Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57b2e038-a1b3-4dc8-9889-7d40f4fe83bd.roa
File: 57b2e038-a1b3-4dc8-9889-7d40f4fe83bd.roa (raw, json)
Hash identifier: 35fMyv6mtshqEe6uySQTIGPrFsOZo+QST+tHdhl1FeM=
Subject key identifier: 77:C2:85:D7:F7:AC:54:9E:D0:A9:DA:70:A6:E3:09:F0:82:FE:F2:E7
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 1C997D0C7316EBC40D0633074A5C1C335711CCB0
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57b2e038-a1b3-4dc8-9889-7d40f4fe83bd.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:306::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:99:7d:0c:73:16:eb:c4:0d:06:33:07:4a:5c:1c:33:57:11:cc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=8702ef70fa39f40b752702fca23df51bdd206a22f992f5c312b2706a40dd8813, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:50:40:72:45:55:55:7f:59:96:bb:ca:9e:
66:e3:c4:82:48:38:88:71:34:25:c6:1d:c7:b8:4d:
fa:e1:da:90:37:ae:f1:f5:56:77:68:11:ab:5e:79:
42:3f:47:f4:19:32:d3:ab:aa:ab:e3:b4:4f:c0:d4:
6d:e6:2c:02:cd:b1:c7:60:07:14:27:1f:b7:35:36:
a9:6b:33:c6:ea:24:7a:c3:06:5c:c1:6b:8c:8c:15:
34:8c:c1:86:c3:e3:c4:da:76:89:8a:a6:71:56:bf:
d6:26:ec:3f:d0:7d:33:80:c4:70:00:a7:d4:69:be:
10:22:a3:60:2a:7e:9d:03:3c:7e:b6:ca:40:df:43:
f4:4c:c9:20:88:98:20:4e:b9:54:44:b5:34:da:a3:
b1:af:dd:8c:af:9e:2a:90:da:8d:6b:d4:d1:8d:58:
19:84:3b:44:43:6b:18:40:6e:cb:5f:9e:d8:7a:e7:
43:f2:d2:cc:63:1e:49:90:7e:59:ea:48:e3:c1:7c:
35:5b:78:1c:06:d0:5f:a6:29:19:0e:96:ce:c3:19:
20:de:38:54:43:35:a3:65:dd:bd:78:ad:eb:a5:6d:
8e:59:03:50:c7:e8:0c:e3:97:d2:1b:10:50:f3:3a:
50:ec:93:99:35:50:7f:3c:19:0a:18:c9:57:1b:34:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C2:85:D7:F7:AC:54:9E:D0:A9:DA:70:A6:E3:09:F0:82:FE:F2:E7
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57b2e038-a1b3-4dc8-9889-7d40f4fe83bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:306::/48
Signature Algorithm: sha256WithRSAEncryption
76:89:15:c2:fc:8d:b0:84:b8:41:04:37:0b:05:27:48:cd:45:
c9:c8:2e:21:77:22:2f:4e:71:5e:68:df:ad:6b:34:04:8a:65:
70:91:9c:a5:71:30:fe:fb:b5:b1:b5:7b:ad:29:c5:0b:e0:42:
09:6c:37:51:46:8d:e8:80:58:60:08:ac:38:5c:82:ac:32:97:
0a:37:e9:1d:c3:3c:d5:c4:d1:15:11:f1:26:88:1f:98:11:4a:
56:ea:e2:95:c4:02:a6:4e:eb:71:c6:5e:c3:59:a0:e2:c6:66:
12:09:69:22:7a:e7:8c:5f:2d:0d:94:c9:e9:df:8a:e7:ef:16:
c7:96:7b:cb:87:20:49:ad:23:c3:20:5b:1b:f5:ea:a6:eb:d4:
a5:07:a5:ac:99:b0:0e:af:6c:68:e9:04:91:21:fa:a0:dd:3d:
45:37:8a:b5:fd:05:d8:cb:03:6e:cd:7c:db:81:6b:d0:24:2b:
f5:aa:a7:04:1d:8f:de:24:9a:57:b2:df:20:ef:a1:43:5b:61:
44:ad:14:c7:6c:0f:e8:8f:48:14:93:7e:2f:22:45:0d:79:30:
26:9b:47:6b:85:70:0b:f1:6e:b4:6e:ed:0e:d3:0d:26:6a:35:
fb:f5:66:7a:bc:39:ff:d5:98:b1:55:45:8a:1b:87:85:0a:f3:
01:4b:87:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:01 2025 by rpki-client