Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c91dc110-e4d6-4a78-90dc-94e4d2083c89.roa
File: c91dc110-e4d6-4a78-90dc-94e4d2083c89.roa (raw, json)
Hash identifier: lDG9rQYH8vjke3A933s9yKEzDY+F02wAGB9JCXUK+s8=
Subject key identifier: 12:65:55:FB:D3:64:21:23:8D:78:C1:57:12:B8:22:7B:35:5F:73:AB
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 0F6BF2EE7B5B40D0DF9215511009539D90223453
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c91dc110-e4d6-4a78-90dc-94e4d2083c89.roa
Signing time: Tue 04 Mar 2025 23:50:09 +0000
ROA not before: Tue 04 Mar 2025 23:50:09 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6b:f2:ee:7b:5b:40:d0:df:92:15:51:10:09:53:9d:90:22:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Mar 4 23:50:09 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:8b:55:76:1c:12:38:1c:2e:59:f0:46:71:
e2:ae:98:07:3a:e2:75:ce:6e:82:fa:e3:93:36:21:
6e:51:bf:04:4f:99:20:ee:5a:b4:31:79:ff:ca:08:
6e:0e:22:3a:2b:a6:38:4b:0d:56:1c:01:8d:1b:5a:
4d:76:9c:1d:73:06:d7:f2:e4:14:61:9f:70:38:b8:
30:13:58:d0:f9:da:a6:88:85:1c:8a:4b:5c:3b:b4:
b2:82:e9:06:d7:fc:69:39:51:54:1f:b5:28:00:29:
d0:de:2e:49:fb:e7:cb:2a:23:cd:98:ae:11:ce:8a:
6f:bf:de:8c:2d:43:a6:4c:88:5d:03:2f:32:7b:42:
cf:3c:df:75:3b:4b:d0:16:d1:94:19:96:55:e5:81:
58:6b:ff:c0:06:f1:83:ad:d6:3f:ea:40:8f:48:67:
45:7c:d5:6a:3d:c3:d8:6e:b3:c5:bd:84:a7:a6:f7:
74:52:24:88:18:8d:a5:3b:97:24:40:69:04:55:b6:
d1:49:d3:f7:82:39:26:78:28:80:58:ad:7e:ac:ce:
05:5d:d7:45:92:5c:d4:ea:75:bb:7c:9d:aa:6e:c3:
c0:19:ac:14:71:d4:27:27:aa:9a:27:27:80:0e:c6:
ad:59:4a:fa:b4:2f:79:b5:e2:bb:1f:da:1b:61:f3:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:55:FB:D3:64:21:23:8D:78:C1:57:12:B8:22:7B:35:5F:73:AB
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c91dc110-e4d6-4a78-90dc-94e4d2083c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:100::/40
Signature Algorithm: sha256WithRSAEncryption
82:b7:11:f4:67:4a:14:35:83:3f:8f:ec:63:3b:a1:b2:3a:16:
c3:ce:80:7c:d4:ea:d7:0d:0f:d5:cf:19:31:f3:4e:d2:94:6f:
b9:4b:5c:a8:e6:82:d3:f3:99:a8:ee:c2:6d:d7:11:1a:ee:02:
a1:f2:85:73:b4:ac:fd:94:92:d9:a5:c8:bf:82:91:84:b1:ab:
3a:08:fd:e0:59:54:2f:9d:e6:86:c9:74:30:b6:9a:ca:4e:80:
ed:c6:c1:14:84:e0:75:5f:93:55:f3:4e:6d:8d:54:cf:53:72:
dc:5b:0a:0c:53:dd:6a:7f:6f:86:ba:c2:4e:bf:83:ba:0f:7b:
12:ea:20:d7:5c:ce:cb:bd:5c:ce:e6:56:de:d0:09:14:25:3a:
08:67:3e:05:7f:4e:a7:16:f2:22:62:09:5b:46:08:b2:5d:a9:
f1:2f:89:cf:d6:34:32:c3:e9:73:03:60:12:d1:43:cc:77:d0:
11:2c:6c:8f:89:ef:c8:7b:2b:70:b0:15:31:19:5d:a7:6e:c3:
33:28:10:b4:4b:ff:dd:7d:15:b6:78:cb:68:93:89:49:86:8b:
bf:92:31:ad:6d:8b:35:d3:fb:58:d2:2b:87:9a:61:64:97:e7:
a9:53:b7:c8:bb:85:3c:ba:12:c5:bc:40:9c:65:45:0c:6e:7b:
37:f6:4b:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:07 2025 by rpki-client