Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa
File: 172fda76-2a7e-45b7-aaf8-d11d16161720.roa (raw, json)
Hash identifier: nOVhWzx3L2oI0ZTsSo0QwgR6CUecvCdacVHqVBW9xAA=
Subject key identifier: 82:47:D9:3B:3B:AB:37:1C:45:C8:09:7E:F5:9C:38:44:2D:01:B0:D2
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 102D4AE0516ED7A5CC7646D85531F17B7551E83E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:30e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2d:4a:e0:51:6e:d7:a5:cc:76:46:d8:55:31:f1:7b:75:51:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=4fdc8a3add453e17a54a007d86da1ef5370a2ab599c1f330bd28d0e28b7ec651, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:37:58:16:5d:28:75:76:1f:4f:c3:b7:ed:
51:ae:25:61:32:6e:72:96:99:51:6a:92:f3:fe:68:
2f:17:28:fa:f6:1a:0b:f2:6c:5b:39:ef:f0:28:2e:
b8:4f:1c:79:9a:d1:af:c9:ad:ca:c8:c0:a4:bb:2b:
87:1b:9d:1a:33:66:cb:fb:98:26:56:e7:c1:3e:19:
7d:56:1d:76:7c:e5:d3:0a:40:2c:20:c6:b8:3a:91:
47:93:30:48:53:f2:c8:99:a0:80:98:d3:68:87:c1:
1b:63:58:e5:5e:4f:1d:6a:56:f4:dd:79:05:35:15:
cb:e3:2c:5d:e9:eb:4f:96:95:ee:bf:78:1d:0c:38:
ca:d1:67:ef:3c:53:a8:42:2a:d5:57:60:cf:27:7d:
39:8c:25:07:aa:6e:07:83:eb:4a:67:4d:61:b8:6a:
25:62:80:7e:43:da:2a:4d:cf:d0:8a:04:74:e8:65:
a5:ad:2f:20:86:3e:03:f0:af:11:31:7a:7a:dd:13:
c7:20:28:d0:68:46:9a:07:d7:6a:78:d9:88:cf:40:
0f:eb:cc:26:48:98:bb:28:db:c5:fa:b7:43:6c:3c:
16:e1:bb:52:ae:57:75:d5:60:2b:1c:08:fc:ba:58:
d5:95:7e:38:b1:fe:97:c9:b3:55:0b:da:c1:8f:8f:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:D9:3B:3B:AB:37:1C:45:C8:09:7E:F5:9C:38:44:2D:01:B0:D2
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:30e::/48
Signature Algorithm: sha256WithRSAEncryption
3e:38:f7:c5:28:64:d9:f5:1d:3f:ab:78:1a:cf:eb:7d:bb:fe:
53:70:6a:d9:30:98:c9:a4:49:01:f1:3b:41:90:f7:04:36:78:
31:34:2b:e3:04:e8:5d:44:6c:0e:72:cc:c2:f1:d1:3b:38:b0:
8c:94:43:ae:e6:4e:72:b1:4e:c0:8a:19:5d:e3:5c:ef:be:68:
dc:39:61:0c:72:ef:c6:a2:42:d9:f5:c0:51:7d:bc:1a:07:dc:
9b:cd:70:86:a6:22:cd:d1:b2:74:f9:9f:1b:de:ab:66:4d:7a:
28:98:36:a9:1f:d9:2d:49:ef:51:6c:25:b9:ab:8e:25:46:b8:
32:67:e1:2b:26:e2:8f:01:8f:ad:4d:67:7f:88:e0:d5:28:cc:
23:61:6a:27:59:fa:5f:20:1a:60:18:e9:25:d6:ba:5b:67:da:
49:bb:9e:d0:21:5a:fb:1a:1a:a0:96:fe:ff:f9:da:f8:08:e1:
2e:81:75:9b:a2:13:99:83:2c:95:2b:66:60:95:37:cb:79:94:
d2:7d:f5:f5:fa:e6:5a:c0:fd:a7:71:e3:8b:db:d7:b1:34:c7:
a4:6a:f7:ea:15:92:1f:28:81:d5:92:48:f5:bd:00:25:ce:2f:
b3:0e:05:74:1b:80:1e:56:14:37:d8:40:7d:25:90:a3:b5:8d:
7a:19:d8:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:28 2025 by rpki-client