Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
File: 11769307-cee0-402c-8f8d-6ce037f2f56e.roa (raw, json)
Hash identifier: lJ2bWtIY0vN68fCp8/yLPnBReKHonvKaAJNTct1noMU=
Subject key identifier: A9:F3:DC:1E:15:7D:2E:6C:BD:63:7C:FC:5F:27:26:05:70:93:AA:EE
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0198F10B7EA226FBBB80E73D659B7318A913A04B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:30f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:0b:7e:a2:26:fb:bb:80:e7:3d:65:9b:73:18:a9:13:a0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=8411b2482a8ffc227dffb067e0eec87b9222f846ae414f806c01a85e508860e4, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:45:2e:7d:33:ac:79:cf:f0:c4:f5:da:f5:
45:cd:8c:e0:7b:49:26:3f:09:b3:17:7c:ed:ae:87:
c4:53:df:57:3b:5d:97:1e:7a:2e:47:cb:e3:8a:85:
f7:b1:01:a5:cd:54:46:10:02:40:94:e2:30:b9:00:
c4:91:b2:4a:22:db:c3:9b:c7:0d:3f:b5:80:f8:98:
ab:30:15:0c:53:87:f1:4b:06:dc:35:0b:b6:75:c9:
91:8b:aa:89:f7:c7:f1:d9:95:28:c1:ac:15:4e:9b:
a3:23:53:fe:e8:ba:29:42:00:41:39:3f:88:c9:0a:
e7:65:30:23:30:14:61:a9:9a:90:a8:31:e2:84:71:
45:6c:f8:0c:25:b7:cf:71:5d:f0:5a:2a:20:31:86:
7e:6d:70:80:24:50:e5:98:74:dd:18:3c:12:05:3f:
7c:86:13:a2:50:6d:45:f0:cc:63:2b:c8:73:65:7e:
b5:28:9d:a3:ba:f5:fb:d4:31:82:6b:26:48:fa:84:
ff:7c:27:f4:9f:b1:87:ae:b9:17:36:f6:05:91:8e:
6d:09:f3:fd:b4:09:de:46:7d:1f:3d:65:48:0f:f7:
95:c9:30:c9:dd:da:c7:26:e5:a3:74:f9:db:48:c4:
20:8b:28:77:81:dd:22:f1:ef:d5:1a:6c:d9:b2:81:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:DC:1E:15:7D:2E:6C:BD:63:7C:FC:5F:27:26:05:70:93:AA:EE
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:30f::/48
Signature Algorithm: sha256WithRSAEncryption
23:27:8b:09:e3:bb:cb:e5:34:6f:4f:03:72:19:a1:23:95:3c:
a2:43:cd:0d:50:78:9a:1f:d0:06:57:f6:e4:4d:87:fc:d8:64:
ed:ab:0e:1d:bb:d1:f0:a7:55:9a:1d:d6:78:47:c5:ff:a8:f6:
fb:5a:ce:69:23:88:62:40:aa:c9:3b:14:c5:80:82:45:4c:8f:
c6:1e:c6:e2:49:d9:4c:52:1a:0c:f2:06:78:16:65:38:53:18:
86:e3:06:cb:1b:7d:a1:95:65:41:b8:03:e8:d6:6d:42:70:a1:
56:93:42:34:95:82:83:99:f4:83:51:5b:59:7b:04:88:13:17:
7a:d1:b7:0b:11:77:dd:60:5f:de:32:1e:1e:57:14:16:9d:a3:
d2:e1:e1:b8:d5:46:12:6f:22:ee:90:08:61:6d:8e:64:bc:cb:
83:9c:bd:14:92:c9:91:41:72:e9:19:ad:17:25:36:d1:31:cf:
ac:95:5b:ea:1d:63:b9:2e:21:3c:fe:1b:f9:c9:3d:88:05:11:
d1:90:48:7b:3f:92:04:0d:7e:79:33:05:3d:4d:47:69:82:5a:
4d:fd:96:df:0d:56:97:0e:96:ce:0c:d2:1c:70:92:76:fd:35:
a0:c0:1e:e6:b2:46:3c:41:b0:6d:e8:28:78:99:68:ad:9c:9f:
1d:02:66:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:39 2025 by rpki-client