Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/29c4a1ba-28eb-4346-8889-a97d5186a1ff.roa
File: 29c4a1ba-28eb-4346-8889-a97d5186a1ff.roa (raw, json)
Hash identifier: RHfDIxx3oj9S2IXfI4CJeJroOrLktuMUw+yGUrx3MTc=
Subject key identifier: BF:BA:CB:C3:BF:33:0A:E7:6D:1B:4C:57:85:83:8B:B6:5B:64:33:F5
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 16D95125596314C036FA6F6E9AB4C75D50B746D6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/29c4a1ba-28eb-4346-8889-a97d5186a1ff.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5523::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:51:25:59:63:14:c0:36:fa:6f:6e:9a:b4:c7:5d:50:b7:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=68b67b0121e703de449e49b9886486bae4062a02376e7cd703ad30ebf56393d9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:63:9f:d4:34:ab:ae:b7:3f:d9:6f:07:6f:
75:8a:5f:1f:f9:e3:97:65:ea:a8:29:cd:55:94:a7:
95:d6:0b:e4:b0:8c:d7:48:cb:d6:7e:0e:03:66:02:
05:34:fe:23:e0:95:42:ac:d9:72:e3:f9:59:79:22:
48:4f:51:a7:ae:bc:02:9c:ee:b0:05:7a:31:08:ae:
8c:ec:46:76:b9:16:34:7e:84:20:1f:83:26:9f:de:
f1:94:0c:af:e2:10:34:25:d4:f1:d2:b0:b4:52:83:
33:89:32:f7:98:ba:8a:62:a5:b2:56:81:1d:89:72:
20:56:08:d8:41:cb:77:b3:ff:ef:7b:56:55:e7:fb:
94:7a:c0:84:6f:7b:23:1c:a1:3e:63:49:0e:28:74:
8e:e2:06:cb:16:6d:2f:c5:42:a0:38:97:ec:d4:f2:
83:37:b4:f2:e6:04:9e:6b:85:df:94:d8:bd:1d:50:
d0:a1:63:46:f1:d1:b0:9f:2a:f8:e1:78:53:62:58:
34:c3:58:ea:3c:47:7d:ce:cf:6b:5f:2b:61:7e:14:
6d:d6:a2:2e:6f:b9:4c:90:9f:5b:32:67:fb:50:75:
fc:77:aa:60:8e:cc:66:a0:29:01:5e:27:33:1f:cb:
b7:99:ea:9b:d0:42:ff:bf:0e:3a:67:c2:69:df:90:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:CB:C3:BF:33:0A:E7:6D:1B:4C:57:85:83:8B:B6:5B:64:33:F5
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/29c4a1ba-28eb-4346-8889-a97d5186a1ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5523::/48
Signature Algorithm: sha256WithRSAEncryption
17:4c:62:1f:79:d7:d6:44:35:64:24:f4:9b:32:ae:85:ae:2b:
b0:b9:48:7b:b8:60:e2:4c:b8:02:f5:99:42:aa:af:19:ce:a5:
a8:17:9c:97:40:d9:a3:15:da:91:4f:61:f3:88:e1:b6:18:00:
6b:61:4e:7f:86:0c:95:02:34:12:1b:92:7b:19:e4:f2:41:d0:
27:e3:10:13:67:0a:0a:86:71:76:80:cf:1d:06:35:82:f8:ae:
41:7f:62:eb:b0:a7:37:7b:13:fe:47:de:43:90:4e:23:10:53:
86:98:8f:40:a9:87:65:d4:1e:31:99:76:bd:cf:ed:a1:d0:0a:
5e:36:7e:c0:3c:2c:38:df:40:5d:ba:0e:65:5d:0a:b1:f3:ef:
80:b4:5b:8f:69:0f:d8:7a:03:fc:82:b1:ec:24:fa:c6:a8:95:
1c:d9:46:3a:b2:d3:40:a8:af:a6:77:66:31:36:8a:48:31:7b:
e3:2a:4a:c5:9f:4b:de:b2:a5:5b:7e:9f:b9:e2:2d:59:3c:f8:
8a:fb:df:8e:b0:28:0d:f5:1d:51:c9:12:8c:9f:df:d7:4c:7b:
25:38:6a:f7:e7:04:3d:89:3e:cc:91:17:45:9c:52:27:90:df:
d3:2e:e5:9a:c5:48:eb:dd:2c:27:18:7b:34:7c:3e:0c:26:be:
bc:34:a1:90
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFtlRJVljFMA2+m9umrTHXVC3RtYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OGI2N2IwMTIxZTcwM2RlNDQ5ZTQ5Yjk4ODY0ODZiYWU0
MDYyYTAyMzc2ZTdjZDcwM2FkMzBlYmY1NjM5M2Q5MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1/GOf1DSrrrc/2W8Hb3WKXx/545dl6qgpzVWUp5XWC+Sw
jNdIy9Z+DgNmAgU0/iPglUKs2XLj+Vl5IkhPUaeuvAKc7rAFejEIrozsRna5FjR+
hCAfgyaf3vGUDK/iEDQl1PHSsLRSgzOJMveYuopipbJWgR2JciBWCNhBy3ez/+97
VlXn+5R6wIRveyMcoT5jSQ4odI7iBssWbS/FQqA4l+zU8oM3tPLmBJ5rhd+U2L0d
UNChY0bx0bCfKvjheFNiWDTDWOo8R33Oz2tfK2F+FG3Woi5vuUyQn1syZ/tQdfx3
qmCOzGagKQFeJzMfy7eZ6pvQQv+/DjpnwmnfkH5NAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUv7rLw78zCudtG0xXhYOLtltkM/UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzI5YzRhMWJhLTI4ZWItNDM0Ni04ODg5LWE5N2Q1MTg2YTFmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVSMwDQYJKoZIhvcNAQELBQADggEBABdMYh9519ZENWQk9JsyroWu
K7C5SHu4YOJMuAL1mUKqrxnOpagXnJdA2aMV2pFPYfOI4bYYAGthTn+GDJUCNBIb
knsZ5PJB0CfjEBNnCgqGcXaAzx0GNYL4rkF/Yuuwpzd7E/5H3kOQTiMQU4aYj0Cp
h2XUHjGZdr3P7aHQCl42fsA8LDjfQF26DmVdCrHz74C0W49pD9h6A/yCsewk+sao
lRzZRjqy00Cor6Z3ZjE2ikgxe+MqSsWfS96ypVt+n7niLVk8+Ir7346wKA31HVHJ
Eoyf39dMeyU4avfnBD2JPsyRF0WcUieQ39Mu5ZrFSOvdLCcYezR8Pgwmvrw0oZA=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net