Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa
File: 710c8ea0-f6b4-4fbe-9653-22174e063099.roa (raw, json)
Hash identifier: 4Yrq2SEXmi9yN74tZEYYG7WanuFj8GWHnipw3uLGbuY=
Subject key identifier: 74:97:40:98:A6:C3:67:9D:12:3D:1F:98:66:77:EC:FA:71:86:B4:22
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 22CE710E21A1D5FA7D579E3CDFF39B830AFAA141
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa
Signing time: Thu 13 Mar 2025 17:36:46 +0000
ROA not before: Thu 13 Mar 2025 17:36:46 +0000
ROA not after: Thu 17 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ce:71:0e:21:a1:d5:fa:7d:57:9e:3c:df:f3:9b:83:0a:fa:a1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Mar 13 17:36:46 2025 GMT
Not After : Apr 17 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:44:e3:8e:3c:16:4e:51:f4:a0:68:d4:c6:d6:
2c:af:ff:ce:6e:bc:90:8a:2a:7f:91:fb:d7:64:6b:
be:00:2a:a1:38:c7:a4:95:83:59:19:09:a3:cb:b4:
4b:6e:1c:dc:03:1e:2d:31:24:fe:48:9f:ef:4f:fa:
8d:34:ca:89:82:67:8b:b8:15:9a:01:00:57:ba:47:
82:dc:6b:03:af:43:3c:96:49:48:9f:49:91:0b:c0:
13:0c:d0:8f:ee:36:61:b5:b9:29:70:a9:ec:f4:37:
22:6d:7d:d7:be:52:2b:bb:87:96:a1:0e:3d:78:62:
a6:84:38:2e:06:45:00:3b:ab:7c:c1:fc:4e:8b:ff:
9c:a5:52:f2:6b:c4:bb:56:ec:9b:c8:32:ad:f6:84:
c6:f0:49:03:6c:69:18:ac:39:bc:ec:d4:46:f7:3c:
26:39:30:dc:9d:97:0d:78:82:6b:31:8d:89:a2:c8:
14:f4:2e:84:3b:9a:d4:4b:0e:0d:44:0d:96:11:53:
0f:ea:35:3b:70:f1:63:01:3b:09:fb:e3:5b:a2:78:
c2:aa:b9:aa:96:0f:a0:18:1e:f0:33:e0:19:8b:cb:
3f:df:ff:e9:5c:c4:27:20:3c:87:7e:0e:68:17:53:
af:48:09:e4:c9:ff:f0:b8:e8:8a:62:c5:19:47:d7:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:40:98:A6:C3:67:9D:12:3D:1F:98:66:77:EC:FA:71:86:B4:22
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:90::/44
Signature Algorithm: sha256WithRSAEncryption
36:60:1e:88:2e:d7:4f:fc:4e:ab:ae:41:e5:d1:1b:44:95:76:
df:41:b7:d8:ee:c6:81:bf:32:b5:d8:fd:c0:4e:64:97:77:eb:
55:94:23:ce:d0:e4:e8:2d:b9:2f:0a:ab:8d:c5:1c:78:64:bd:
14:1e:ba:34:f1:49:ff:92:59:66:74:68:d9:b5:70:d7:ce:66:
91:30:58:7a:6e:99:e0:ad:21:55:a3:39:37:fc:d7:76:7e:38:
37:10:35:4a:40:32:13:db:b6:1e:57:f1:1e:ea:3d:9e:7e:14:
d4:65:ef:9c:88:79:b9:13:7b:ba:7f:48:a2:8c:bb:23:9c:e1:
06:be:3b:81:a2:2a:9b:8a:57:a0:f3:d8:e6:ed:90:e2:83:00:
7c:7b:44:10:f7:9b:08:02:78:39:95:e5:07:2d:f3:3b:8a:37:
0c:83:af:92:63:b4:b5:0a:29:05:6d:eb:db:06:be:ea:fd:2c:
b9:5d:bf:83:ee:e7:52:04:9d:65:6b:7f:7f:2d:62:de:14:21:
29:3d:dd:e3:46:be:48:33:94:9b:1b:36:7a:81:a1:28:3b:b1:
98:bb:ac:5c:07:29:dd:a4:f4:c5:ee:7c:9e:5e:28:09:6d:ff:
9c:6f:dc:db:8e:ff:8a:f9:7c:d3:36:74:c4:0d:ce:0f:e9:d5:
2c:27:b0:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:54 2025 by rpki-client