Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fd601e6-fd05-40c3-987d-d04d1d36ebd1.roa
File: 0fd601e6-fd05-40c3-987d-d04d1d36ebd1.roa (raw, json)
Hash identifier: xNZwzalmtGQz3ZuyzvxTULc6GnOl/PXTiARN5dlvFEY=
Subject key identifier: 1A:F2:D3:57:1D:71:59:BC:F9:8E:E4:C9:CC:D1:87:82:FF:32:38:FD
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 09031732AC6E88291586900CCB87B0BBE943E989
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fd601e6-fd05-40c3-987d-d04d1d36ebd1.roa
Signing time: Wed 04 Dec 2024 00:00:00 +0000
ROA not before: Wed 04 Dec 2024 00:00:00 +0000
ROA not after: Wed 08 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f00e:400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:03:17:32:ac:6e:88:29:15:86:90:0c:cb:87:b0:bb:e9:43:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 4 00:00:00 2024 GMT
Not After : Jan 8 23:59:59 2025 GMT
Subject: serialNumber=0d83b0963d670839f0f8bf072d204d059af0dce302ec0586bb70d78a134d8f38, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:a5:1f:5d:b8:14:f5:1b:75:d9:98:26:86:
4a:d7:b3:97:0e:fc:4f:08:45:a2:c2:d3:6d:4b:7c:
2a:ca:eb:20:14:7e:57:0a:f5:fa:1c:cd:91:5a:70:
6f:4f:cb:fb:d8:17:35:2f:5a:cf:f5:27:7a:a1:b2:
f0:81:69:bd:64:b4:81:55:9e:69:64:c5:6b:40:5b:
79:35:78:4f:c9:19:ab:44:61:51:bd:74:5e:43:7f:
27:ff:09:c6:79:ca:ff:79:a6:cb:5d:bf:6b:31:03:
13:31:39:96:d9:aa:ff:fa:50:27:a8:bf:93:64:cb:
e8:ec:5c:f7:42:27:49:33:4d:7f:a1:ab:81:07:82:
8e:fb:07:c9:63:f5:00:a9:20:70:d5:c7:0f:58:bd:
36:81:94:61:bc:fe:90:03:c8:9f:29:63:7f:13:e7:
e5:6d:6d:03:c2:d2:39:37:86:bf:98:5a:b9:ad:53:
66:25:75:b1:80:f4:69:8b:e4:3d:f5:a0:64:24:6e:
16:01:51:37:d3:c5:e4:fa:2b:e2:de:c2:18:76:f4:
a3:5a:aa:57:48:b8:65:11:62:cc:4f:47:1e:c2:a9:
b4:8b:10:16:bd:c0:fc:df:f7:c9:ae:be:9c:2b:ae:
7c:b7:17:e1:9d:11:7c:30:f8:0c:bc:92:bf:4d:73:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:D3:57:1D:71:59:BC:F9:8E:E4:C9:CC:D1:87:82:FF:32:38:FD
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fd601e6-fd05-40c3-987d-d04d1d36ebd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f00e:400::/40
Signature Algorithm: sha256WithRSAEncryption
50:2a:cb:cc:b2:87:1a:bf:26:2b:80:77:a5:02:d8:47:11:38:
77:36:39:43:c6:25:f6:bc:d3:cd:49:fa:88:06:96:b1:b6:11:
77:51:a1:71:ad:a5:fa:7e:cb:3e:c4:c4:a6:ff:d1:f0:fe:7d:
db:d3:c3:ce:f5:32:ce:fc:32:b7:43:4a:cc:ed:08:ef:12:00:
51:75:ed:8c:fc:c0:60:a5:e9:0b:ce:07:77:51:ba:6c:21:f0:
ca:ac:9c:36:5c:b5:f6:21:0d:58:38:a9:c0:6c:dc:80:52:7f:
fd:82:84:23:8a:46:f1:4b:46:d2:a0:28:bb:bd:57:6a:92:dc:
be:4f:a1:b5:43:0b:b5:f9:00:bc:64:37:7a:90:cc:6b:aa:69:
66:4a:e2:17:7d:ca:c3:06:57:99:37:c5:69:db:ea:f0:c2:73:
0d:86:0f:fa:95:58:58:7d:37:d2:43:0d:3f:07:4d:83:a1:3a:
97:88:2c:10:d3:60:81:93:cd:29:b3:1b:3b:76:b6:c7:0a:f2:
67:a6:c4:71:79:01:e4:3e:d0:18:2e:49:90:3d:2d:76:01:00:
cb:e4:31:66:11:4e:11:10:4e:9f:48:0c:c7:fc:12:3a:e8:a1:
4c:a9:be:57:7c:77:8f:c7:55:68:6c:47:d0:81:af:14:c3:55:
a4:5e:34:97
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUCQMXMqxuiCkVhpAMy4ewu+lD6YkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjA0MDAwMDAwWhcNMjUwMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZDgzYjA5NjNkNjcwODM5ZjBmOGJmMDcyZDIwNGQwNTlh
ZjBkY2UzMDJlYzA1ODZiYjcwZDc4YTEzNGQ4ZjM4MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDC2qUfXbgU9Rt12ZgmhkrXs5cO/E8IRaLC021LfCrK6yAU
flcK9foczZFacG9Py/vYFzUvWs/1J3qhsvCBab1ktIFVnmlkxWtAW3k1eE/JGatE
YVG9dF5Dfyf/CcZ5yv95pstdv2sxAxMxOZbZqv/6UCeov5Nky+jsXPdCJ0kzTX+h
q4EHgo77B8lj9QCpIHDVxw9YvTaBlGG8/pADyJ8pY38T5+VtbQPC0jk3hr+YWrmt
U2YldbGA9GmL5D31oGQkbhYBUTfTxeT6K+Lewhh29KNaqldIuGURYsxPRx7CqbSL
EBa9wPzf98muvpwrrny3F+GdEXww+Ay8kr9Nc3QtAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUGvLTVx1xWbz5juTJzNGHgv8yOP0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzBmZDYwMWU2LWZkMDUtNDBjMy05ODdkLWQwNGQxZDM2ZWJkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPAOBDANBgkqhkiG9w0BAQsFAAOCAQEAUCrLzLKHGr8mK4B3pQLYRxE4
dzY5Q8Yl9rzTzUn6iAaWsbYRd1Ghca2l+n7LPsTEpv/R8P5929PDzvUyzvwyt0NK
zO0I7xIAUXXtjPzAYKXpC84Hd1G6bCHwyqycNly19iENWDipwGzcgFJ//YKEI4pG
8UtG0qAou71XapLcvk+htUMLtfkAvGQ3epDMa6ppZkriF33KwwZXmTfFadvq8MJz
DYYP+pVYWH030kMNPwdNg6E6l4gsENNggZPNKbMbO3a2xwryZ6bEcXkB5D7QGC5J
kD0tdgEAy+QxZhFOERBOn0gMx/wSOuihTKm+V3x3j8dVaGxH0IGvFMNVpF40lw==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net