Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/31db1a51-f3b6-4aa4-8931-21c370d2c069.roa
File: 31db1a51-f3b6-4aa4-8931-21c370d2c069.roa (raw, json)
Hash identifier: GQtqobhLymGhUH08ZjECnT6OC+SlnZF8sYLRSlkfVxo=
Subject key identifier: D8:90:DA:4D:A8:D7:94:56:01:5A:92:36:E5:5A:43:A7:9D:56:8A:8D
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4A63EF1F111CAA042544CA6C60F7EF98804C9CC1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/31db1a51-f3b6-4aa4-8931-21c370d2c069.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:63:ef:1f:11:1c:aa:04:25:44:ca:6c:60:f7:ef:98:80:4c:9c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=594430c6cca05e3e59a4fc50191384203b8e3004720a1ea71a6b2d7c5ae50245, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:28:20:94:aa:7c:e2:15:61:da:7e:ba:e6:
10:6c:bd:0b:d2:c0:41:b9:57:55:bd:53:9c:8a:77:
0d:0e:2a:de:0f:d8:45:58:53:8e:c9:06:14:7e:c3:
a6:30:c9:3b:1a:e7:b9:ec:b3:19:b3:9a:33:9f:9c:
bc:b8:ed:c5:ea:7d:94:1b:15:1c:dc:59:24:46:45:
e3:f4:58:24:2a:cb:5d:63:6b:4e:f1:ca:7f:40:8e:
e8:de:09:66:5b:e7:2f:20:54:1d:d7:af:e4:50:93:
1d:14:3f:ed:a7:f7:a9:9d:85:cb:14:6a:6a:86:da:
ab:8e:42:e7:55:8b:28:08:e4:5d:ea:80:a9:a8:fa:
9c:34:19:72:b2:0d:73:3a:1f:fd:ca:61:4d:39:d6:
c7:b2:08:9e:90:b0:b6:23:2f:60:c5:36:fe:35:83:
ba:86:5a:4b:69:08:e7:05:68:47:f5:ed:a9:29:4a:
b0:51:54:29:09:0c:0e:df:78:c8:f5:f0:0f:88:8d:
3e:cc:33:3f:45:a9:f7:01:e3:90:e8:1d:d0:6f:81:
0b:93:bd:dd:f6:fe:5a:13:19:33:47:02:6e:5d:bd:
e9:ed:36:ee:4f:44:a3:b3:bc:54:8c:25:55:e5:70:
0d:13:86:27:cb:56:91:08:56:0c:ae:c2:5c:6b:83:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:DA:4D:A8:D7:94:56:01:5A:92:36:E5:5A:43:A7:9D:56:8A:8D
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/31db1a51-f3b6-4aa4-8931-21c370d2c069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e900::/40
Signature Algorithm: sha256WithRSAEncryption
65:f7:3b:23:4a:9f:8c:fe:a7:0f:79:4c:4f:d5:86:06:8b:57:
07:59:a8:0f:7a:f5:eb:ee:af:e1:63:ac:73:65:f3:55:89:2b:
26:8e:54:63:0a:28:9d:ec:26:5c:33:92:65:1f:fb:57:54:eb:
17:23:6b:4d:44:12:ba:e6:5d:fb:71:4e:49:74:9a:83:4d:52:
1b:7e:b5:64:b5:c8:e1:3f:61:69:45:79:06:bf:6f:f4:a3:be:
06:f0:4a:d9:41:80:fb:89:9c:6e:21:5e:ba:5a:24:25:5b:26:
c3:ac:89:e4:63:7f:a0:9a:78:dd:03:5b:76:85:37:bf:03:03:
e0:45:b2:59:0c:15:f6:9c:6c:81:18:18:c6:1a:93:21:97:73:
68:78:68:8d:93:51:1f:93:ea:03:aa:c6:16:d4:d2:90:6f:59:
a7:d2:31:fa:cb:39:29:11:07:58:ad:7d:86:89:94:76:e5:f0:
a2:0f:a8:fe:dc:0a:26:dd:3d:38:60:12:29:00:b7:9d:5a:f4:
55:18:53:9a:c9:1f:22:9a:97:84:98:ad:e1:14:57:41:23:dc:
a1:ba:ab:0d:27:18:f0:b4:41:3a:1e:b6:45:3c:00:2a:8a:57:
fd:03:7e:eb:73:82:d0:77:0d:37:cb:f5:f8:40:eb:80:ed:3e:
5d:cc:6c:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net