Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
File: 8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json)
Hash identifier: xCWEilkuRvTPTcdyn3FSuorIc4Hp9yAh4c0yEfLaXNY=
Subject key identifier: 5E:6F:CC:23:5C:EA:D8:A4:A3:C3:DF:BB:03:DF:7D:FF:70:F7:4F:6B
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4A2D6FCDA5A80C76A07BB06FF586407E0C9A3CFD
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
Signing time: Tue 04 Mar 2025 23:31:04 +0000
ROA not before: Tue 04 Mar 2025 23:31:04 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:ee00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2d:6f:cd:a5:a8:0c:76:a0:7b:b0:6f:f5:86:40:7e:0c:9a:3c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Mar 4 23:31:04 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:e6:55:8c:e7:7e:ca:d5:8d:ae:f6:97:50:
58:6d:30:0c:12:46:c6:bc:c8:38:1e:19:08:d8:41:
6e:42:bf:37:39:52:90:66:3c:c1:2e:25:c3:91:95:
79:fe:7c:0d:f1:f8:92:eb:ac:39:94:85:a7:81:04:
ce:cb:7b:4c:9f:62:b4:d8:6d:a4:57:15:21:0d:62:
20:39:08:7f:93:fc:6b:08:69:82:8d:b7:17:81:ad:
ea:ed:e9:35:4a:05:79:43:11:88:1f:4f:04:65:2b:
f2:d7:b3:79:73:89:99:20:bc:79:ce:d0:96:10:56:
e5:0e:f2:db:d0:61:b2:f5:50:6b:e5:23:50:9d:f1:
34:06:83:3c:c5:42:5a:4a:3c:c3:15:ab:72:bc:18:
3f:11:d8:6c:20:8f:39:65:20:7f:78:a4:ad:31:33:
5a:65:5f:f8:30:22:56:3f:04:07:8c:9e:1b:af:8c:
f3:f8:8f:5b:34:2d:d9:d8:29:64:48:17:d8:b7:58:
27:a5:36:0d:5a:5a:f7:f9:0a:60:e3:4d:13:45:21:
3a:b6:fb:81:2a:80:7e:7f:36:77:80:a9:7e:90:8a:
ef:d5:ed:60:82:da:ec:15:5d:e1:bd:35:9a:8a:4b:
9a:49:e3:da:7c:62:87:38:75:ca:93:16:58:88:4e:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6F:CC:23:5C:EA:D8:A4:A3:C3:DF:BB:03:DF:7D:FF:70:F7:4F:6B
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ee00::/40
Signature Algorithm: sha256WithRSAEncryption
7b:8d:79:34:df:84:7e:de:77:19:3f:27:2a:93:26:1d:ed:23:
65:0b:b4:bc:58:3b:34:6f:b1:0a:ce:3e:44:59:29:1b:27:2f:
7e:0f:cc:55:94:78:a0:2b:ce:d3:b1:19:ec:b3:a4:fd:8f:f8:
6e:6f:d2:71:11:68:90:9d:0f:6d:c3:62:ac:00:bd:5f:1c:17:
6c:21:e8:84:8d:cc:50:f2:0c:61:ac:5d:6d:96:54:87:e0:8a:
89:c3:24:38:e2:c9:4b:00:ea:07:f6:6b:6c:1a:81:8c:db:b6:
2e:8d:12:c0:f9:41:4b:c6:01:57:15:f4:5c:35:d8:2a:35:ba:
dd:ca:ce:d4:4f:47:02:ee:10:a3:cf:a4:30:b2:bc:5c:d2:84:
3e:8f:5b:22:94:36:3a:15:02:cc:73:29:64:5c:50:cc:c9:08:
4d:20:cd:8d:35:8c:c4:a1:95:a1:87:72:b6:db:6d:76:06:91:
e1:1e:df:8d:51:fd:26:fd:4c:bd:73:98:e3:4c:83:f6:4f:04:
39:60:57:92:d4:38:06:02:26:1e:42:9f:3d:5c:84:28:57:e6:
04:5b:f6:89:6c:e2:34:d5:27:3d:27:4e:74:d2:8e:cb:e9:88:
09:2c:6e:f1:94:3d:0b:63:46:17:84:2d:d7:c9:07:4b:0d:35:
1c:68:2f:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:55 2025 by rpki-client