Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa
File: b2a4ddb8-c852-4876-b718-a984606f10af.roa (raw, json)
Hash identifier: 7PDKugOsZf7px9/jrEL7e/UZIRYRprwI6h82KX89bK8=
Subject key identifier: 8B:4A:E3:80:D9:C0:FC:2F:E1:93:3F:9D:11:54:87:13:F7:68:33:58
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4C6C43AFEB7FC46CF586BB68EF427565BBDD47AC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6c:43:af:eb:7f:c4:6c:f5:86:bb:68:ef:42:75:65:bb:dd:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=f68604c926edf9deefd8001f3391f48abcf5f764cb0763ae3f7f954ebfd26c9c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:c2:e5:55:6f:d8:29:62:8b:9d:28:11:f6:
43:73:d7:74:f1:64:eb:e2:10:8d:2f:ed:5a:ca:8a:
c3:9c:04:e6:41:c6:22:2c:d9:22:7b:c9:72:eb:23:
22:e6:c2:1a:14:71:2b:59:00:ad:30:96:fc:a0:c3:
73:95:16:78:3b:cb:b4:63:0c:1d:f9:ca:26:09:88:
cb:5e:46:bb:69:ae:b8:3b:3f:86:ae:32:4f:91:14:
99:5c:5d:47:5a:2f:85:f6:c1:a9:e6:d7:9d:a5:97:
0e:e7:a2:2f:21:75:e9:33:a8:8f:ff:f6:e8:c6:20:
4c:73:b9:49:3a:d0:2f:5d:b7:98:e5:b5:8e:b2:23:
b7:c1:03:ad:46:80:5c:51:59:5e:99:44:2c:48:a6:
55:9f:a4:80:cd:2b:68:a8:b0:1b:fd:b2:fc:5f:b9:
7d:21:1a:a0:0b:7e:03:3d:cc:ee:fa:5c:fe:f7:c1:
0b:6b:06:05:ff:88:83:55:ba:81:cb:eb:9a:64:72:
d4:d5:41:47:f3:65:dc:fe:de:8f:ec:0e:c4:e9:f0:
b1:18:c7:ef:74:b0:33:16:6d:22:24:57:74:98:91:
02:3c:16:c7:d8:14:0f:f5:88:13:73:e0:57:98:e9:
87:9b:f2:93:7f:01:6e:e5:81:1d:10:b1:30:71:20:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:E3:80:D9:C0:FC:2F:E1:93:3F:9D:11:54:87:13:F7:68:33:58
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0c::/48
Signature Algorithm: sha256WithRSAEncryption
83:54:31:d7:29:5b:38:c3:a2:ca:96:76:d9:de:d7:96:a4:af:
e0:e3:af:75:5c:2f:c8:e6:a4:36:30:ba:c1:6d:30:b2:bb:1d:
39:5d:bb:1b:6d:a1:e1:9e:8a:12:41:f6:ef:7a:92:21:da:c9:
a0:bd:31:83:9f:9e:a6:a3:4b:b6:77:44:94:6c:a8:e2:f4:e8:
15:c3:b6:60:95:6d:a8:b2:5d:93:32:eb:69:b4:48:a1:00:e6:
36:db:28:b3:fd:c5:0e:24:3c:0a:02:cd:1d:9a:d4:be:1e:b1:
93:e1:d5:f4:63:d6:ad:9d:e8:78:8a:73:be:82:8a:36:8c:96:
25:5a:84:3c:38:32:ea:b7:5e:1d:d4:e6:4e:99:8e:02:0b:16:
39:5f:52:57:96:50:0e:16:0f:a9:31:21:90:d9:82:75:7d:5e:
e7:b9:60:65:8b:fb:a0:69:82:74:92:9f:6a:61:d2:7e:6e:23:
91:02:01:95:44:97:14:e3:df:0b:b6:a8:9f:df:36:1b:c5:f9:
a5:4d:a1:fa:32:32:e0:d0:08:72:40:32:3b:48:7c:8a:a7:25:
6c:af:1a:73:fc:4c:45:2a:4b:be:2b:23:93:ae:7b:e1:d9:da:
0c:32:7b:43:04:43:57:95:08:8a:42:cc:76:8a:fa:bc:c3:e9:
e9:a9:02:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:39:04 2025 by rpki-client