a:89:a1:13:4b:b6:db:43:c2:38:9d:ca:
d1:9f:f7:96:fe:2d:ef:58:6a:55:71:6b:b4:60:19:c0:ed:72:
33:c5:a3:7b:38:bb:40:a9:70:87:00:6b:3f:1e:24:02:33:1f:
ed:b6:20:18:7c:d5:fe:fb:e3:a8:25:8b:a5:b9:99:d0:66:9b:
f2:89:3a:99:9d:ae:39:8f:10:15:28:9f:a3:23:c5:10:d9:2c:
23:da:ad:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:48 2025 by rpki-client