Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
File: 765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa (raw, json)
Hash identifier: V1HuPZJADUL7jAV74gAEU0ia/E4xFfBjGt4hn6mQBGs=
Subject key identifier: 6B:13:B7:A2:4A:EF:51:7E:C6:9C:B8:D5:BA:CB:E0:4C:A0:A7:B9:77
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 5A4F144FBDFD07CEB543250378F421AB7EDF45CC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4f:14:4f:bd:fd:07:ce:b5:43:25:03:78:f4:21:ab:7e:df:45:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=9df23e9df3ed2d405440080d1456dd4c305e8d1293fd8ebf6fb6c048cc99917d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:58:95:96:cb:e7:64:51:75:05:cc:80:6b:
97:a2:9a:06:d7:a6:11:c0:d4:70:53:71:1f:5d:d9:
c3:35:06:07:e7:15:29:65:e3:cb:5a:72:ca:14:3c:
52:4e:4e:61:95:02:8c:7a:ba:db:9c:97:87:f5:2d:
66:6d:88:79:e0:15:5e:ba:f1:e4:69:f3:18:dc:d5:
01:11:53:f6:04:e1:e7:c0:c9:c8:ff:8b:83:8c:63:
0d:6a:33:1c:af:40:6f:58:e3:5e:94:6c:67:90:ef:
c8:f5:eb:ef:eb:c9:d1:e3:aa:c3:ba:6b:ad:10:b0:
ec:49:a2:93:8a:4b:e8:cc:a3:d3:65:01:7c:1d:43:
44:d0:32:d9:ca:5c:39:89:45:69:48:22:38:01:2e:
ee:c9:80:fe:08:1d:d1:b0:43:73:2a:e7:9d:a8:e0:
53:a1:b9:1e:36:ec:11:40:30:94:77:d1:b4:6c:b1:
66:a1:ff:33:79:e1:3e:e5:9a:90:6e:26:74:5d:22:
a9:f5:dd:f1:dd:95:72:97:f1:85:dd:51:57:a0:12:
9a:6b:a1:22:e8:bb:53:e6:17:1e:88:60:a4:40:ee:
ba:09:2d:b5:6e:ab:c6:6f:41:7e:a4:cc:d6:fd:81:
48:87:40:1e:36:9c:c3:3d:16:42:a2:b2:f8:35:69:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:B7:A2:4A:EF:51:7E:C6:9C:B8:D5:BA:CB:E0:4C:A0:A7:B9:77
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:8::/48
Signature Algorithm: sha256WithRSAEncryption
49:c1:af:94:5d:d8:bf:be:7c:b6:94:bb:f3:32:45:74:b0:37:
ff:02:a8:a0:66:c9:0c:b5:ec:5b:3e:58:1b:7c:f0:2b:e5:f2:
4b:8c:e2:b1:ab:a3:6d:90:b6:3d:78:2b:63:ac:c2:c9:7b:fc:
c7:59:7c:c7:1a:4f:96:c3:5b:d6:4f:45:3d:d0:2f:51:86:17:
dd:4f:2e:b5:fe:4f:55:b3:b2:d2:38:e9:6f:6c:14:4f:ed:fc:
89:5d:38:29:17:d4:ae:07:ab:32:bb:da:af:6f:93:d0:98:8e:
cc:7c:27:31:05:10:09:06:26:65:38:52:cc:f3:c4:bc:7a:c7:
e3:64:2a:c5:a1:66:30:5d:9a:bb:4b:3d:95:d1:10:8d:b6:94:
9d:61:bd:34:d5:7c:16:68:40:ee:39:98:6e:d8:75:26:8c:7e:
44:20:33:da:0c:a1:17:de:c1:c4:ff:1f:11:82:c4:60:f3:0a:
7f:f1:22:61:8f:84:33:56:78:be:7f:3e:f8:cd:3f:cf:29:e1:
ca:2f:6f:da:44:9d:d7:ea:c6:28:8d:60:39:ff:e1:fb:ff:de:
5f:2b:53:02:3e:2e:84:82:47:c6:85:93:db:e2:d6:7b:63:73:
39:0f:6d:33:e7:79:cf:0a:c5:40:f8:5a:f2:17:f3:63:f8:c3:
44:bc:d2:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:04 2025 by rpki-client