Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa
File: bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa (raw, json)
Hash identifier: LLzB3ZxWkrlBAC/w+0Ny+VDxqYsMkfQqFRyNt+rWwXA=
Subject key identifier: 36:B5:C3:91:74:63:43:1B:51:4A:72:7C:A9:84:3F:98:E1:E0:22:90
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0D595322B72753F28715EB51BB7D9D152F591F8A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:59:53:22:b7:27:53:f2:87:15:eb:51:bb:7d:9d:15:2f:59:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=0029dbfdb7861b706c8523994e4db18f8603536bc16bb13910dd8f3236929bd0, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:a7:c0:33:a6:61:58:29:bf:e8:fa:bd:e1:
dd:01:4f:97:a3:ab:92:cc:6b:5f:ff:d3:80:ac:6b:
97:01:82:5f:76:fe:c8:af:3a:cb:18:60:38:75:ed:
12:4f:87:57:bd:7a:81:35:92:6d:1a:e3:4a:fe:eb:
42:f3:b6:76:b7:d8:53:08:37:6b:f5:1a:d7:bc:a9:
55:4d:32:b3:24:5d:d1:46:fb:51:9f:9c:30:1b:74:
ee:c9:11:a8:bb:57:e1:e5:b9:45:9d:b6:c5:82:16:
04:93:7d:31:2e:d6:28:2c:7d:62:97:c4:a3:40:92:
6b:8b:f1:01:a5:e8:3e:2c:ae:db:35:80:ce:81:73:
8b:33:6c:2b:f4:24:55:bc:e4:51:ca:2b:2b:a5:47:
fb:3a:d4:64:48:0f:16:35:15:a0:a9:e8:b5:9e:ab:
7c:f8:3e:83:91:af:a6:c1:68:b5:e3:c9:6e:39:01:
ec:3a:8b:b6:86:c7:71:10:da:14:5e:a7:e3:34:43:
88:54:b6:59:5f:32:24:1f:9b:49:90:18:d8:11:61:
20:1b:62:81:ab:88:89:b2:2e:98:f9:90:8c:9f:2b:
80:9b:c0:b7:65:7f:f1:7f:ac:91:92:bc:ce:c7:fc:
a2:34:8f:78:53:3a:0a:68:a0:bc:ac:48:27:80:6c:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:C3:91:74:63:43:1B:51:4A:72:7C:A9:84:3F:98:E1:E0:22:90
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:3a7::/48
Signature Algorithm: sha256WithRSAEncryption
8d:07:27:75:dd:ab:25:46:64:3c:76:56:63:3d:4b:15:29:1a:
9c:df:c1:a0:b6:0e:4c:6e:71:38:f9:af:ca:b0:a7:7f:5f:8f:
19:a6:7f:e2:a2:dd:eb:a2:42:46:1d:f7:05:6e:1a:de:3a:90:
a7:dd:51:8e:4e:a3:e3:3c:a8:10:30:59:af:c4:e3:7f:fd:db:
35:91:49:b9:dd:cb:6c:dd:be:a8:a4:b3:3e:d2:07:b7:32:aa:
22:55:c2:9f:d3:a4:cc:5c:db:1c:5b:8a:94:f8:36:a8:94:09:
3d:7b:29:03:08:66:65:5d:69:18:db:1c:f5:d7:60:14:6c:32:
9e:dc:02:ce:fc:63:1f:7b:84:ad:a1:c7:79:8a:8b:a0:0e:d4:
e2:fd:d6:bc:ba:1c:f2:69:b7:6f:2e:56:cd:0f:2c:dc:b6:e4:
ce:dd:49:29:49:97:f7:85:d7:b8:9d:03:6d:e6:d0:1b:8b:82:
5c:1a:c3:36:cf:cf:b5:31:cc:ef:52:76:b4:58:9d:df:b7:5e:
fa:01:a5:08:a4:5e:90:01:87:bb:a8:89:2b:44:ca:85:6d:b7:
0a:7e:c6:5a:18:3d:85:c5:1c:2f:9d:ca:4c:29:a0:66:75:6f:
eb:09:ad:8b:dc:a5:cf:49:ee:a5:a8:c4:0a:f6:a2:af:24:af:
93:11:f7:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:11 2025 by rpki-client