Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa
File: 5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa (raw, json)
Hash identifier: ghSaWD2IbYGzLLUkpMUe6itIVds5v9wQgOAYgLzSZ/Y=
Subject key identifier: F5:DD:D3:D5:FE:FE:2C:8B:5C:54:6A:58:3B:DA:76:B6:45:55:9A:80
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7190456FF602CC2FC36DC7C9A13E97CB04B6B5FC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5537::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:90:45:6f:f6:02:cc:2f:c3:6d:c7:c9:a1:3e:97:cb:04:b6:b5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=6f12b21940019047917f5491d05c6929f58caa43360968df8cd17dcf34867b1d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:8e:03:06:90:e5:fa:a6:91:c7:50:36:fb:
3c:3b:7f:47:27:2f:26:50:ce:df:0f:22:71:c1:ab:
2c:3a:d3:51:33:ee:5a:68:2a:4a:80:09:65:90:76:
f8:c5:44:8a:b0:ed:81:7b:18:5f:0a:22:07:6c:a3:
88:bc:fd:1c:1a:39:fe:f9:15:84:8d:70:8e:cc:de:
48:a3:c8:9d:56:5a:3e:ff:f5:47:8c:da:80:b3:6f:
fd:75:7e:aa:23:9e:12:59:24:cd:df:52:35:a1:33:
c2:9e:81:85:cc:5c:02:f3:ef:c6:c0:28:55:2b:7b:
41:38:78:82:ff:31:a8:43:2b:33:d3:ab:40:c4:ec:
b3:dd:af:56:da:c1:e4:93:b3:1c:ae:62:62:66:85:
e4:68:19:08:4f:61:d7:c9:74:d4:4a:a6:83:35:57:
fd:36:bd:da:32:4b:ec:01:e2:3e:bc:04:21:e2:69:
c1:cc:29:74:c4:fc:34:2b:e0:ff:02:6a:13:7b:da:
5f:a1:b1:ec:66:af:2b:d6:ac:11:55:4e:0e:5e:fc:
a9:42:91:32:fa:bf:89:46:93:84:87:80:59:4d:4b:
c3:fc:76:6c:fd:12:10:f3:0a:d1:c4:b0:dd:ba:42:
63:cc:ba:55:7f:e1:d7:cb:79:4b:46:08:16:7f:53:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DD:D3:D5:FE:FE:2C:8B:5C:54:6A:58:3B:DA:76:B6:45:55:9A:80
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5537::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ce:b4:ec:88:b4:48:29:b2:06:59:f6:49:91:bf:07:1c:bc:
3b:8d:8e:54:22:90:92:46:ff:72:22:d5:1c:94:3f:ea:48:a1:
f5:45:05:bc:31:c5:33:7f:8d:44:1b:24:33:c3:10:ed:1e:9e:
9b:a1:3a:99:d8:ac:b8:ab:70:36:22:b7:4f:7b:a5:ae:a2:f3:
f9:7e:5f:4c:5a:90:72:65:4c:29:6c:1a:f5:65:18:4e:a4:97:
cc:f6:98:87:83:39:aa:88:61:19:18:a1:de:1a:a5:4d:05:3f:
b2:84:dd:17:3d:62:37:d9:30:78:c8:fd:1e:da:03:12:b1:e7:
b2:a8:04:d2:6b:91:c5:70:63:88:f7:89:69:e4:44:a1:25:e5:
d0:11:2e:da:ee:b6:19:34:aa:e5:e8:67:1f:15:2e:f7:e5:ca:
f8:5a:85:1b:e0:3d:18:01:3d:fb:36:e8:5b:e5:95:3d:ab:57:
0b:b6:78:11:39:5c:3c:99:41:9b:6a:0b:70:9f:01:24:b5:23:
5f:99:70:fa:dd:37:1f:07:08:12:93:3f:7d:98:b4:e6:6f:bb:
e6:50:c7:a4:08:38:4f:b9:f0:ff:18:6a:c6:76:0c:5f:f7:ed:
bd:bf:7e:3d:0e:e8:af:6f:c9:ed:82:0d:8e:ed:4e:94:5b:bc:
ff:dc:ba:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net