Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6df7bef5-f878-4122-9545-de0f9e8e05d4.roa
File: 6df7bef5-f878-4122-9545-de0f9e8e05d4.roa (raw, json)
Hash identifier: 1pFlEPsBAfFoKFJLwLDYAAm2KtYgN/BbSoBU1m/mBSI=
Subject key identifier: 77:A3:2B:9A:14:1C:78:76:76:27:8E:E7:91:B2:9E:56:C4:D9:99:85
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7516B5DB4CCEB3CFC8A8C8D678F58C57E234453C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6df7bef5-f878-4122-9545-de0f9e8e05d4.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:16:b5:db:4c:ce:b3:cf:c8:a8:c8:d6:78:f5:8c:57:e2:34:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=b03e04eecc6f1ad81dcfb6f477fdb95d45983951cc002d457c79d7e695471ad9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:58:18:3d:4a:6b:6c:04:dd:05:11:3c:3e:
60:49:ff:6e:4e:5f:c3:23:2c:7f:af:8d:bf:5b:5e:
07:d5:ef:e0:50:b5:4e:9d:5a:15:96:c2:99:49:0b:
9a:ab:72:d9:e5:b0:36:25:1c:e1:cf:eb:66:6e:e3:
5e:21:69:c9:fe:a7:33:d9:f3:c2:ca:3f:72:2d:4b:
ce:1b:0f:67:1f:50:9a:8d:21:09:ec:ae:ac:92:d9:
da:e6:50:61:f8:b4:9e:09:4b:0f:18:5c:5e:72:10:
d8:7a:b9:e0:5d:e9:1f:bf:6d:66:3a:f0:0a:b7:bf:
7d:a7:70:45:c1:41:2c:ad:e5:08:77:0e:eb:5b:3d:
90:bc:a8:75:e6:f8:5d:f5:62:2d:8b:9b:5c:92:65:
72:b9:82:a7:5d:15:ea:51:a4:e6:64:ba:f9:41:a6:
62:c4:6b:d8:04:81:72:c0:72:00:cb:dc:5f:ae:f1:
92:3f:40:26:13:b1:e9:74:d7:ee:4f:ac:82:2d:05:
31:3f:06:dd:98:56:46:e2:81:d6:96:24:9e:6a:5c:
12:0e:e4:75:80:ff:a4:df:53:57:af:b7:b8:90:f0:
3d:78:67:4a:8d:d9:e6:14:bd:d1:b1:42:ea:62:f0:
2e:a7:2d:c4:c6:35:db:c6:4c:f4:89:76:78:77:c4:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:2B:9A:14:1C:78:76:76:27:8E:E7:91:B2:9E:56:C4:D9:99:85
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6df7bef5-f878-4122-9545-de0f9e8e05d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e600::/40
Signature Algorithm: sha256WithRSAEncryption
58:4e:92:53:1e:19:2f:58:2d:9e:40:00:17:7a:c4:df:5c:8f:
5d:88:36:da:f1:25:d4:9c:f7:39:d7:df:43:4d:74:4c:2b:b9:
6d:77:0f:26:3c:f5:cb:cc:e2:aa:1f:bc:73:fe:9a:fb:1d:77:
ad:dc:37:2a:69:21:6c:1c:43:d2:30:3a:f4:97:36:54:3e:06:
64:65:88:d7:ca:eb:16:1e:b7:8d:b2:e0:93:bf:bd:7a:07:ff:
4c:c3:c7:50:63:f0:e6:6e:f5:0f:7c:5e:d3:10:d6:eb:26:29:
99:e4:8b:56:b5:a3:15:a7:2e:71:44:83:b7:bd:c2:28:4f:c2:
82:ae:63:ae:ee:a3:70:43:f7:b2:9e:6d:b5:a3:b7:aa:af:be:
aa:0b:33:55:ef:4e:06:31:9b:bc:7e:7a:6d:38:39:bb:4c:b5:
11:a4:57:2b:74:04:d9:01:75:4e:bf:46:1e:9b:57:36:e4:15:
3a:e2:ab:ae:e1:bc:2b:11:9b:29:9b:e7:e3:a4:1a:38:e0:fc:
b8:28:fd:88:c5:21:9f:a6:44:6d:0a:40:e2:58:f4:ef:de:ad:
92:1f:5e:8a:38:ee:42:81:6e:90:1c:54:f7:e5:82:fb:a5:3c:
50:e2:4c:9e:d3:4f:07:df:ea:cd:ea:3c:b7:ff:ce:e7:3f:76:
8f:21:30:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net