Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa
File: c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa (raw, json)
Hash identifier: lf+l1VlNrYeGfMUmNj4hV6DssOW/A/x96I1M45y1sHE=
Subject key identifier: AB:8F:05:1E:58:AD:94:43:08:E9:25:AC:DA:25:8C:E8:01:53:79:1E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6F1848852207203656D9BC122924A3748C57BE7A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:30a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:18:48:85:22:07:20:36:56:d9:bc:12:29:24:a3:74:8c:57:be:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=a4ae7b705f004cb050a8dcf4910f473b251042a791064910581bd1194e66d922, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:52:77:aa:4a:e6:74:de:90:cb:65:91:8b:
8e:e2:d9:50:7b:44:34:98:e1:1b:88:a1:ba:b8:b5:
09:20:55:b1:3a:ca:d8:17:03:36:83:11:7c:f3:fa:
1b:39:97:16:f2:9e:aa:b6:e2:17:3a:cb:da:02:4a:
bc:6b:ee:9a:14:34:97:3f:02:6a:23:1e:91:76:7b:
06:8e:06:48:58:6b:00:59:b8:41:96:2a:62:81:8a:
39:63:08:0e:6a:a7:37:28:32:cb:f3:4d:50:d0:95:
1a:74:9c:83:24:79:ff:90:bf:69:56:3b:a1:0b:d9:
cd:7e:96:06:80:90:60:52:b3:b6:04:54:a1:d2:27:
90:49:25:fa:f8:e1:21:7d:de:a3:ca:b5:73:70:b8:
c2:c4:77:6c:83:19:35:c4:64:21:b7:61:b5:8f:d1:
ad:04:43:f8:02:65:db:c6:a6:dc:2b:e9:87:82:10:
85:47:ed:74:10:fc:77:33:4e:67:40:f3:99:ba:da:
67:56:9a:8b:18:50:a6:69:9c:c4:57:90:f6:b9:dd:
d2:89:0f:4b:81:42:d7:4b:5a:57:05:33:50:e3:14:
63:ea:a5:7d:53:ff:a3:97:aa:12:2f:ad:a9:56:75:
6f:52:09:7d:fc:55:e4:1b:2b:4e:fc:7b:a8:60:95:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:05:1E:58:AD:94:43:08:E9:25:AC:DA:25:8C:E8:01:53:79:1E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:30a::/48
Signature Algorithm: sha256WithRSAEncryption
42:19:be:1a:d1:42:ad:30:3a:62:aa:7f:ce:89:a0:84:35:ad:
a0:7f:2b:cf:cd:b7:86:26:39:f1:22:4d:f2:7c:e5:bd:37:67:
44:1e:11:c7:0a:fa:56:ac:a0:58:f0:2c:cb:30:40:6b:40:80:
a9:de:71:38:b6:db:08:16:3e:3f:86:16:35:04:55:de:4a:80:
7c:67:ad:ef:eb:f1:87:9a:a2:68:4a:e7:0f:c2:b1:62:31:6a:
39:bd:83:b2:75:5f:14:2c:c8:01:2c:a5:7a:4d:ee:1c:f4:33:
41:62:83:77:8e:58:74:69:60:7b:7b:69:c6:15:10:90:63:09:
40:1f:cc:a6:0a:d8:57:f5:8d:57:6a:b1:26:fb:e9:63:b0:86:
7d:f2:a5:74:99:21:8a:ce:74:ff:f8:51:f8:6b:78:29:48:d9:
d1:d5:cf:43:71:a0:fb:c4:f2:67:f6:ce:fa:0e:30:f4:ea:f8:
d3:cd:d8:95:2c:fc:41:d5:ad:66:f2:9d:08:bd:29:ca:27:9e:
43:7b:da:35:06:bc:5e:62:72:dd:bb:43:bb:63:e6:b8:54:1e:
d1:0c:b3:b1:1b:77:5f:e9:6c:54:83:08:17:3d:aa:2b:ca:d3:
15:14:a8:dd:d9:d4:d5:89:8f:a7:fb:a2:1a:6f:83:80:27:1b:
b9:3b:e1:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:42 2025 by rpki-client