Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0540ca01-8952-4aed-9627-bff6189a117a.roa
File: 0540ca01-8952-4aed-9627-bff6189a117a.roa (raw, json)
Hash identifier: W3J4YGI/auO0wCIuSsH6QO7peeSg+iSjYxPsfo2W2dA=
Subject key identifier: F3:0B:B3:82:66:67:8B:E3:A5:69:26:97:DF:11:27:49:A1:C3:7E:36
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7765E0D8696CB1F48B71BC3C0C51067A6AFF2065
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0540ca01-8952-4aed-9627-bff6189a117a.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5529::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:65:e0:d8:69:6c:b1:f4:8b:71:bc:3c:0c:51:06:7a:6a:ff:20:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=ae8b9c29743eb51f505770926a87cd8c6dc6f62806d199b9ee513538fd8744bf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:37:2d:3b:16:32:5a:82:2c:66:ba:f3:b0:
e2:60:df:cd:fb:45:dc:a8:1a:79:d3:26:01:ac:8d:
31:19:05:3b:51:71:b3:49:35:22:74:de:8b:7d:1c:
e4:8e:7c:2f:fb:34:3a:f3:8b:9f:13:ad:fc:18:1f:
dd:5b:ac:f0:86:9a:30:47:e9:b1:a9:4f:a8:ce:16:
6e:1f:46:cd:ed:5f:8a:82:e4:65:8b:44:0f:55:1b:
76:1f:0b:b4:f5:d3:f4:63:17:3c:41:79:26:5a:eb:
cd:c8:3f:cd:4f:08:e9:66:6a:53:28:1e:1a:cd:6a:
49:25:41:cb:2c:8e:ff:a6:db:c3:7e:ab:12:ff:61:
84:ed:c1:d8:c3:94:fd:ed:79:77:62:44:81:72:27:
a4:9c:13:55:90:92:f1:06:94:fb:d7:25:4c:5d:bb:
50:82:48:34:2b:cb:11:4a:c3:bd:cb:ac:1e:3a:ea:
2e:d7:18:36:7e:49:98:a5:49:e6:f2:ba:1b:e1:5f:
5e:ba:5b:53:51:c9:71:0f:12:f5:0a:5f:cf:bc:89:
a6:e8:ec:15:61:8b:4a:5b:88:87:95:88:8b:3d:f1:
72:0c:43:49:e8:2d:2a:ba:26:0b:13:f1:88:0e:c5:
8a:cd:32:c8:cd:00:c1:7c:7c:e8:70:99:d5:d4:79:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:B3:82:66:67:8B:E3:A5:69:26:97:DF:11:27:49:A1:C3:7E:36
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0540ca01-8952-4aed-9627-bff6189a117a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5529::/48
Signature Algorithm: sha256WithRSAEncryption
8b:b1:ec:6d:d0:12:41:f9:ec:70:ea:94:32:07:ab:53:d4:47:
80:49:24:06:c0:8b:8b:6c:24:4d:b2:90:87:17:34:40:83:52:
e1:77:92:79:d6:a4:47:90:cc:34:8c:15:f9:16:0b:62:b6:46:
43:88:f4:cd:f3:30:62:3c:db:01:98:57:10:fe:b3:52:c2:30:
c4:99:29:11:80:28:ac:8f:5e:d7:d2:a3:ae:cc:ed:88:ab:ae:
61:52:6c:1f:01:a3:2f:6a:74:8a:13:54:2a:34:42:e2:d3:99:
e0:07:95:cb:aa:b0:b1:31:17:a6:78:1e:18:79:8f:6a:dc:9e:
c0:56:70:6e:f1:69:6e:ef:4c:4a:26:56:bb:c3:51:20:f8:9a:
b2:45:c0:77:2b:73:9b:68:a0:c3:b9:b5:8b:30:a3:b7:8a:81:
d9:f8:45:a3:da:ab:36:86:de:e4:d2:53:c8:34:22:f2:28:e1:
5a:f3:0b:b3:df:b1:4f:45:78:8f:91:4b:e1:58:c7:1b:f9:93:
9d:34:b7:e2:e7:7b:1b:cf:56:b0:2f:ca:ba:79:cf:52:f1:11:
e9:82:1b:5d:79:6d:7c:df:18:af:d3:e7:b6:be:0b:91:47:26:
d8:8b:63:6d:79:af:a0:60:84:0e:28:f7:b7:02:6a:87:70:f0:
08:2d:c2:c7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUd2Xg2GlssfSLcbw8DFEGemr/IGUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZThiOWMyOTc0M2ViNTFmNTA1NzcwOTI2YTg3Y2Q4YzZk
YzZmNjI4MDZkMTk5YjllZTUxMzUzOGZkODc0NGJmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFejctOxYyWoIsZrrzsOJg3837RdyoGnnTJgGsjTEZBTtR
cbNJNSJ03ot9HOSOfC/7NDrzi58TrfwYH91brPCGmjBH6bGpT6jOFm4fRs3tX4qC
5GWLRA9VG3YfC7T10/RjFzxBeSZa683IP81PCOlmalMoHhrNakklQcssjv+m28N+
qxL/YYTtwdjDlP3teXdiRIFyJ6ScE1WQkvEGlPvXJUxdu1CCSDQryxFKw73LrB46
6i7XGDZ+SZilSebyuhvhX166W1NRyXEPEvUKX8+8iabo7BVhi0pbiIeViIs98XIM
Q0noLSq6JgsT8YgOxYrNMsjNAMF8fOhwmdXUeQjbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8wuzgmZni+OlaSaX3xEnSaHDfjYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzA1NDBjYTAxLTg5NTItNGFlZC05NjI3LWJmZjYxODlhMTE3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVSkwDQYJKoZIhvcNAQELBQADggEBAIux7G3QEkH57HDqlDIHq1PU
R4BJJAbAi4tsJE2ykIcXNECDUuF3knnWpEeQzDSMFfkWC2K2RkOI9M3zMGI82wGY
VxD+s1LCMMSZKRGAKKyPXtfSo67M7YirrmFSbB8Boy9qdIoTVCo0QuLTmeAHlcuq
sLExF6Z4Hhh5j2rcnsBWcG7xaW7vTEomVrvDUSD4mrJFwHcrc5tooMO5tYswo7eK
gdn4RaPaqzaG3uTSU8g0IvIo4VrzC7PfsU9FeI+RS+FYxxv5k500t+LnexvPVrAv
yrp5z1LxEemCG115bXzfGK/T57a+C5FHJtiLY215r6BghA4o97cCaodw8Agtwsc=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net