Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa
File: dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa (raw, json)
Hash identifier: LBFgMkS/RrQgoe5buTH92p1LzM333JbDzhxWkPdSKFI=
Subject key identifier: 78:14:FF:F1:64:F9:38:0B:A4:A4:D2:DC:16:5D:94:F9:E1:F5:10:63
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 08C8764574AE128C854958F0C5955752E8990F92
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c8:76:45:74:ae:12:8c:85:49:58:f0:c5:95:57:52:e8:99:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=4107259b7c1730a1c6174ff917fe18e23f7d017311a05aceef4c8c368ec5c664, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:de:fc:b8:43:a6:f9:25:cf:ba:22:88:69:
94:49:8e:02:97:7b:8e:01:a8:69:be:0f:e9:e1:55:
5c:e2:ca:f1:6d:c2:9f:83:8f:9d:f2:f1:79:0f:af:
33:4c:27:e4:5f:d6:1a:af:fe:80:dc:0c:c4:73:5b:
9e:14:6f:c7:66:3a:8b:fb:92:4d:cd:d1:3c:3a:5d:
a5:76:e8:bf:b2:ca:46:98:93:4e:92:de:55:f3:f0:
4c:11:91:d8:5f:e8:d0:f3:b0:82:c3:df:59:c1:e1:
e6:1b:a9:a6:6e:00:7c:64:ea:6d:31:13:fe:0a:c1:
e4:c2:56:b0:5a:7d:f4:9a:58:b4:8d:c0:cd:49:d1:
38:0d:f7:1c:aa:b0:17:12:97:e1:86:25:1a:d2:60:
1a:87:83:54:8c:7f:c5:76:d1:04:a0:52:be:13:73:
98:0b:1a:91:db:4f:66:bb:41:06:41:65:24:11:7f:
8d:7c:3e:ac:11:d1:85:0a:63:c7:08:cf:d3:a2:01:
47:03:6d:df:a8:2f:e5:61:39:85:12:55:6b:67:16:
c8:df:b1:49:f1:f6:13:74:36:eb:95:4c:2b:7f:90:
1a:67:33:2d:0c:ad:a0:7e:f2:3b:0c:46:d7:1c:88:
e6:36:5e:59:f8:df:3b:32:18:fd:ec:c1:ff:a9:fb:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:FF:F1:64:F9:38:0B:A4:A4:D2:DC:16:5D:94:F9:E1:F5:10:63
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc0e0e73-bbbe-4170-b733-4904ecc27f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:8e:bd:8b:26:1f:d2:49:68:84:e2:c5:3b:27:04:88:61:c6:
2f:80:14:92:2c:22:6e:14:b8:d0:67:3c:ab:71:5d:fe:9a:9e:
2f:f4:ea:e3:6a:4c:09:79:a1:47:99:67:50:fd:4d:3e:a3:4f:
06:78:2c:b5:1c:bc:f1:f0:f2:cc:c9:1d:70:aa:cb:6f:9d:7f:
d5:bf:4c:e5:d0:19:57:be:c5:3e:d7:24:fb:7e:6c:fb:e8:fa:
06:7a:ed:0f:f4:0d:8c:cb:a3:12:29:c3:08:32:98:b0:b1:7c:
1d:15:c3:70:c0:c0:85:35:05:cd:c0:3a:2a:ec:a7:b8:0f:00:
c5:af:e2:08:9c:f1:2e:f3:a0:bd:d0:a8:bc:d6:e3:a6:7b:dd:
bb:59:21:39:34:70:da:99:df:b1:43:37:4e:c9:93:61:13:dc:
b4:4c:b7:96:dd:af:70:3a:26:f2:d0:55:80:d6:2f:ab:4d:c1:
e6:f5:77:01:a4:0a:09:8b:1a:88:e1:5c:7d:4f:3c:ba:55:74:
34:d3:da:31:ef:42:fa:6a:c7:42:4a:87:17:b5:40:4b:c7:9d:
37:22:34:ef:3c:e2:81:c1:69:11:58:d6:3e:21:a0:46:b1:30:
81:15:b1:f5:29:2e:24:b9:14:e2:8a:e4:f7:c0:16:7a:22:b7:
8f:8b:26:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:46 2025 by rpki-client