Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9a57e8ce-af4c-4714-890a-a5c12113375e.roa
File: 9a57e8ce-af4c-4714-890a-a5c12113375e.roa (raw, json)
Hash identifier: oYiJXuWm79VO6lO+DkyV/vmt7KMp5f2DvC3FyfqBIvc=
Subject key identifier: 05:EE:B3:C3:95:F6:BF:A2:AE:34:96:74:5D:9D:F8:1E:9E:17:2E:3B
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 26583B748A8703B453D5DBC1A42235E43D5BA367
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9a57e8ce-af4c-4714-890a-a5c12113375e.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2620:107:3006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:58:3b:74:8a:87:03:b4:53:d5:db:c1:a4:22:35:e4:3d:5b:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:4c:4f:f9:13:db:f4:17:ee:ee:94:c6:ad:
43:d6:b8:74:17:d4:42:39:e8:98:20:12:b4:0e:11:
3b:b9:b6:8d:b6:86:c1:68:66:ae:43:3e:9f:32:f5:
bf:1e:e5:77:ed:d3:33:4d:de:f2:05:d9:49:e9:70:
4a:6e:85:8b:a5:d6:98:43:5d:9a:ee:ad:c0:f5:cb:
96:ab:55:79:48:ab:8b:54:6a:40:68:40:01:8e:f7:
f1:c3:08:b6:f8:67:9c:dc:88:c4:b8:2f:74:ff:32:
bc:ca:8a:81:44:62:a7:e2:7b:fd:5c:e9:33:0d:53:
12:65:46:78:de:52:2c:31:69:8d:86:be:b3:af:ef:
bf:b3:7b:5c:7a:99:c0:76:6e:71:5b:d0:f4:13:21:
3a:5c:5a:ea:2a:8b:f7:cd:3f:ca:7e:88:24:be:9c:
90:b5:b5:17:44:c6:45:0f:b5:c9:17:9b:7a:ee:8a:
3a:71:47:8a:c9:b1:d1:df:44:c7:04:b0:26:3c:b3:
d7:35:c2:c9:af:a3:a7:3c:bd:16:74:a4:68:c8:01:
fd:0f:8e:03:8f:ce:43:64:42:91:ed:05:ff:4a:02:
58:bc:98:98:92:b3:52:05:2e:40:48:dc:46:c8:e1:
c9:be:42:83:c1:57:45:f9:31:c9:bb:0a:88:85:55:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:B3:C3:95:F6:BF:A2:AE:34:96:74:5D:9D:F8:1E:9E:17:2E:3B
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9a57e8ce-af4c-4714-890a-a5c12113375e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:107:3006::/48
Signature Algorithm: sha256WithRSAEncryption
61:c4:cf:be:31:66:21:ee:60:36:6f:fa:59:12:15:46:e9:4f:
65:92:f7:54:0b:16:fb:2e:3b:22:d6:c2:e5:c0:0e:53:bc:2b:
a0:06:94:62:f1:04:e3:aa:64:f3:7d:a7:e2:9d:ce:b5:81:9d:
64:84:8e:d7:ad:ac:03:7a:7b:73:ad:e8:f5:10:d2:21:2c:60:
42:de:4d:59:b8:1c:2c:8e:aa:77:54:fe:85:61:95:2e:d5:0a:
1f:ff:23:1a:91:c7:16:0f:65:3c:49:23:c2:ef:50:bb:76:f7:
71:88:d0:c7:fc:5e:88:a5:8d:e5:c3:6a:cb:a7:43:9f:77:6e:
46:98:c4:b0:77:d9:d6:ae:c0:c8:74:7a:5f:7d:5c:ec:8a:3a:
ad:ee:77:83:05:bc:4d:94:7e:86:69:ee:bb:7c:f9:88:fd:88:
00:11:d9:cc:52:04:26:52:8a:4d:ba:19:c4:ed:16:55:0f:10:
45:3b:90:86:f9:8c:e3:6b:31:0f:8c:9e:60:12:62:ee:12:2a:
94:d6:a9:5e:50:2e:f5:65:6f:50:ff:80:bc:27:d3:d1:44:49:
12:a9:e0:4a:2e:7f:a7:4a:e3:95:b0:e7:eb:8b:f6:bc:f1:51:
a8:81:a8:7a:7b:99:14:24:f6:85:ea:9b:f3:0d:61:82:23:44:
4c:16:cb:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:25 2025 by rpki-client