Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/47401e09-098d-4ed3-a47d-f40ed86e312e.roa
File: 47401e09-098d-4ed3-a47d-f40ed86e312e.roa (raw, json)
Hash identifier: jgyyi5yQ8JuxWS6fAg5fYvPSomxSUJrCWsS1n3r7tsI=
Subject key identifier: 25:B0:3F:FC:3E:36:3F:DC:D5:C9:ED:5D:43:08:A3:84:CD:87:2C:8C
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 692A3AEBA6C95C9C47C192CFCCDCA2303E60078B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/47401e09-098d-4ed3-a47d-f40ed86e312e.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f3:ce00::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2a:3a:eb:a6:c9:5c:9c:47:c1:92:cf:cc:dc:a2:30:3e:60:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=a283deb47fb3b348196bc40fb89346e28c79412f5db7962f17ffde810e6b2f8c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:59:f2:7c:5f:18:32:74:7e:9e:4a:e2:e0:
cc:a8:8d:b7:de:3e:f4:f1:e0:79:d4:59:79:0a:ae:
4b:cb:f7:d1:92:22:76:f0:04:3a:63:78:01:bd:ed:
21:a8:a2:a0:c0:4c:29:29:71:4c:32:b0:8e:dc:43:
b1:75:59:37:df:c0:44:4a:a0:c1:77:2d:03:05:ca:
50:34:67:7e:aa:27:e2:db:38:f0:07:dc:3f:35:62:
68:c0:c9:e3:19:25:b5:d9:e5:fe:14:1c:ff:ab:f0:
a2:ca:1c:4f:68:f8:36:28:60:09:37:50:d6:a4:71:
c1:e3:40:82:3c:8c:d8:e6:0c:e5:2f:48:db:03:4d:
c8:2d:36:f1:e5:63:62:ce:81:71:65:ca:45:02:f6:
aa:bc:c5:b4:ca:df:02:b0:bd:2d:d9:59:c4:de:23:
12:d4:61:a4:c2:84:99:5c:e9:57:fc:e4:e1:70:9a:
9f:28:bc:80:74:c2:e0:77:72:24:82:eb:d1:69:f1:
6d:3d:c2:4f:d4:dd:99:fc:e0:9a:67:25:e5:e6:6e:
85:a8:ed:8a:2d:72:2a:b4:33:e6:54:7b:51:5b:e1:
40:01:bd:40:23:38:d0:c4:13:95:fe:3d:ec:81:31:
d8:be:39:6c:3c:02:fc:86:47:98:79:33:6f:f0:88:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:3F:FC:3E:36:3F:DC:D5:C9:ED:5D:43:08:A3:84:CD:87:2C:8C
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/47401e09-098d-4ed3-a47d-f40ed86e312e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f3:ce00::/42
Signature Algorithm: sha256WithRSAEncryption
25:3b:5b:87:5f:b6:3b:19:db:0e:5c:45:91:3a:d5:e2:e1:a6:
1e:12:8b:52:74:9b:1c:a0:34:fe:62:60:b7:06:5f:ef:b4:f3:
10:4f:27:32:84:68:64:ef:24:90:f0:5e:db:f8:47:a2:52:d3:
08:56:a3:f8:b3:d9:71:66:33:7b:9b:85:94:e4:75:73:b0:c5:
1e:f8:04:5a:1a:49:ac:a2:c9:36:43:3c:a6:69:7f:3e:74:fa:
44:d1:cd:27:48:f7:a6:bb:6b:4d:36:88:9c:5b:10:63:00:17:
76:02:de:ca:a2:76:e6:f4:b8:2a:1c:45:51:7f:28:d0:6f:28:
16:24:24:91:09:3d:1a:9e:4a:f4:ae:bd:38:34:b0:e5:ad:4f:
4a:a4:82:f7:35:27:f4:06:d8:72:b5:84:59:d5:41:fa:8f:a9:
5e:9e:9a:21:02:9e:20:a0:dc:f9:08:35:50:6a:e0:0d:83:dd:
53:6c:23:a1:c8:6e:3a:52:d3:15:89:c3:2e:4a:2c:16:af:d9:
53:77:11:59:94:37:38:00:ac:a4:d2:88:81:47:c3:99:4a:d1:
51:d2:d0:3b:63:fb:2c:f0:69:e1:48:8f:52:4b:9a:d6:02:00:
77:a6:36:92:55:16:11:dc:86:46:fc:5a:c9:b4:e8:26:be:fb:
7a:30:db:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net