Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72315a24-c761-413a-bbc8-f8a1f5e41181.roa
File: 72315a24-c761-413a-bbc8-f8a1f5e41181.roa (raw, json)
Hash identifier: aeBVPnIctL/Q8YaHzQImFVVxQeXzbHwhpUQtdydafCI=
Subject key identifier: 9C:90:DE:EC:08:5C:D9:A5:BB:43:A8:A7:8F:D4:90:2A:4D:6F:1F:39
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 5966E3CF6E85C41E58BE3A3F9923A289DD62E64A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72315a24-c761-413a-bbc8-f8a1f5e41181.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5535::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:66:e3:cf:6e:85:c4:1e:58:be:3a:3f:99:23:a2:89:dd:62:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=ed8f61bc53a5d34ffa7e30b0c2bb4f7b44ba523fc88b27301ca7410cc643349c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:f1:30:7c:b0:bf:40:64:8a:22:38:7c:72:
ed:9a:1f:d7:59:bb:aa:cd:c2:17:ae:8e:6f:fd:ed:
dd:6e:37:47:d1:32:8f:ab:a7:99:7f:fb:41:11:93:
8d:61:dd:4d:09:5e:a7:3c:91:f1:e8:ff:f3:c8:d7:
22:29:c7:a7:51:ff:0f:89:98:f6:82:b0:99:3a:58:
18:93:9d:81:f5:e6:dd:d8:61:e1:7a:b6:75:ac:1f:
f1:a8:f5:d8:1b:e5:0a:4c:8a:9e:ff:a4:91:8f:0c:
cc:0a:4c:58:7c:15:ed:4e:b6:20:d3:80:45:a9:fe:
bb:8c:df:55:34:06:ae:59:d8:68:cb:5f:92:8b:96:
ce:53:e8:36:8b:8e:82:c6:30:47:51:29:40:5b:8f:
b9:38:04:5f:1d:48:97:24:fc:b2:3f:ce:86:82:04:
be:c6:c6:54:f8:80:51:6b:d8:9d:c8:35:9f:ed:1e:
d1:31:00:90:70:67:dc:cb:a0:32:00:d9:fe:00:7f:
85:d7:24:53:20:d5:f7:80:1f:4f:d5:58:c8:b1:21:
ab:e1:6d:4c:9b:3e:0d:63:bc:62:2f:17:f1:a5:de:
fe:3e:5d:65:8b:14:cb:b6:94:3a:e1:5c:78:a6:b2:
f1:3b:04:bb:26:0e:57:0a:83:55:05:5f:c2:7d:42:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:DE:EC:08:5C:D9:A5:BB:43:A8:A7:8F:D4:90:2A:4D:6F:1F:39
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72315a24-c761-413a-bbc8-f8a1f5e41181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5535::/48
Signature Algorithm: sha256WithRSAEncryption
20:76:9d:29:f3:a1:aa:0b:e5:4e:2d:39:14:54:86:cf:8f:54:
b7:45:73:45:2f:5e:1f:40:66:b9:46:7f:3b:4d:a3:95:f5:7c:
29:12:36:b5:ce:36:23:0d:a2:cf:e3:f1:73:1b:f1:04:44:a9:
67:dc:9f:39:07:fd:cd:98:68:55:a8:7e:ec:e3:5d:df:fc:2e:
a2:c0:a4:40:9b:7b:4e:3d:f8:30:df:16:25:cd:bb:c7:be:df:
55:dd:8a:4b:69:bc:e8:22:e8:4d:06:c3:74:5f:12:ae:ea:e9:
01:2d:4e:6e:07:09:1a:b4:b5:34:87:45:93:56:b4:bb:21:0c:
07:52:be:9a:4a:0b:d7:ac:3d:21:76:e0:94:38:05:61:d4:21:
3c:5e:43:65:4a:b9:97:38:9c:19:e4:33:57:f9:cf:d7:73:e7:
97:19:78:8d:fb:b2:11:94:b3:14:91:e5:9f:22:de:bd:a6:75:
14:9c:28:75:f7:f4:1a:eb:73:ac:2d:f0:7f:a3:78:c1:cd:ee:
a8:47:1c:df:bd:64:99:d7:02:33:c2:b2:53:e1:fb:ee:e9:4d:
96:d2:ed:a4:09:d9:10:fe:f2:87:0b:41:fa:a3:dd:d6:f2:0b:
77:02:01:54:1b:bc:dc:ab:ad:57:c5:ef:3b:35:ad:4a:80:0f:
e3:e4:8e:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net