Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
File: e44f32b3-ff36-487e-b814-9b622650bde3.roa (raw, json)
Hash identifier: bk7ufRvbrywAzNuNq58KKvT8gjpP81dqO19EH0rNkts=
Subject key identifier: 4F:F8:A1:40:57:90:49:9A:60:9C:B3:F7:CD:E0:33:25:73:2A:4D:C8
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 638D451AEFC074137BFE017752E916302A4C181E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
Signing time: Wed 19 Mar 2025 16:36:59 +0000
ROA not before: Wed 19 Mar 2025 16:36:59 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:1100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8d:45:1a:ef:c0:74:13:7b:fe:01:77:52:e9:16:30:2a:4c:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Mar 19 16:36:59 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:20:35:54:39:b0:0a:b1:50:67:d7:6f:ca:
93:d0:44:28:0d:ce:59:09:25:e1:77:8e:7f:7c:77:
56:76:76:ff:67:2e:ac:99:9d:e6:52:89:fc:45:bf:
3b:ca:cb:80:7a:2e:61:fc:69:b1:d3:ce:8b:42:b1:
ff:07:84:6b:0a:b5:00:ae:79:d6:15:0c:5e:f5:c6:
91:51:3a:4b:01:e3:e8:d7:a3:c6:34:94:7d:0e:39:
1f:54:6e:6c:e9:89:59:5d:94:ea:e1:8f:62:95:c0:
14:d0:62:d0:01:7f:65:be:ab:96:10:1b:69:6f:6b:
90:d2:97:76:97:20:61:3c:b1:9a:37:2b:e9:a2:78:
ad:89:bf:58:68:21:f5:c3:69:e3:0a:3c:8f:92:fd:
03:dd:3b:f3:bc:5a:d2:f2:f4:2a:01:28:ce:5a:9b:
9e:54:e1:a7:8c:48:ff:12:83:ea:6f:73:49:96:89:
88:4a:d2:99:a6:46:6a:c0:59:6d:93:56:b8:4d:40:
f1:20:ce:9d:35:4a:e7:9f:30:a5:69:58:9c:2f:f1:
f3:57:bc:f5:e2:1d:07:88:05:96:e1:87:82:c0:c5:
8a:0b:d4:58:08:ed:af:9c:6c:1a:c6:d9:68:2b:91:
db:35:14:fb:fd:49:73:ef:25:86:60:d7:02:a2:47:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:A1:40:57:90:49:9A:60:9C:B3:F7:CD:E0:33:25:73:2A:4D:C8
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:1100::/40
Signature Algorithm: sha256WithRSAEncryption
0e:7b:ae:be:87:45:b2:c3:83:59:14:22:a4:a3:b5:cd:ba:6e:
a1:06:c0:b1:03:42:0a:da:8c:82:ca:39:17:f1:16:51:d1:60:
ee:9b:66:25:eb:08:c1:dd:f5:31:65:0f:a6:01:65:1d:03:4f:
9b:7d:d8:0d:7b:d2:0b:49:ed:80:0f:e6:53:3a:42:df:6c:bd:
f3:43:71:7f:9d:33:82:7e:68:a1:06:11:05:6b:c3:60:60:de:
41:43:a2:33:19:fa:47:3f:39:78:db:67:aa:82:73:17:f7:e8:
03:aa:5d:22:10:d5:b5:4a:05:cf:a3:ed:38:fd:56:23:7e:36:
05:70:b7:63:e2:76:7c:3c:be:4b:63:3e:7d:0f:e1:57:10:fc:
28:44:39:6c:93:b7:29:9e:32:44:c0:84:a7:25:60:c1:27:b1:
27:10:82:82:ba:ef:17:5c:4b:32:3b:85:55:7f:f2:0a:c0:76:
bd:ab:55:a8:f4:50:34:40:ee:e5:93:b5:de:27:36:89:b9:77:
aa:01:1e:b6:5f:a6:e9:bd:7e:b4:fd:fb:52:e7:87:fd:30:09:
8b:8b:0f:f5:e9:98:d3:2d:9b:ba:61:02:59:1f:1a:a4:7e:af:
95:6f:f7:ec:fa:9f:25:70:65:07:cf:47:33:f9:ad:95:da:6a:
0d:6c:12:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:52 2025 by rpki-client