Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/065b233b-96e8-4d1b-95a7-c81f87b4ba9f.roa
File: 065b233b-96e8-4d1b-95a7-c81f87b4ba9f.roa (raw, json)
Hash identifier: DceuQGTaINMmz6b5XzNI0l1A6ZHpQvxT14Ud5YKgjYM=
Subject key identifier: 1F:4D:C9:B8:A7:CF:F0:4D:9F:3F:37:25:4C:00:C6:EA:37:7C:D9:A1
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 0906F89A6E24C21644D88A79388026700264603A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/065b233b-96e8-4d1b-95a7-c81f87b4ba9f.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:1000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:06:f8:9a:6e:24:c2:16:44:d8:8a:79:38:80:26:70:02:64:60:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=c350d1915cfb02c155bde96ab2c380f8a159b882dac9a1c2f427758627947510, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:6e:48:b5:55:49:42:29:c8:51:5a:50:76:
c1:df:ab:6b:6b:53:e0:c2:b7:49:0f:fa:02:1c:87:
43:ca:3a:3e:f5:e3:e6:a2:47:ab:63:84:0d:fe:de:
4f:60:6a:bb:50:16:ff:c5:c4:4d:cb:31:ec:ef:99:
3c:5c:34:79:8b:4b:eb:bd:c9:ff:66:22:94:1d:02:
c8:f3:48:6a:49:4c:6b:50:45:e8:4a:29:9d:58:48:
27:3d:e7:51:79:51:22:ae:41:61:6a:8b:2d:45:21:
b1:f5:40:64:c7:f5:8e:9d:52:37:79:5a:bf:d9:2a:
ab:d9:e7:68:24:fe:35:65:44:a5:9c:98:46:37:22:
59:6f:dd:d8:c8:a8:6a:0a:df:93:3e:fb:e6:d2:5b:
94:8c:71:a6:86:c8:38:6c:6d:5a:fe:5f:10:3e:0a:
86:0e:62:54:62:85:d9:ee:fd:b1:cd:18:a3:f2:bc:
bd:1d:8b:55:cb:c1:b8:96:b9:b8:78:6b:7f:77:38:
a0:22:ea:75:84:19:51:65:bb:8e:99:92:59:0f:cb:
cc:8a:46:f4:39:d9:0d:7c:d9:20:9b:4a:c0:c9:34:
20:8d:1f:c0:5f:d0:fc:96:f5:89:74:48:8d:4d:f7:
6a:e0:92:6f:39:d5:44:2a:3e:52:94:4e:f9:e5:3f:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:C9:B8:A7:CF:F0:4D:9F:3F:37:25:4C:00:C6:EA:37:7C:D9:A1
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/065b233b-96e8-4d1b-95a7-c81f87b4ba9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:1000::/44
Signature Algorithm: sha256WithRSAEncryption
27:70:0d:93:4b:da:7e:58:45:c0:28:bd:4e:be:d2:57:b0:5d:
80:6d:ae:1d:1d:a3:91:88:0f:de:c3:45:4e:5b:77:27:2b:b2:
ff:fc:7b:74:b4:86:9f:da:3c:bc:22:b4:81:a3:5a:7e:ad:63:
ec:8b:63:e1:fc:be:03:ca:67:32:5b:ab:92:e1:4f:d1:0f:98:
8a:af:3c:1e:29:08:02:24:19:f6:bc:dd:3b:be:8a:50:34:17:
7c:73:25:5d:bd:a2:bf:8d:17:64:87:e4:16:1b:54:54:ea:f1:
33:f7:fe:e0:f0:8a:ba:06:12:ce:9d:65:1e:6f:02:ca:65:b4:
64:9a:87:e9:59:bf:b5:16:0d:6c:d3:d0:58:93:71:3d:90:a8:
f0:16:38:3c:9f:36:60:1f:42:89:fa:ae:c3:ac:ca:48:09:88:
57:56:b3:7e:7d:1d:12:7c:94:0b:01:ab:6e:06:d9:ba:4b:93:
0d:f8:d7:66:9f:cb:3b:f8:48:6b:4d:f7:8d:f5:ed:22:de:0c:
2b:9f:b9:3f:db:62:c0:97:81:ce:3b:48:66:cf:07:4d:3f:5d:
26:aa:85:7f:ed:e4:7c:a8:d8:4e:a3:19:98:94:1e:2f:60:5e:
c5:f4:01:d9:32:23:de:18:3e:b3:d7:59:fa:e1:b5:60:9c:5c:
49:46:79:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net