Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa
File: 58ae88e3-1626-4e66-a775-9d30fa3396fa.roa (raw, json)
Hash identifier: 98OYfYJBIcTAhauuS6KVwK706ded5Ry5jOIxQWgpG3A=
Subject key identifier: 3A:48:71:BF:35:FA:33:F2:2E:32:12:BA:F5:3E:DF:8E:57:2A:6D:5D
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 5C50A1B0C8DAF98B7673CB6E753471FB373FF9AB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:b00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:50:a1:b0:c8:da:f9:8b:76:73:cb:6e:75:34:71:fb:37:3f:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=9a513f6dd628f3c09307225dac46f2ccd78c6753ebc80d2bea5ea56bc0fbd916, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:a9:62:f8:c8:96:fb:2d:a4:87:77:62:6e:
be:67:f0:ee:a8:5e:0f:4e:ef:b2:a7:15:97:f0:47:
3a:e1:7e:94:e6:54:cc:ec:1c:72:ac:81:9e:0a:a8:
95:e6:65:84:69:e0:cb:b5:6d:92:f2:4c:4f:06:e6:
cc:76:48:ef:3e:88:bc:ae:33:a0:1a:c5:a4:c5:7f:
ad:c8:ee:34:aa:cf:3a:b3:bf:80:bc:ef:0f:82:bb:
dc:27:1e:47:ef:d1:43:7c:69:ce:98:90:2c:99:3c:
87:f7:20:ec:06:5e:0c:c4:50:06:5d:c7:02:d0:bd:
b9:80:c3:9a:2b:98:61:51:04:19:58:15:94:e5:48:
83:b9:a2:0b:e5:b7:af:2f:d2:bc:a1:67:f8:ce:34:
b2:ea:0a:d4:3c:ec:15:37:33:74:8a:8b:a4:9e:4e:
65:fb:b0:d3:0e:d5:1a:1e:e9:ef:6c:b8:cc:d2:8e:
92:0f:fe:07:a3:bb:9b:37:e6:25:07:b2:a9:b0:4e:
1e:30:63:46:5b:8c:76:67:f5:06:dc:97:5e:36:df:
ab:71:8c:16:7d:f0:45:80:68:e6:90:6d:5f:72:a5:
70:4b:d1:03:0e:6a:7b:e0:25:d4:9d:20:5e:35:92:
f3:5a:c9:99:2c:72:cf:51:ad:14:6d:ce:ed:6c:6d:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:71:BF:35:FA:33:F2:2E:32:12:BA:F5:3E:DF:8E:57:2A:6D:5D
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:b00::/40
Signature Algorithm: sha256WithRSAEncryption
3b:78:d8:d3:c1:d3:b7:5a:81:4f:07:7a:48:12:41:c8:ee:4d:
31:f4:02:1f:15:50:5b:d8:6b:2a:32:d8:67:96:f2:87:0f:3f:
1b:27:38:8f:90:59:0c:bc:ec:23:7d:36:ef:98:e1:e5:f7:c4:
da:99:4f:c1:c5:1a:25:72:84:78:02:6a:bd:27:e8:97:ac:c3:
2b:ee:75:ef:39:18:26:65:0f:8d:c2:c5:52:19:dd:92:ba:79:
d7:46:80:8d:e0:7f:d3:d4:51:28:c3:9a:84:2e:67:bf:b9:e9:
a6:4b:31:72:fb:ba:f7:33:d7:c7:16:91:34:2a:a3:d8:da:6a:
8d:be:c9:2c:72:80:bb:f5:1b:2f:27:7d:dd:02:be:e4:77:67:
4d:d6:57:41:76:e2:6b:d4:c6:89:a3:d9:83:d6:fa:66:5e:55:
c2:ad:b3:07:44:10:cf:e2:eb:91:e1:cc:18:63:3e:7b:07:4f:
70:8f:d9:75:e6:95:53:40:98:3b:fd:e2:43:20:e6:17:22:61:
89:c1:90:76:49:ce:7d:34:ba:2d:2d:47:5b:20:a1:c4:3a:52:
70:3c:2d:bd:12:e0:f9:f6:5c:84:d0:4e:ab:a9:1c:ee:e7:e8:
44:d5:38:27:ad:61:de:15:64:54:6f:10:fc:53:96:9c:3d:a0:
92:a0:57:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:30 2025 by rpki-client