Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa
File: f6334ad8-04a1-4b1e-af68-368584971f2f.roa (raw, json)
Hash identifier: lqfhhZ7RWNcO6pZdfAtZGsxKKgeNSJ161A93WJCsj9M=
Subject key identifier: CC:F4:F0:62:95:7C:60:38:B6:1A:3A:8D:2C:0B:65:45:75:74:36:BF
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 09C428B6462830FAF82017A0259BAE986575F29C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c4:28:b6:46:28:30:fa:f8:20:17:a0:25:9b:ae:98:65:75:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=292e602fa1e0bbcf492de91b5bd05e563d9f92a9123ba26ccc07469430705438, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:88:43:83:9f:3a:01:f9:f0:2d:77:7f:95:
8b:00:86:5c:41:91:f2:83:ea:dd:c1:a1:3d:fb:fd:
0c:23:a2:0f:62:9a:0d:1b:83:17:c3:d9:22:ee:1b:
e3:0a:26:a4:b5:14:c8:74:c0:82:65:a5:24:d9:8c:
33:1f:6f:cf:ba:06:20:8d:8d:6f:9d:81:d1:b3:50:
f3:85:1a:15:f5:05:cf:03:25:30:17:a8:dd:14:67:
47:de:e8:78:f9:0d:59:bb:bf:d5:88:04:ff:e8:1f:
dd:71:e6:33:ac:5d:c9:f7:53:16:f3:d9:31:db:87:
3f:8b:68:3c:f0:32:0a:53:9a:f3:50:83:e3:88:ca:
3d:09:38:d4:d7:7c:9b:c5:a7:9c:57:0f:33:b4:72:
6d:1a:73:b2:aa:54:fb:1e:91:b7:9b:b4:df:20:7d:
89:88:66:89:65:8d:8c:d5:70:ea:0c:b3:56:bf:dc:
ce:03:2b:b6:69:03:1d:0b:8b:92:b1:92:cf:55:1d:
ff:0a:d7:01:a7:bc:2a:56:37:e3:17:f5:e5:12:67:
58:6e:66:d3:28:e3:78:d4:a6:29:50:53:af:db:24:
3a:3d:82:38:34:f5:eb:3a:67:d6:e7:e3:9d:4c:a9:
31:b1:59:df:2b:61:02:a4:a9:95:e2:e1:f7:b3:0a:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:F0:62:95:7C:60:38:B6:1A:3A:8D:2C:0B:65:45:75:74:36:BF
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e300::/40
Signature Algorithm: sha256WithRSAEncryption
0c:3d:fc:5e:b7:99:3f:57:93:37:23:f3:97:b7:35:72:12:bf:
1e:59:11:58:e6:7f:66:a2:a4:84:cb:3b:31:ee:34:94:ef:a8:
60:49:cf:e5:12:67:7c:95:49:1b:f0:9e:57:8a:58:b6:52:39:
f1:69:5f:c0:98:be:9e:47:f7:d7:3b:60:39:e0:59:14:5e:eb:
a6:b6:51:24:e4:3f:46:3d:d2:b6:6f:27:ad:05:78:00:a1:51:
1c:da:34:59:66:72:39:bd:1d:a9:46:3e:eb:c1:a1:db:11:ce:
c7:93:64:93:de:e5:82:b8:e6:64:bb:63:d2:04:e0:c0:43:82:
8f:b0:9c:67:c3:9b:f4:46:ed:1c:cf:02:22:5f:33:f6:a6:86:
d9:a5:b4:e5:4b:2c:c6:65:1c:1a:ab:99:a3:0d:d8:ad:d9:f3:
40:b8:93:ef:3f:5c:74:cf:a2:66:af:66:a4:8d:a8:d5:7a:38:
c5:1b:60:3c:09:00:0d:8a:7c:a7:d0:f9:56:2e:6c:4c:c7:13:
0f:33:02:d4:65:ec:a4:79:1e:73:f1:60:f3:28:ab:e7:60:57:
b2:b8:29:05:52:62:b7:d0:b6:3f:fa:64:f0:93:77:b9:6f:52:
41:7c:b3:ff:38:c3:28:32:7d:8d:c9:eb:a7:c8:00:1c:bb:02:
aa:92:12:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:17 2025 by rpki-client