Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d504583-8250-4693-a46d-7a40db5add33.roa
File: 6d504583-8250-4693-a46d-7a40db5add33.roa (raw, json)
Hash identifier: 2XmefWRBnes8EUi5C4kSC0wgg6ESUsgion5piO7Vqe0=
Subject key identifier: F9:1D:F0:F4:EB:F6:34:02:C9:75:F8:9C:95:9F:64:D3:F9:04:BE:C6
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4B01CADE7EA9583F94365694D88A19C684F3D813
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d504583-8250-4693-a46d-7a40db5add33.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:01:ca:de:7e:a9:58:3f:94:36:56:94:d8:8a:19:c6:84:f3:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=e01698c496f7feb02304b7b5f585ee1066d18b515466f540751513ab2ef864ba, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:d8:8b:84:01:ea:46:09:96:ef:43:51:fe:
92:52:95:98:79:ff:7d:ce:a9:21:d3:8f:ae:fc:37:
16:7c:c4:bd:ff:8f:e3:9e:9a:57:0d:4d:50:f2:fc:
89:11:2f:32:d7:fa:0c:07:fb:80:12:dc:d6:95:80:
31:95:f3:c3:b4:7e:0a:d9:ea:77:4a:7f:d0:e3:34:
69:92:8c:e5:c5:3b:97:fc:50:06:a5:0a:b5:9f:07:
90:60:d5:c0:d7:0d:65:6f:1a:6c:d9:10:b5:91:6d:
98:9b:d4:6f:49:57:9c:e3:e6:e8:90:82:f3:22:6c:
68:55:50:56:c4:84:fc:2e:d3:ff:3f:23:bd:11:4d:
a9:51:f5:e5:cc:7c:04:7f:28:68:7c:f8:17:dc:96:
c1:ab:0b:fd:bb:92:c3:9a:76:ad:e1:66:d4:1a:37:
66:1c:f7:50:c5:8e:3d:90:bb:32:f6:d1:bc:78:b2:
7b:b2:34:9c:4d:f3:66:ab:4c:bd:ca:f2:be:0f:e3:
08:66:b3:fe:e6:50:58:3c:20:ff:b3:18:b8:ad:94:
71:10:fe:4c:a0:d2:dc:09:69:92:85:e5:6f:05:1d:
d6:b1:ee:bf:da:34:ab:77:3f:74:94:34:7e:d9:be:
92:e6:32:9a:e0:8a:6a:05:06:dc:64:01:17:ac:72:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:F0:F4:EB:F6:34:02:C9:75:F8:9C:95:9F:64:D3:F9:04:BE:C6
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d504583-8250-4693-a46d-7a40db5add33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e500::/40
Signature Algorithm: sha256WithRSAEncryption
28:b9:a9:79:a6:1d:74:83:60:aa:e7:6a:56:4e:81:98:66:fe:
1d:99:2d:21:ce:3a:83:1d:19:2c:8a:5c:76:16:e8:ce:a6:f7:
0b:f0:e9:67:6b:a0:bf:11:bf:4f:e3:ce:d3:ab:69:07:af:1e:
66:01:79:f1:64:83:7d:b7:41:e5:94:88:13:90:45:fb:a2:92:
17:cc:9c:a2:a3:67:ef:25:83:14:4f:1d:4c:5c:52:5f:9b:cc:
96:11:7a:6a:b5:0c:2f:23:8d:38:a8:b0:fc:71:14:39:3d:a2:
64:d8:18:e2:90:b7:9f:a1:f0:f5:5f:b7:f8:6f:64:c3:c5:3d:
d4:95:32:ea:5c:45:69:7a:d7:d7:c5:ac:12:ae:da:47:ca:b2:
40:fd:63:00:07:87:1c:57:aa:5f:e8:5f:c5:75:bd:38:bc:15:
37:3f:0f:47:ad:de:18:ec:b8:e1:fe:5a:02:ef:c3:19:67:ab:
83:4a:5b:83:84:02:c2:53:f7:6b:d8:e0:10:34:49:bb:f0:66:
7f:52:76:32:ef:b1:e6:2f:6d:73:0a:14:1f:64:94:c0:ee:47:
a5:45:88:96:a8:89:8d:cc:81:e8:10:20:f2:3a:46:96:af:3e:
d3:09:3e:e6:e4:29:64:40:d1:80:53:f1:9c:84:2e:2d:17:66:
ff:17:b2:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:28 2025 by rpki-client