Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa
File: cdcc47d5-338b-4adc-9bc7-703261ddd214.roa (raw, json)
Hash identifier: T/y4HyYp9LE++tFWvPcFXRcYczLeeNRuUr6vcspi390=
Subject key identifier: 87:50:54:80:82:7F:28:58:7E:72:7F:AD:D7:46:77:74:AB:6B:9F:1A
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 234FA6FE18097771C841785282362EB40F56F6AE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:6000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4f:a6:fe:18:09:77:71:c8:41:78:52:82:36:2e:b4:0f:56:f6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=c424d484314fa4bd5254ae7571b2bc5d11893e98471d3c7c9a95b69a24a82ac1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:db:1a:59:f2:67:59:25:54:de:65:91:92:
f1:2c:98:ce:03:04:da:c3:95:4f:08:a8:f7:fc:1f:
c5:b6:41:40:0a:e4:10:b4:d6:56:6a:b9:18:d8:3a:
0b:b2:a6:48:05:f0:d4:18:fd:fd:6d:72:32:56:73:
2f:b6:35:58:1d:1c:f4:20:3d:42:56:cc:90:0e:d4:
35:5d:c9:32:35:fa:e5:fe:e0:4f:e2:8e:20:d6:f3:
a0:20:27:9e:1a:53:ba:d3:63:7a:59:9e:df:64:cd:
29:87:73:3b:46:63:fd:cd:8a:67:f1:f1:b1:16:31:
2b:41:73:d4:06:19:e7:da:f9:6b:cb:71:bf:4b:84:
ba:ef:c7:50:a8:d8:37:e1:e5:f7:71:86:a0:7b:39:
7d:95:4f:9f:2f:d1:da:35:08:88:85:c8:b2:30:d6:
b1:6f:27:b8:f3:90:64:35:fa:71:cb:cd:59:27:70:
49:f5:c4:6f:75:5e:65:22:6e:d2:7e:02:40:23:c6:
ec:56:31:e7:86:6f:0f:14:db:a1:93:a2:9d:3c:3d:
ae:d4:9a:70:cc:69:1c:12:2d:d6:5f:3e:e4:41:ac:
3f:56:f9:4b:35:57:c4:75:53:5e:7d:25:0f:3c:68:
4b:85:e3:0b:67:1d:8b:d8:ba:0f:88:5e:9b:eb:ee:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:54:80:82:7F:28:58:7E:72:7F:AD:D7:46:77:74:AB:6B:9F:1A
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6000::/44
Signature Algorithm: sha256WithRSAEncryption
96:8d:c4:2a:5c:93:db:3e:a3:e4:31:7f:ac:aa:f5:39:78:ac:
b0:0e:69:dd:e4:88:f5:ff:7d:7f:80:81:af:0c:56:53:53:1a:
41:0a:bb:4d:d4:b8:cf:b4:df:e1:a0:f2:00:6a:36:b4:e8:96:
08:1a:a9:9a:4b:54:61:7d:f0:bd:32:9b:86:d4:22:44:bf:1a:
1b:ed:d3:44:4f:50:c0:04:c4:ae:06:0b:ed:2c:d2:c4:08:f7:
77:04:45:93:59:bd:f8:e1:d2:5e:38:7f:9e:79:cb:c9:ed:50:
1e:36:18:a7:06:38:5a:15:bc:46:a8:c8:ab:9e:c1:8d:a8:f1:
b5:8e:9f:77:05:6e:48:27:21:45:e7:a9:d0:94:b1:ec:d2:f2:
16:71:2d:61:1f:24:0f:de:0d:16:a2:29:34:b7:b9:bf:80:6c:
a3:d0:b4:99:a8:23:59:a1:0c:b7:e8:01:a1:0b:22:7d:e8:b9:
87:a3:6e:f2:33:c3:ce:2c:ca:0a:fa:a8:a2:4c:c0:0b:8c:d1:
58:54:95:58:2c:af:54:fe:16:6d:b2:38:c7:80:22:b1:c3:c4:
02:15:b7:a6:42:c1:c8:ae:bc:c5:e8:a4:23:00:19:3f:17:ff:
eb:26:3e:5d:5c:d5:72:5d:24:fe:b3:fb:a0:b7:0c:8f:5f:95:
41:cb:37:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:35 2025 by rpki-client