Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4634d2fa-4169-42c0-a7d7-63b635776dcc.roa
File: 4634d2fa-4169-42c0-a7d7-63b635776dcc.roa (raw, json)
Hash identifier: BuhGBpay1LcMuP6UKC7JpQBXgZN+0QN+egeIE+W+NuI=
Subject key identifier: B2:4C:83:2D:A9:6F:5B:62:51:DA:4F:C2:58:A1:02:9E:75:E2:41:FF
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6BF52F3A0C749906ABBBB95492DE642BA2454861
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4634d2fa-4169-42c0-a7d7-63b635776dcc.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f5:2f:3a:0c:74:99:06:ab:bb:b9:54:92:de:64:2b:a2:45:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=e5e32b27fb7f3b3b503547cb5729c510c0250e6a1748963ce83c394d421e4419, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f9:68:4e:e8:a2:16:8f:58:fd:18:41:8a:b0:
b5:07:21:c5:6b:f4:01:a8:a0:86:e7:67:68:1d:c9:
71:60:03:91:e2:e7:93:01:92:d4:c0:04:e0:52:92:
b7:f1:9e:0f:52:a3:70:bf:b7:7b:88:c4:ed:9a:31:
3e:a6:43:69:ea:39:3b:1f:2c:05:a3:aa:97:5b:f2:
ff:a5:12:cd:ef:a2:52:34:12:9d:9d:9f:ea:9a:4f:
3d:be:4e:1a:83:dd:ed:0b:d8:74:35:8b:1d:d1:18:
9d:a7:bc:1a:0e:6c:79:55:ab:75:87:63:8e:7b:6c:
00:90:c6:18:71:76:d1:b2:ce:07:a7:27:a9:e7:b9:
e9:0d:07:0e:d0:ce:6c:3a:48:2d:f2:4e:4a:2a:70:
20:4f:37:c6:b5:a1:cb:db:4b:b0:c8:e9:70:c1:b9:
84:8b:05:f4:9b:25:14:ef:84:60:d1:ab:42:26:93:
70:94:19:99:c1:b9:62:80:f7:3d:b4:a9:6c:3d:4e:
a1:75:3d:36:af:af:02:d7:23:29:1e:a0:ff:15:db:
f4:0f:da:78:3b:39:49:a3:49:ef:1d:be:d3:90:83:
e4:b3:08:c6:c3:cc:2e:f0:12:78:c6:38:b7:47:af:
42:cc:e0:18:6b:fa:8d:4e:d1:20:1e:54:a0:38:07:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:83:2D:A9:6F:5B:62:51:DA:4F:C2:58:A1:02:9E:75:E2:41:FF
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4634d2fa-4169-42c0-a7d7-63b635776dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e500::/40
Signature Algorithm: sha256WithRSAEncryption
84:ea:30:ac:00:b9:f3:e1:54:6e:d2:e9:2e:5f:08:26:56:a5:
b6:8e:ba:80:02:ba:5a:cd:75:ac:93:c2:9b:98:cb:4d:b5:6d:
90:d8:3d:13:1e:02:b2:ef:37:36:1c:86:ae:6b:a7:cf:bb:7c:
22:eb:31:e1:e3:19:21:40:34:4e:77:8b:e5:32:d8:96:2d:0f:
97:da:ce:60:1a:8c:8b:3f:0d:96:14:64:7f:2b:e1:0b:00:27:
73:6e:97:18:ca:7a:08:34:4e:1f:8c:e3:0e:79:73:b7:3f:ee:
09:1e:60:da:ed:11:5b:59:21:af:7a:9d:b3:2e:e0:31:05:fb:
6b:cf:fa:84:fb:5c:bb:d8:55:00:49:5d:2d:45:68:c6:f4:48:
2f:b5:78:7b:e9:1b:13:89:14:13:a2:bb:35:e6:5f:9f:d4:a0:
6a:6d:a8:dd:61:fd:21:c0:da:70:c0:22:57:f3:8e:08:21:56:
75:92:12:2f:3c:d6:06:ba:4f:d3:2e:f3:3a:19:56:7f:40:f0:
15:24:c1:ea:96:64:33:b3:85:c9:1d:94:f9:ea:ec:1e:73:ad:
eb:6f:aa:bb:33:16:aa:38:d9:ef:85:0c:2e:35:80:43:a6:a6:
5e:46:ab:22:03:f5:db:39:a5:fe:3d:59:e0:ae:fc:35:6f:14:
2e:41:91:e9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUa/UvOgx0mQaru7lUkt5kK6JFSGEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNWUzMmIyN2ZiN2YzYjNiNTAzNTQ3Y2I1NzI5YzUxMGMw
MjUwZTZhMTc0ODk2M2NlODNjMzk0ZDQyMWU0NDE5MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDw+WhO6KIWj1j9GEGKsLUHIcVr9AGooIbnZ2gdyXFgA5Hi
55MBktTABOBSkrfxng9So3C/t3uIxO2aMT6mQ2nqOTsfLAWjqpdb8v+lEs3volI0
Ep2dn+qaTz2+ThqD3e0L2HQ1ix3RGJ2nvBoObHlVq3WHY457bACQxhhxdtGyzgen
J6nnuekNBw7Qzmw6SC3yTkoqcCBPN8a1ocvbS7DI6XDBuYSLBfSbJRTvhGDRq0Im
k3CUGZnBuWKA9z20qWw9TqF1PTavrwLXIykeoP8V2/QP2ng7OUmjSe8dvtOQg+Sz
CMbDzC7wEnjGOLdHr0LM4Bhr+o1O0SAeVKA4BxlVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUskyDLalvW2JR2k/CWKECnnXiQf8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzQ2MzRkMmZhLTQxNjktNDJjMC1hN2Q3LTYzYjYzNTc3NmRjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPD75TANBgkqhkiG9w0BAQsFAAOCAQEAhOowrAC58+FUbtLpLl8IJlal
to66gAK6Ws11rJPCm5jLTbVtkNg9Ex4Csu83NhyGrmunz7t8Iusx4eMZIUA0TneL
5TLYli0Pl9rOYBqMiz8NlhRkfyvhCwAnc26XGMp6CDROH4zjDnlztz/uCR5g2u0R
W1khr3qdsy7gMQX7a8/6hPtcu9hVAEldLUVoxvRIL7V4e+kbE4kUE6K7NeZfn9Sg
am2o3WH9IcDacMAiV/OOCCFWdZISLzzWBrpP0y7zOhlWf0DwFSTB6pZkM7OFyR2U
+ersHnOt62+quzMWqjjZ74UMLjWAQ6amXkarIgP12zml/j1Z4K78NW8ULkGR6Q==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net