Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5befdd2f-22ab-473f-936e-ffcd9943d082.roa
File: 5befdd2f-22ab-473f-936e-ffcd9943d082.roa (raw, json)
Hash identifier: MqBXSf3X7b2HlDSlcFwCrLPcFMNqK4faLCnAry4U3aA=
Subject key identifier: E7:D1:02:11:47:CC:33:8F:E1:E5:7D:15:9B:73:45:9C:B9:7F:3E:65
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0587EF120B8D8314B18181FB519B4A955C2BB3AB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5befdd2f-22ab-473f-936e-ffcd9943d082.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:310::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:87:ef:12:0b:8d:83:14:b1:81:81:fb:51:9b:4a:95:5c:2b:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=1a8c468e6cbf8efa9cbef6bd1b4f7a7fc2c3f013f893f64b9ffeb438ba036930, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:e2:5e:f4:29:a2:e8:20:ed:73:a1:3b:db:
57:5b:07:5e:69:1f:71:8d:18:6c:eb:19:83:ea:c5:
da:8f:e6:86:c7:a7:06:c8:37:15:25:07:4d:5a:58:
5d:01:20:66:52:46:c5:25:e0:6c:4c:9f:25:e6:14:
17:02:f4:db:be:6a:f5:f9:b8:bd:f2:9f:61:ff:3f:
07:6a:93:9a:83:2d:4e:91:96:58:a7:d3:80:61:11:
56:62:3c:92:dc:36:de:1d:69:2f:9c:32:1f:cd:ef:
35:28:51:08:d0:78:15:1d:bf:47:b3:ac:4a:3e:f2:
7a:f2:8e:bc:32:3b:f7:aa:9f:04:58:c8:30:1d:40:
ce:6f:74:49:4a:7c:b9:b0:0f:fc:19:be:db:b7:aa:
dd:3d:72:ba:a1:99:c9:1b:99:35:4c:c9:2d:64:a0:
a0:a6:b0:5a:a3:c7:0e:5a:77:b0:94:0d:18:02:cf:
44:f1:3f:dc:dd:dd:ac:99:5f:1f:21:16:f5:74:2d:
52:2d:ba:e6:08:30:76:69:33:87:66:c9:7a:d6:b4:
29:a5:09:4b:e4:a4:93:92:3e:3b:ef:89:8f:46:1d:
8c:8a:9f:1c:b0:ef:f4:b7:8e:b0:62:a1:00:d8:5f:
62:56:03:f9:95:8e:b5:8a:ff:44:66:cd:f3:e2:d4:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:02:11:47:CC:33:8F:E1:E5:7D:15:9B:73:45:9C:B9:7F:3E:65
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5befdd2f-22ab-473f-936e-ffcd9943d082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:310::/48
Signature Algorithm: sha256WithRSAEncryption
86:ec:9e:2f:5e:c7:d8:79:d0:95:67:b4:9e:3f:5a:57:9a:a4:
af:07:67:75:5c:a8:8b:e1:4f:5a:bc:94:06:34:85:bc:a8:ba:
c5:14:5e:27:ba:29:f5:9d:0c:44:29:88:37:02:47:a5:0d:3c:
83:89:e9:b3:89:61:ec:95:42:40:6a:90:b1:ea:11:11:5c:18:
db:08:59:08:cc:0d:65:79:02:8e:07:52:62:97:6a:10:1e:30:
4c:b7:84:68:92:25:ae:45:28:ac:55:53:bb:bd:0a:7e:74:79:
96:24:7d:43:04:1b:62:0d:1a:3d:c3:c6:84:e7:65:e6:b3:fd:
ba:93:9b:a7:c1:79:04:5b:db:f7:6a:77:42:c7:e8:4c:88:a8:
69:61:b4:f3:a2:a8:e7:12:70:aa:aa:40:2b:cd:da:16:d9:dc:
90:b8:23:c8:0e:7b:f0:15:b1:cb:c4:65:a6:e7:ff:f8:d5:d2:
bc:b8:eb:4f:b1:a1:62:00:43:8d:e9:35:4f:78:48:7e:35:83:
b9:eb:07:24:fe:60:a6:be:35:6a:97:56:68:35:ea:51:63:4e:
44:a8:1a:48:cb:db:af:ab:86:9d:f5:0b:06:7e:71:5f:7d:c9:
eb:af:fa:5d:e9:54:eb:f6:ee:b9:40:63:e3:81:3c:12:c7:99:
b3:25:63:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:47 2025 by rpki-client