Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa
File: e7607360-6fe5-44db-bbe5-edd1b127da54.roa (raw, json)
Hash identifier: 1XdsXW/fRb2Of/5qrW7neqiiiPPlcvDOx02o2FG6naw=
Subject key identifier: 59:43:05:3D:A5:B5:E0:DB:FD:0C:E1:7F:94:37:A5:E5:6C:58:B9:3E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 1F5AF9CD74B644AF8E134C789DE180C459C602E7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f03d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5a:f9:cd:74:b6:44:af:8e:13:4c:78:9d:e1:80:c4:59:c6:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=336103c5f572625738219d63e9e5240c4e88eb4cd8f399a999fe1525a0acc666, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:c1:70:e6:8a:b1:0e:b9:24:36:e2:1c:8b:
15:d0:47:bd:62:d7:84:e9:aa:38:ec:4d:20:ed:29:
98:91:8f:64:89:c7:fa:5b:4b:b3:7a:d3:df:1f:5b:
47:76:48:7a:46:e1:5c:ae:2e:d5:95:2d:92:98:4a:
d8:45:46:6f:12:4d:84:e7:ec:1b:1b:22:31:bc:1e:
b7:01:14:5e:4d:d9:d8:5e:e2:19:bd:ca:53:38:93:
2c:21:30:97:e3:fc:db:86:18:17:de:a4:93:f1:92:
1a:92:d5:8f:01:f2:ac:7a:27:ea:43:60:0a:5d:1c:
f1:7a:74:7b:1d:64:dd:41:0e:ba:f9:97:52:ef:56:
ab:3e:3a:b4:a9:9e:b1:90:7e:67:ec:9c:20:a8:43:
76:e9:0a:91:c2:cf:38:54:7a:72:5e:95:2a:e4:49:
1b:4c:07:ce:d2:84:f8:dc:aa:38:2f:ed:9c:1d:a1:
c8:4e:05:ad:5e:a0:40:dc:c0:f0:ad:45:9d:f5:ca:
22:5d:43:4a:b9:14:c1:89:fd:4e:c9:8f:d8:bc:10:
92:d7:68:f9:1c:45:44:b4:e9:82:8b:ea:42:7a:1a:
cb:13:a4:d4:aa:93:3d:c0:ce:5a:a6:62:65:cb:a3:
40:61:a0:e5:5b:3c:a0:c9:58:c7:e6:46:69:f4:70:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:05:3D:A5:B5:E0:DB:FD:0C:E1:7F:94:37:A5:E5:6C:58:B9:3E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f03d::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d0:56:a8:cc:f6:6b:be:0c:d0:c9:f6:5e:f1:f0:8a:31:77:
7d:4c:aa:27:35:f4:1d:45:bb:15:93:ce:e6:95:7d:c1:e1:55:
9a:89:76:00:cb:5f:45:5f:63:e7:e0:c6:07:52:2c:be:9d:e0:
35:40:dc:ef:95:4a:de:05:5c:64:93:09:2e:7f:40:85:24:de:
e5:ae:e6:c0:a5:c0:f7:6f:29:84:a9:96:39:09:cd:44:d2:e6:
e9:17:67:6b:2d:cc:53:a2:9b:f0:c3:93:e9:71:44:f3:61:05:
9c:6f:0f:da:f7:74:bd:6f:26:23:a4:bf:55:22:23:b9:71:e6:
77:fb:73:5e:0b:61:2a:4d:cf:eb:d5:2c:9f:af:22:68:19:3f:
d9:6a:00:15:1c:21:29:9e:25:10:2f:16:6e:04:c1:16:3d:8f:
4f:45:47:99:01:bc:f1:2a:21:21:9b:be:a1:db:44:ce:fe:db:
fb:94:b3:fa:94:b2:35:b5:cc:58:ea:41:0c:92:d0:75:fd:28:
90:05:f5:19:7c:63:cc:d9:6c:ba:75:ad:1c:4f:f4:ce:d5:a6:
be:ae:25:cb:72:07:d2:78:5e:b8:b2:20:e2:65:13:14:dd:00:
6f:2d:87:cf:12:c3:f8:05:6d:7d:1c:f3:af:39:a2:93:98:66:
fc:bc:7c:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:54 2025 by rpki-client