Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa
File: a3dc9780-ee42-4415-930a-4d78bbb4e531.roa (raw, json)
Hash identifier: sa+/fd295Lrw2BT522VQFRphE7YZY1dbN7VdunzuHL8=
Subject key identifier: C8:A1:08:46:09:8A:80:74:06:C7:D4:C5:87:B9:4B:B4:D0:44:78:F7
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 427888D38A78C42B802A5056B1BA952BCF12AD1A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:88:d3:8a:78:c4:2b:80:2a:50:56:b1:ba:95:2b:cf:12:ad:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=e4c29987ff937460de753f7ac66955b9cd691d1dc55d79632294c817fab9f501, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:a6:f5:50:91:99:82:e4:6b:6d:ce:c6:d7:
59:40:18:96:ae:26:6e:c8:31:6e:43:06:82:4a:92:
da:07:9f:0e:c5:56:2d:af:04:28:ac:f5:cd:41:e1:
a7:95:6a:7b:8b:89:40:6d:f6:55:fd:14:8d:7a:fd:
0c:50:c5:aa:3d:63:07:cf:68:bc:2c:9c:69:b3:f0:
7f:75:d7:97:09:bf:18:c9:56:6b:90:fe:ce:97:b9:
fa:7b:c4:28:95:85:3d:15:4b:a3:91:5f:74:e3:9c:
1b:82:a5:89:e7:d6:14:89:a1:fe:6a:4b:ac:7f:be:
8b:ad:78:6d:8e:d9:66:5b:1c:3b:5d:c3:b0:d4:d4:
60:a2:71:c6:21:b8:90:19:48:e7:37:c9:a7:cf:2f:
2e:73:c1:25:97:d7:13:65:5b:80:bc:54:3b:31:81:
90:ae:92:69:2e:84:b8:f3:8b:51:44:ae:86:dc:39:
37:1d:71:58:5d:cf:c3:15:1a:12:ca:33:e8:30:73:
9e:48:60:3c:ce:fb:2c:d9:ea:a7:0d:5d:e2:31:02:
75:9c:91:32:7b:2b:24:a6:54:17:db:78:02:07:88:
f7:71:0a:ea:f3:3c:a1:cd:dd:f2:d0:3e:3b:0c:7e:
00:3c:05:ef:5e:bb:f3:80:30:ce:a6:11:e8:e9:53:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:08:46:09:8A:80:74:06:C7:D4:C5:87:B9:4B:B4:D0:44:78:F7
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c02::/48
Signature Algorithm: sha256WithRSAEncryption
7d:b3:14:28:c7:d9:20:b0:57:e2:f1:8a:07:6c:00:a3:db:fb:
15:f4:ec:26:6a:4b:6b:ad:92:d0:ae:9e:ea:db:f5:ab:76:b4:
1a:fb:80:63:cf:3f:2b:01:be:d3:e4:88:ed:55:30:81:4c:18:
73:94:cb:16:15:73:36:f0:92:b2:2e:e0:b9:3f:57:f6:4c:9a:
ba:10:4a:9b:9a:21:0b:09:7f:25:61:be:1b:c5:c6:c1:06:96:
7e:e9:27:48:bc:20:e0:d5:95:79:7b:59:57:de:0b:61:88:02:
e6:75:ad:c4:47:e5:73:0b:7c:b8:20:ec:5c:c1:6c:20:2b:e6:
18:71:04:4a:eb:ac:af:53:00:06:b7:55:62:90:02:73:c5:9a:
84:17:25:d0:51:de:1e:78:68:dc:19:80:76:29:2d:74:41:c5:
84:62:32:80:13:d6:94:9c:e6:fa:d4:af:d4:4e:3b:ed:01:1b:
ce:ac:ae:09:5b:0b:bd:5b:dd:b0:cb:ed:63:15:da:37:07:c3:
0e:cb:ec:a4:cf:2c:2b:26:2c:3f:57:ed:99:07:d4:eb:af:87:
60:bc:4a:65:f3:3e:48:02:ae:06:a4:38:2d:59:9a:39:b8:bd:
37:f0:4f:01:d7:5d:ea:f0:14:22:b8:71:d7:e8:dd:2a:90:7b:
1c:11:39:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:36 2025 by rpki-client