Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dec2071d-e647-4c13-867d-b9d375e271c2.roa
File: dec2071d-e647-4c13-867d-b9d375e271c2.roa (raw, json)
Hash identifier: +MOs9Q6S6dfqjJAVDOvexAa3nIQL+W0RKWPOvIAk+k0=
Subject key identifier: 84:52:52:CC:C2:9B:80:0F:66:FA:03:92:63:A3:21:6C:48:EC:C3:FD
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7F9E976A33483D8961F661C3079EAF7F3E4BB1D0
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dec2071d-e647-4c13-867d-b9d375e271c2.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f3:be00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9e:97:6a:33:48:3d:89:61:f6:61:c3:07:9e:af:7f:3e:4b:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:10:08:66:73:f5:ca:cc:af:5a:06:d3:39:
47:c9:94:ac:ff:81:3d:5e:ff:b4:b9:d0:56:2c:57:
ae:8f:d3:ae:33:32:2f:3d:7c:23:8c:df:09:73:7c:
c7:0c:93:46:7a:f6:bf:ee:fc:71:74:a7:32:55:b2:
38:6d:2d:71:64:b1:dd:b2:ce:14:96:8c:3d:1c:b5:
9a:41:44:05:48:cd:d0:2c:6b:6e:d7:50:3c:47:51:
f4:ec:3d:30:63:a2:b4:ad:a5:f9:88:91:54:2f:c8:
8d:a7:f7:b2:7b:17:06:fc:e3:d9:d1:4c:00:52:1b:
01:de:7f:27:ba:09:03:85:90:73:7e:23:d0:23:82:
0a:b7:4b:e3:e8:e2:5f:a1:42:e7:d4:59:80:93:57:
0b:52:80:6c:83:25:d7:90:b8:84:58:61:85:76:66:
58:f6:00:b3:82:a3:a0:2e:b6:29:b4:44:8d:b3:e4:
51:ed:59:72:ec:0d:97:43:21:d7:0a:0e:be:ea:7a:
2d:db:c0:d2:9c:06:a1:0e:a9:b4:0d:bc:be:8b:30:
36:50:3c:86:bd:50:4c:55:64:15:d9:98:b9:cf:7e:
99:0f:47:58:e8:0f:18:c6:42:a6:07:34:30:fd:68:
cb:91:e5:47:0f:f8:ba:16:8f:07:71:ae:2f:24:97:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:52:CC:C2:9B:80:0F:66:FA:03:92:63:A3:21:6C:48:EC:C3:FD
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dec2071d-e647-4c13-867d-b9d375e271c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f3:be00::/40
Signature Algorithm: sha256WithRSAEncryption
9f:8c:f4:91:fa:c3:6b:6a:44:7c:a4:48:56:ef:f2:bf:9b:82:
79:58:44:3a:02:79:c5:77:fe:cd:ba:a2:a7:69:2e:b5:02:23:
e6:15:e4:aa:eb:4a:f9:0f:1a:d8:6d:77:b7:d7:dd:23:c8:8d:
b5:f1:15:67:e7:19:3b:77:64:e9:70:20:e0:b8:5b:32:b2:33:
f0:f7:30:93:2b:2d:ea:43:67:ce:85:89:4c:d0:2a:a6:d3:5e:
7b:de:81:2a:ef:ed:51:b9:b6:e2:ea:93:7e:9d:3f:e4:48:82:
97:78:ef:83:9a:63:cf:8f:1b:1b:4e:7e:3c:08:a5:0c:ce:d9:
57:9f:a2:50:4f:30:54:fb:f7:9e:f7:6b:93:75:c9:52:02:df:
39:0e:a0:99:1e:ce:af:b6:63:b2:b4:6b:55:c5:de:86:5e:dd:
b8:a1:28:f8:e0:61:22:79:45:d4:12:e2:ec:96:aa:00:82:b4:
88:82:a5:b0:3c:46:3d:50:14:7b:84:59:53:36:97:b4:65:cf:
95:15:bc:a3:e1:b5:ee:88:bb:2d:e3:ca:2e:77:c5:a1:a7:ad:
3d:4b:50:b9:7d:2a:e7:4e:43:7e:d2:9c:d4:4c:90:38:6b:3e:
6f:a9:9f:43:78:71:67:fe:32:43:48:00:e9:26:ed:60:25:83:
db:a5:50:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:35:50 2025 by rpki-client