Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa
File: 853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa (raw, json)
Hash identifier: tPsEIypfkpYqF/5XlWRKxYOsXh1CA3j1DERZrDflw0k=
Subject key identifier: 5D:1B:7D:AD:D6:63:1C:08:BE:D9:94:3C:92:2A:C1:2C:4A:32:1F:0B
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 059320B06ADBF97639572D5CD1EB41D2CCB461CB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:93:20:b0:6a:db:f9:76:39:57:2d:5c:d1:eb:41:d2:cc:b4:61:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=242ea86b654f64bcef64926ef3feb910a06f573da5fdf3ba44d8db8231b82335, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:96:ac:e2:15:4a:ed:23:32:f2:7b:48:d2:
42:08:19:80:b1:2f:74:3f:df:88:a3:04:50:23:da:
14:d5:0f:e3:fa:ab:66:06:4a:8f:b2:57:83:9d:e8:
78:b7:cc:3e:a1:d4:ee:05:0c:2d:37:34:c0:44:f6:
66:d8:65:d0:f9:06:18:39:2f:99:d8:71:56:ac:d4:
a5:d5:f6:9f:b6:c8:3b:a6:5c:97:2f:a6:e8:c1:da:
16:9f:38:c7:eb:da:98:56:4b:f7:19:2f:c2:6a:98:
05:e7:61:dc:49:90:dd:d5:0d:ee:23:86:1f:42:5e:
2b:7a:8e:4f:93:d7:f9:3f:81:89:23:5c:ee:8e:7b:
ec:7d:50:44:7c:59:04:2a:80:eb:8a:90:5c:06:89:
b6:18:b7:61:69:ab:ee:4e:b9:89:ac:45:74:a6:d4:
38:12:7d:58:f5:5e:a9:66:61:98:8e:42:e0:b2:a9:
f3:e8:21:95:6c:37:fe:72:cf:dd:d3:c0:bd:af:23:
84:d9:fa:c5:50:53:26:fc:d9:0f:79:74:2f:81:2e:
58:06:ad:ca:5b:7f:9e:e6:7a:91:ac:b0:4d:c5:83:
0e:de:bc:b9:8b:26:b3:bf:1a:69:df:6a:1b:00:f2:
a1:16:05:69:db:fc:10:7a:3a:ff:e6:c7:b4:c3:49:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1B:7D:AD:D6:63:1C:08:BE:D9:94:3C:92:2A:C1:2C:4A:32:1F:0B
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c11::/48
Signature Algorithm: sha256WithRSAEncryption
20:f4:f7:58:e3:aa:a2:cf:4f:2a:46:7c:82:0d:12:ad:1b:12:
68:fa:0b:3f:57:86:2c:22:cf:9c:d8:a0:9e:38:e1:76:8c:b7:
13:c1:26:e0:8e:9e:fd:1a:7a:7e:be:3a:03:25:63:92:ef:9a:
6e:45:37:13:21:83:bb:fd:fd:58:0c:7c:80:ec:1b:c7:26:f0:
db:47:3d:be:a9:3a:a6:14:b8:ad:e6:77:85:3a:21:4e:67:e4:
7e:1e:8b:b0:62:80:e0:c3:ce:28:f4:84:90:fc:c3:7c:7b:83:
5e:68:b3:76:93:a8:7e:c4:85:29:0d:ad:d5:e2:10:de:21:e1:
b0:a9:91:00:7f:98:02:cc:ea:d2:1e:3f:37:33:2f:49:16:19:
30:b0:d2:af:79:59:38:39:0b:43:06:5f:33:92:cc:4b:df:cd:
1e:6e:8f:5a:20:6b:47:64:23:87:77:8d:48:e1:15:f0:5f:aa:
9b:12:50:5e:d4:02:8f:2c:04:50:2f:17:b6:5d:71:85:88:bd:
0e:90:d6:90:0b:85:bb:4e:8a:9b:2f:5d:78:df:f9:3e:60:57:
ce:14:c6:89:94:7e:ec:72:ae:3e:4a:50:4b:f7:fb:f3:1c:e9:
95:b2:3d:36:32:71:b3:8d:83:68:50:a9:fb:40:b7:50:2c:cf:
d3:00:38:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:18 2025 by rpki-client