
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa
File: 35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa (raw, json)
Hash identifier: hc6BOpkeVdJDYGWehYvE/fkIHROxmR3ZATydbmY3ePA=
Subject key identifier: AF:8E:CC:12:1D:28:F9:EE:FA:9B:71:2F:66:6F:55:80:1C:F0:4A:CF
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 226ABAE4813519C36F43B12E989CEDBF69300CB5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:398::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:6a:ba:e4:81:35:19:c3:6f:43:b1:2e:98:9c:ed:bf:69:30:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:c7:ee:6c:56:4c:82:f3:16:a5:0c:c4:b8:
00:21:e2:ad:07:9a:9c:a8:ed:8d:51:e9:61:c2:b4:
3a:02:df:eb:ef:9c:eb:0e:61:4b:bf:df:1b:31:a0:
22:67:51:ab:9f:bb:10:da:f4:61:5e:86:12:e2:47:
7e:d9:c3:fd:13:f3:3e:69:43:88:17:f3:25:9b:4d:
52:86:d8:75:36:f2:10:3d:ed:5a:66:f2:53:4f:4d:
f9:8d:c4:c0:e9:2d:68:ea:2b:f1:a3:0a:7b:03:ae:
00:db:60:f9:69:38:84:bb:3e:89:45:db:4c:80:d9:
87:d3:8e:8b:3d:d4:36:92:dd:ed:0a:6f:6b:ba:60:
d5:c1:30:e3:24:f0:0f:65:41:6f:4f:b6:92:7e:9c:
21:44:58:91:e1:10:d3:84:89:92:28:82:55:1e:ea:
97:b3:78:4b:db:44:47:25:16:91:7a:07:ff:79:53:
8e:cf:2f:3b:c4:28:0c:1a:51:ec:41:88:d2:e8:a9:
0e:dd:59:83:9c:b9:d7:b8:12:5e:88:3c:d3:f3:cd:
91:d8:49:b0:f8:94:38:25:39:f1:85:47:4a:aa:1c:
80:33:78:3f:ef:5e:73:08:2c:aa:80:53:9f:fe:b6:
e1:5a:69:0b:59:73:4b:26:2c:16:d2:e8:8e:05:61:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:CC:12:1D:28:F9:EE:FA:9B:71:2F:66:6F:55:80:1C:F0:4A:CF
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:398::/48
Signature Algorithm: sha256WithRSAEncryption
77:ee:30:4a:c5:4d:e6:1b:e3:26:7c:6d:25:11:97:f0:ab:52:
27:cc:93:04:cc:3d:da:27:6f:31:d5:c6:19:35:d9:13:c8:04:
2f:95:fb:11:d3:89:ac:88:93:9d:c0:9c:e7:bf:ea:1c:bf:6a:
fb:71:22:45:19:d6:9d:52:12:8d:3e:38:dc:c7:34:0d:64:6d:
41:7e:22:3a:b1:ba:36:74:f2:e9:31:3f:21:6e:5a:b6:df:52:
74:ed:6e:38:bb:0f:63:c1:ab:f9:de:38:45:6b:44:df:c5:cd:
2e:32:6e:d9:79:a3:64:ae:98:cd:83:55:e3:07:f7:b5:d7:d8:
73:b3:a0:9f:02:a1:d3:10:69:81:45:b3:7d:84:fe:ae:46:02:
14:71:d0:ed:ee:6d:8f:0b:e1:50:e1:0e:97:ac:83:46:02:dd:
00:c3:70:3b:b3:40:85:6f:c1:f9:c6:d7:16:4d:b3:11:f7:91:
e3:08:60:eb:0c:95:95:59:38:ad:fc:dc:5b:31:2b:70:e3:e6:
80:cc:08:cd:4f:8e:dd:33:58:96:d3:bd:d4:ad:0e:0b:ec:03:
1e:45:55:90:31:cf:4f:8d:b9:32:8e:c5:75:fa:ac:42:26:95:
13:0c:36:07:a6:48:6e:de:62:54:a8:d8:b5:5b:57:c2:af:d8:
7c:12:6c:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 10 16:42:27 2025 by rpki-client