Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/03e7e0ef-e55a-41d2-8c0e-b8d86e31dd0d.roa
File: 03e7e0ef-e55a-41d2-8c0e-b8d86e31dd0d.roa (raw, json)
Hash identifier: nRkjFL09/tatrjJjSbPSFfgxV7VX0D3YeIXue9f97x4=
Subject key identifier: 5C:1B:9F:ED:9A:EE:31:9A:D3:62:E5:32:6E:02:C7:DF:3F:28:08:33
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 3C359835BEDBE544E3156C2D7C77998AA6F44F5A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/03e7e0ef-e55a-41d2-8c0e-b8d86e31dd0d.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5522::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:35:98:35:be:db:e5:44:e3:15:6c:2d:7c:77:99:8a:a6:f4:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=9be7b0e206c5731ec0d369963f296b03006c71a5276515d9bc796cac89fb9a6d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:de:8b:bb:d3:11:b2:b5:ad:21:df:cc:7c:
9f:ce:93:ca:ee:64:1d:1d:ee:af:ca:48:e4:ed:2e:
b7:a5:cd:4f:44:d4:60:e6:78:6e:f7:56:a1:f1:81:
a8:3b:a3:1e:70:0c:75:f7:48:5c:8e:2f:be:b8:a2:
6e:c4:45:5a:9f:bd:22:d6:1a:a2:7a:46:a0:d0:c5:
61:81:48:f0:b9:d6:df:02:e9:56:1e:fa:26:c0:c6:
bc:48:e0:44:55:9a:9c:2b:4d:77:27:73:5d:52:42:
f2:02:61:72:89:45:20:95:06:61:f2:aa:20:35:14:
fd:5f:4c:a1:3a:07:ab:56:9b:7d:36:aa:d5:f3:8d:
eb:73:80:37:4f:ac:c3:9a:26:b7:f5:57:f8:2e:ee:
24:c5:03:9a:e8:dc:c7:50:72:1e:b7:d0:fd:43:1a:
49:70:30:e8:2a:41:09:0e:ed:df:3f:b2:1e:22:5a:
97:ec:52:f4:3d:09:9a:47:77:4c:8a:28:39:b6:37:
9e:0a:27:0d:93:44:76:db:ae:f1:fe:56:4d:2f:f5:
ce:e8:6c:1a:cc:ae:68:38:98:8f:d0:44:32:72:aa:
48:50:15:9c:ba:93:e2:b5:43:98:26:65:5a:54:1f:
53:25:cf:9b:ba:9b:af:22:00:33:ec:92:7c:3b:ff:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:9F:ED:9A:EE:31:9A:D3:62:E5:32:6E:02:C7:DF:3F:28:08:33
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/03e7e0ef-e55a-41d2-8c0e-b8d86e31dd0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5522::/48
Signature Algorithm: sha256WithRSAEncryption
2e:30:1e:df:1a:6b:0f:9f:18:55:06:d2:30:1d:0e:b1:e8:5c:
d2:be:6f:41:8a:3b:0c:ad:d9:f9:e7:95:30:c6:c1:3c:8a:ff:
0d:83:02:fb:c3:e4:83:83:6f:2b:99:71:a1:8f:7c:17:ff:04:
6a:6d:36:c2:57:f5:24:33:e4:b9:06:9d:17:f8:39:9e:57:df:
ec:5b:c7:78:7d:06:80:33:58:13:84:cd:47:a0:71:ab:4f:48:
f4:39:a4:29:67:76:61:a6:97:a5:12:4a:b7:0f:fa:62:3e:2c:
c9:3f:78:b2:67:35:0c:17:c4:c5:83:da:63:bd:fa:88:71:82:
ca:d3:d6:79:43:6f:ed:0e:c8:aa:b4:43:1f:c9:b2:9b:f2:72:
1a:47:c6:69:3d:f9:e8:4c:fc:42:d6:53:aa:e6:75:04:cb:e4:
f0:f0:37:55:75:29:78:e3:38:85:49:fd:ff:d9:6f:99:56:f6:
25:b8:52:b9:86:bc:d1:bd:29:aa:6f:6c:df:78:25:95:6d:98:
99:39:29:0c:e5:a4:89:9b:62:e8:77:32:6e:77:b4:85:1f:28:
e8:a9:70:09:fa:36:7b:28:60:d7:a9:6d:b0:cd:19:32:1e:74:
a9:53:5a:70:7c:0c:ca:03:cc:aa:df:5d:42:e3:a3:87:28:81:
71:ec:ee:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net