Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa
File: c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa (raw, json)
Hash identifier: yzXLuw6c31CJNoqPmFA6WJ9Jqk7n5j+1SDmsMUdoLds=
Subject key identifier: 4D:F3:5A:97:ED:69:47:FA:68:99:2A:65:8D:A9:90:51:D1:3B:84:75
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 084056FD5BF1B907FCA51629B37FD415E27F3ADE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa
Signing time: Tue 04 Mar 2025 23:20:38 +0000
ROA not before: Tue 04 Mar 2025 23:20:38 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:300::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:40:56:fd:5b:f1:b9:07:fc:a5:16:29:b3:7f:d4:15:e2:7f:3a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Mar 4 23:20:38 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:2d:ad:0e:ab:bb:ce:e1:eb:44:e4:52:c9:
7c:aa:d8:62:83:42:e6:48:a1:12:73:2d:ac:73:11:
ec:69:b9:0a:6b:8a:5e:f5:8f:2f:d1:4b:c2:4a:aa:
bd:d7:8a:3e:6a:9c:c5:07:69:79:51:18:d8:03:20:
a7:54:46:d8:42:1a:c7:c2:a3:f6:5a:c1:ee:7e:25:
7f:03:1c:d5:80:32:b5:db:fc:b1:62:33:2b:83:52:
de:87:4d:c7:60:32:83:89:c6:ad:6a:61:ea:7f:f8:
01:44:b3:42:ef:48:6c:52:32:45:1c:3e:d1:e8:78:
a1:06:4d:ef:c7:f6:8b:ad:2f:7a:71:f5:0b:23:0e:
88:03:ff:87:a2:d1:74:7b:55:fb:5a:20:9b:c0:b7:
6d:7d:e9:e5:11:c7:af:79:93:fb:df:29:96:a0:5d:
55:35:a2:2c:16:28:91:2c:db:c4:92:bd:ea:6f:01:
88:e8:52:b3:64:3d:89:09:12:16:0c:2c:6d:5b:5e:
06:68:ea:28:0a:26:11:ef:64:36:19:a9:ce:68:5e:
08:00:75:ef:98:a8:4f:3f:be:47:23:cd:40:1e:ce:
e2:6d:d3:f1:48:44:66:bf:86:63:4c:7a:76:d1:12:
7f:23:65:51:0f:14:25:d5:f1:e9:0c:2c:6d:14:05:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:5A:97:ED:69:47:FA:68:99:2A:65:8D:A9:90:51:D1:3B:84:75
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:300::/44
Signature Algorithm: sha256WithRSAEncryption
6d:79:c3:2f:41:10:f1:e0:d5:05:d9:bb:71:98:8a:1a:42:ed:
2c:72:51:25:ce:fa:c0:03:04:f0:b0:87:59:80:ae:60:84:1a:
f2:dc:e6:17:4d:83:9a:73:8e:c1:2e:fc:e7:02:39:93:cd:c7:
33:43:82:34:fd:22:9e:1c:c4:13:d3:47:2b:0a:07:39:a9:ad:
d3:f0:20:74:b9:1f:ae:f8:ae:54:1a:9d:5e:68:3a:e5:1c:e0:
42:37:a2:c1:0f:9e:58:e2:5d:a5:c1:6b:56:12:41:e1:dd:2f:
6f:32:a0:7a:30:b1:c7:46:eb:03:99:a5:3b:3d:41:b6:ce:6a:
6d:39:ff:46:ad:88:28:8c:07:40:db:c1:ca:a9:96:48:8b:a7:
64:82:45:8d:87:9b:a5:78:22:10:78:7f:d7:47:bf:7f:5a:af:
63:2e:fe:3c:e9:cb:bd:32:18:bb:16:7f:04:21:80:04:ef:1b:
79:8a:33:28:bf:79:5c:b5:f7:36:ee:ce:3d:6c:5b:38:47:3f:
c4:12:47:73:96:f1:36:eb:11:4a:e2:6c:dc:8f:be:56:ba:69:
cd:55:2f:4a:31:d2:41:9f:af:67:be:0e:40:4e:15:2d:55:e7:
fc:11:98:f3:af:8b:3f:7b:a3:39:70:8a:dd:37:c6:cf:ea:e5:
af:68:40:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:52 2025 by rpki-client