Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa
File: ab860450-a818-47f3-a42f-5570594471c3.roa (raw, json)
Hash identifier: 2AkfO2ucDnO+PAuHTXrd/7e6t9/3d+mBxGhjARxhoMQ=
Subject key identifier: A0:DD:15:3D:26:CC:00:27:FB:22:88:84:30:92:83:86:0A:1D:9E:10
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 78CDAF531823E2A2199FED717D0A08EF18074841
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e900::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cd:af:53:18:23:e2:a2:19:9f:ed:71:7d:0a:08:ef:18:07:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=9c9d92ade0a414aee93c73d26922db3b7ea4cb447857c9577cf87576eff81004, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:70:e8:8b:f3:ef:90:cc:9f:22:ae:24:6c:
9d:a0:a2:80:1d:17:fe:ce:7b:6a:2c:81:f2:9d:7e:
0d:81:75:10:50:72:ab:09:37:2d:b0:99:a3:42:10:
e5:58:68:28:ba:83:07:eb:59:a4:57:f2:05:2b:fc:
21:4b:f6:86:8f:44:d0:b7:4d:e2:8e:06:7c:f6:31:
64:f2:10:d9:a0:9f:bb:53:08:1c:92:66:6e:b1:10:
0a:fb:af:0d:87:29:33:3e:6c:de:d3:c2:8c:12:31:
c4:2e:20:03:42:52:69:d4:9b:f4:bf:ce:52:00:58:
b5:f2:1d:37:66:07:08:25:8e:94:cf:5f:5e:f5:78:
61:c2:29:af:20:80:58:3c:9f:ba:19:bb:2e:45:46:
74:db:a9:38:0d:56:e3:6e:22:ac:68:b4:1e:7a:a6:
64:b7:63:36:0a:7e:26:5f:77:4c:15:7a:de:56:31:
bf:ae:6c:75:e7:9d:38:ed:99:3a:1b:30:2a:89:de:
1b:f4:23:26:e9:25:5a:1e:85:44:30:85:11:33:e3:
56:9b:de:95:af:ee:ba:19:4e:4b:98:a3:be:a4:e7:
f7:70:f0:15:34:0d:13:01:8a:9d:52:52:a9:97:a9:
49:79:e5:0e:c6:e0:30:f8:e6:92:8a:ea:cc:b7:85:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:15:3D:26:CC:00:27:FB:22:88:84:30:92:83:86:0A:1D:9E:10
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e900::/42
Signature Algorithm: sha256WithRSAEncryption
28:3e:2e:00:94:15:75:10:ff:dd:e9:6a:99:59:0c:30:64:dc:
ec:29:c9:95:ab:6c:e3:af:8e:c0:20:0b:34:54:53:22:9d:10:
04:c3:9b:67:92:77:57:ae:e3:c3:99:7e:f9:d8:e0:c8:3d:b6:
24:f3:c7:53:cb:90:a0:1e:88:8e:f0:00:4a:d0:af:06:4e:66:
37:8b:e8:34:fb:e2:23:eb:36:79:00:dd:63:2d:e3:b7:b8:05:
62:b9:0c:c3:b3:37:09:2d:c1:09:1f:89:e2:2e:8c:6f:80:93:
64:ef:c6:b1:98:dd:04:4d:e6:64:cd:90:d6:46:a6:78:38:f7:
ad:4a:cb:f9:76:19:cf:2a:39:04:ba:90:5a:94:7a:ae:d0:cc:
2f:68:59:bf:63:75:c2:12:f3:6c:b1:05:d7:44:e7:7d:39:93:
77:fc:d4:d3:7a:9c:1e:2b:fe:05:12:2e:13:06:cf:d7:99:06:
73:18:e2:ce:3c:a3:83:c8:6c:72:b6:1c:c9:7c:85:de:dd:78:
96:57:19:25:a2:a8:25:a5:3c:7a:78:e8:e3:63:c5:c7:9c:09:
c8:ca:82:da:90:cb:c4:0d:87:2e:75:2c:6c:53:67:b5:3f:9a:
9b:23:77:95:7d:9b:6e:0a:ca:d1:fa:23:33:39:5c:21:67:6b:
ca:51:36:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:01 2025 by rpki-client