Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa
File: 1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa (raw, json)
Hash identifier: mRELC1sWsUtIqo6tn4q8u/2EEL++Jjqw79N011FpzmM=
Subject key identifier: 59:8D:E8:4C:19:E6:24:B7:8D:CE:1E:9E:7D:BD:BD:EE:5F:4E:2D:55
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2967546A0FA8207FC5F0F1BAAE658C761FB96BAA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:549::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:67:54:6a:0f:a8:20:7f:c5:f0:f1:ba:ae:65:8c:76:1f:b9:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=68411c419bb31efe894360e038a69a8dc6ca7c36ce1d4ebd3c371c08d349cce6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:f6:d0:46:85:b6:27:be:f9:6b:73:fb:fc:
db:47:6c:13:2f:e3:5c:02:42:5f:76:e4:db:e6:ac:
a2:1d:52:87:e0:27:52:e3:e3:6c:3a:af:00:bd:d5:
63:f0:a9:5b:48:81:35:32:c0:8b:5e:09:15:95:df:
d9:7e:fe:1d:2d:49:96:05:c1:93:d6:16:98:d6:6c:
41:06:10:11:70:de:e8:6d:0e:27:5e:6a:02:17:b4:
6f:30:5b:67:89:da:83:6e:d6:04:89:03:6c:6e:7a:
18:b8:02:0f:7a:27:0a:0b:c7:92:52:b9:82:09:8e:
f5:c4:ba:6f:fe:35:83:3f:b1:d2:8b:7d:36:4a:5c:
da:3a:95:22:bc:83:ae:1c:06:e3:6f:cf:a6:16:5a:
32:66:c5:b2:4a:8b:a8:5c:ce:7c:f9:85:09:52:7c:
93:5c:37:a7:f5:bd:67:90:e7:88:19:7b:4f:2e:33:
95:89:32:2d:76:0d:94:11:45:ac:85:b8:cc:c9:49:
51:3b:ac:9c:e8:c4:98:06:bd:43:32:38:cb:dd:b6:
5a:5f:05:72:bd:28:f3:81:70:42:c0:d9:2a:52:e9:
3e:ba:3a:46:d2:ec:52:41:b6:dc:43:ca:53:28:8e:
0b:df:73:93:60:69:cc:6f:bb:1b:91:a5:61:4c:f0:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:E8:4C:19:E6:24:B7:8D:CE:1E:9E:7D:BD:BD:EE:5F:4E:2D:55
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:549::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b4:3a:c4:c5:cf:96:05:d9:f4:76:73:84:be:0e:fa:ea:0f:
42:22:66:aa:a4:6a:c0:f1:3e:2f:14:0e:da:c3:ea:dd:f8:aa:
11:ef:7c:25:97:82:6a:0a:58:2d:fa:13:0c:e3:05:24:58:26:
eb:a2:f3:af:63:5a:6a:e9:b1:7f:89:60:26:b0:53:e0:d4:28:
aa:db:29:aa:ed:bd:ca:19:f7:3a:cb:bc:e5:7e:d1:dd:6b:ad:
ab:e2:6f:0b:57:4d:65:27:9c:27:9c:ef:ac:56:7d:fb:37:9b:
9b:d9:c6:77:a5:16:9b:b3:9b:56:c2:1d:0a:d4:95:23:62:17:
24:9f:0c:90:71:c8:68:5a:15:3a:d6:b0:57:56:26:32:9e:a3:
bc:eb:c3:20:39:1f:5a:a7:8b:28:0a:10:b1:f4:06:05:da:85:
0c:a3:0e:6f:70:d0:95:8c:80:e7:44:54:bb:d1:d4:35:4e:f6:
02:b2:9f:88:31:fc:cb:95:61:81:4b:15:a0:c7:5e:7a:aa:97:
14:35:ee:88:25:c0:79:1f:56:64:95:a1:00:87:b6:1b:5b:2f:
44:dc:2f:e1:19:f6:78:86:a3:c4:36:8b:a2:83:89:4d:22:50:
6f:34:8c:a4:cc:92:69:21:3e:d8:10:8c:d4:ba:f9:1a:3d:00:
79:e2:88:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:15:11 2025 by rpki-client