Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa
File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json)
Hash identifier: afB3B13rIn3zpbNl4L0q6zO1sysSf2wtIY1TcqkiMpE=
Subject key identifier: 73:EB:94:90:C8:F1:61:52:A3:7F:53:7E:94:AA:FB:E7:0E:E7:BF:9E
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 37B70EB7293EE84F6FA3CD29AC167819F677A03A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b7:0e:b7:29:3e:e8:4f:6f:a3:cd:29:ac:16:78:19:f6:77:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=48840401cb25a5596ecd5e5aeb5e2f6f9c64462fbe10224c81f13b1ba1677f19, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:a7:aa:a5:11:85:f3:23:f0:64:36:45:49:
27:d4:d6:66:f8:89:65:c5:b8:b1:f3:39:c3:e4:d3:
12:ff:ef:30:d5:a0:9b:6c:6c:cd:6e:14:56:09:94:
da:14:31:1f:26:0a:3b:18:4e:ff:c2:c9:ce:e6:61:
3d:bc:8a:1d:7e:e8:5f:0d:b2:62:a1:98:30:05:ec:
33:84:bf:d3:bf:eb:88:3b:81:a8:e5:15:03:c2:b6:
e3:2c:90:80:00:97:08:79:b5:ba:b9:70:8f:be:c6:
cf:73:2c:d7:43:9f:39:32:38:24:d7:10:7a:1f:1a:
73:92:e4:b8:0d:b4:dd:78:08:b8:39:9c:29:55:d4:
4f:21:5e:40:8b:7c:0a:ee:e3:24:a9:e3:90:02:51:
94:a6:bb:8e:e0:d5:ed:06:15:81:78:9d:a7:18:13:
65:1c:c5:dc:51:1f:ad:b2:af:03:a1:56:fb:b1:84:
22:43:02:af:6d:23:d4:b4:33:36:fb:51:96:53:cb:
34:c7:df:d3:94:c8:85:bd:2f:b5:9e:47:99:ff:0d:
73:26:69:bd:3f:3c:f8:ec:de:3d:1a:fb:ec:23:c0:
6c:8f:2e:14:d2:e5:40:c2:b3:2e:7a:33:6a:c6:e6:
88:02:0b:fe:1c:e5:50:ad:46:af:96:5e:8d:c1:2c:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:94:90:C8:F1:61:52:A3:7F:53:7E:94:AA:FB:E7:0E:E7:BF:9E
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ed00::/42
Signature Algorithm: sha256WithRSAEncryption
6a:10:6c:b7:35:06:61:a1:ab:f9:7d:33:50:77:57:e5:06:28:
5d:32:a9:61:5d:8c:a5:5d:7c:85:d2:8b:8e:52:74:96:b6:93:
95:4b:10:2e:92:66:ca:7e:c6:b8:b3:ec:18:7f:13:ae:b9:7b:
7a:f3:1c:c8:1a:09:e0:68:9e:b5:31:ea:5a:cc:c0:a0:2e:b2:
c5:76:a5:dc:8b:2c:2b:9b:32:86:77:7e:76:82:75:3c:af:c2:
28:a7:4e:54:9c:8f:84:90:1b:a8:15:11:2a:15:8a:63:f5:5a:
64:0c:0f:db:da:e1:5a:c1:97:8e:7a:44:97:58:b7:c6:8f:86:
e9:86:70:8f:18:17:c6:27:95:1a:cb:db:ab:33:d5:20:38:31:
88:b1:52:af:87:89:d6:59:2d:f8:b3:c7:8d:ee:b6:bc:52:64:
83:83:29:ba:1d:61:e7:b6:34:67:b8:23:00:49:1f:73:3e:d2:
a4:e0:bd:a7:0b:0a:4f:7a:20:2e:e4:a7:84:65:8c:21:ca:5f:
2d:e5:a3:ab:b5:8a:85:e8:8b:0f:03:65:6f:6e:87:cc:8a:5d:
68:cd:1d:1d:90:c0:15:2a:e9:2d:dd:af:7d:80:89:7b:ef:0b:
a2:0b:ca:ec:ab:4c:3e:eb:bd:ef:ba:06:3f:ac:be:f6:06:a5:
68:14:f4:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:33 2025 by rpki-client