Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
File: b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa (raw, json)
Hash identifier: 55zMcwmuAymXVdpbtOGkcwaxz1XwrvyqktxORa9SRQ0=
Subject key identifier: 8B:1F:DC:BF:3B:7D:2F:D1:EF:46:F7:CB:A9:50:6F:7C:2A:FF:CE:86
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 58D0DC8FDE8F3876ABE2602868B71E2310BF5B81
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
Signing time: Fri 07 Mar 2025 00:50:58 +0000
ROA not before: Fri 07 Mar 2025 00:50:58 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:385::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d0:dc:8f:de:8f:38:76:ab:e2:60:28:68:b7:1e:23:10:bf:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 7 00:50:58 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:d1:1b:61:52:4e:dc:36:1d:b5:f8:f6:68:
6f:a8:a5:6e:ed:9d:e3:c3:ba:f2:da:e1:02:9a:b2:
80:c1:3d:f1:af:eb:2f:ec:54:7f:30:c7:db:29:0c:
fa:09:f5:34:a3:b4:c2:f0:60:fc:6f:7b:b8:22:43:
82:66:f8:a9:69:0b:e9:c2:69:1b:08:81:d2:31:1a:
e1:23:72:08:f4:8e:20:8c:9e:22:25:8f:76:70:46:
73:9b:06:47:10:1e:10:e4:07:80:a2:b0:a1:57:5c:
ff:24:06:17:3a:39:68:6b:14:3d:aa:a0:ae:32:5e:
29:d9:91:41:5c:a5:03:57:4d:50:4c:23:63:a1:d4:
3d:50:0f:2e:1d:95:1e:1c:99:ef:a9:ec:d8:96:f6:
4d:81:e1:ab:d7:8f:bb:c0:1e:71:2d:9a:16:4a:d1:
39:16:97:1d:bb:6f:c9:09:e8:8d:f9:0b:92:7f:4e:
2a:ff:0f:b9:49:a6:68:06:f7:c8:80:a9:f3:52:43:
8b:55:97:f4:58:9b:28:2d:73:09:75:ba:68:e9:b2:
b7:3d:88:79:5b:56:85:de:c5:24:0a:24:b9:0c:ae:
72:c5:a3:f4:2a:d1:2a:2c:30:fd:cf:d5:40:27:37:
dc:87:48:0a:45:e9:1e:0b:0d:de:5a:49:b3:f0:71:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:DC:BF:3B:7D:2F:D1:EF:46:F7:CB:A9:50:6F:7C:2A:FF:CE:86
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:385::/48
Signature Algorithm: sha256WithRSAEncryption
12:c9:18:34:2c:1f:59:ff:1e:93:7e:0f:ed:93:38:3b:a3:03:
95:ac:0f:da:b2:63:1d:7e:80:03:d5:d1:30:c9:b0:95:85:a4:
ed:65:06:db:97:8d:b2:4f:f6:8c:74:62:67:ba:63:13:0d:fd:
04:b9:6e:80:62:db:c6:d2:ad:fd:a2:53:08:62:fd:54:fc:50:
60:51:23:6d:b9:f4:38:71:5a:29:36:c4:69:4e:53:5f:80:fe:
61:f2:de:2f:55:63:0e:ff:3e:5a:87:b2:c8:b2:16:d4:52:21:
c4:77:39:4c:e3:f2:47:5f:72:a3:48:31:bb:14:6b:c7:b5:c6:
4f:21:16:43:b5:db:51:9b:32:69:e6:4f:f2:47:85:db:e5:f2:
19:5f:61:cd:08:80:4e:93:12:e9:bb:53:de:db:3a:88:e8:39:
11:40:fe:4c:9b:cd:d4:77:33:69:60:4c:8b:ae:a6:bd:95:40:
8b:8b:40:ff:b4:7e:28:c8:f7:20:6d:8e:57:7e:ff:29:01:a1:
d7:e9:20:9f:56:19:61:76:74:35:bf:a3:be:7c:32:fd:45:2e:
eb:92:e9:56:34:97:b0:30:4b:30:7d:f8:be:8f:f0:74:8b:ae:
6a:ca:ec:b1:1c:7e:11:b6:7a:b7:f9:a3:c7:f0:c5:cf:2b:04:
b1:6c:cb:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:01 2025 by rpki-client