Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8edd825a-62a7-48a9-b426-9e2f6a77cfae.roa
File: 8edd825a-62a7-48a9-b426-9e2f6a77cfae.roa (raw, json)
Hash identifier: kbwHdGv6s8Vo4U5aZ3bjb4kKm5++pxL6ba6DuQpk/Vg=
Subject key identifier: 2C:7E:8D:8D:13:B1:65:D8:52:20:F0:A4:F9:FB:F0:A1:F6:70:FD:FF
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 56679DB93E9CBCD3338DCFE49D71B1CD1992B1D8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8edd825a-62a7-48a9-b426-9e2f6a77cfae.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f3:ce40::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:67:9d:b9:3e:9c:bc:d3:33:8d:cf:e4:9d:71:b1:cd:19:92:b1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=848864c8b8aec08e9013bad642207d607f1e8050f745d4272f27b0da892bab78, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:1f:bd:36:ea:18:78:5b:97:d9:4f:56:03:
c2:74:1b:e5:8c:14:10:f8:91:23:e8:27:b6:c1:e2:
4b:6b:0a:31:59:6f:35:c0:29:e9:94:a2:ac:e0:2a:
a9:7b:9f:8c:db:11:d3:4f:11:d6:a9:d7:7c:cd:cb:
d4:b0:b7:ca:33:77:16:66:af:8b:13:d4:66:55:07:
76:f4:cc:d1:0b:b3:07:b2:8f:61:f0:d6:c8:1d:c7:
f8:37:31:07:bd:15:f1:e3:f6:c2:66:6e:40:28:c1:
13:42:20:99:c9:17:a6:dd:75:70:0f:f1:28:f4:4a:
b3:87:fa:a5:27:91:03:35:d5:dc:cc:15:19:23:a4:
3d:0f:d0:2e:07:dc:03:cc:50:8a:d9:43:56:35:8e:
c5:e7:fe:4a:26:cd:c4:6c:f6:e3:01:df:d7:79:c2:
b1:c7:f0:10:66:24:d9:52:47:a0:90:e7:77:88:b7:
a0:35:f8:40:ea:bb:76:37:d9:20:f7:ac:42:86:31:
38:41:ec:09:71:f4:51:e5:85:c8:9b:53:a4:a4:8d:
f0:d5:a8:6d:cb:2c:68:f7:af:02:d2:ef:b3:f7:4c:
a6:c9:4a:9b:db:1b:e0:1d:a4:af:1f:83:2a:7e:11:
7b:9d:3e:6a:39:0c:09:42:c1:0c:2c:aa:bd:5d:6d:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7E:8D:8D:13:B1:65:D8:52:20:F0:A4:F9:FB:F0:A1:F6:70:FD:FF
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8edd825a-62a7-48a9-b426-9e2f6a77cfae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f3:ce40::/42
Signature Algorithm: sha256WithRSAEncryption
10:55:81:42:2b:2a:ef:44:89:aa:aa:ff:0c:02:da:8e:95:3f:
55:2b:ff:3d:74:41:51:ec:7c:62:93:9d:be:3b:21:16:35:5b:
ea:3a:e5:51:d1:51:56:a6:4e:23:b7:54:dd:cc:33:21:ce:a1:
6b:51:cc:5e:a2:6d:0e:7c:27:45:24:e5:a3:a3:00:ba:82:f9:
5e:4f:f4:4f:5a:3a:7d:11:48:d3:d4:15:ea:fe:90:a3:22:52:
a0:4e:be:21:62:a0:12:b7:fe:74:98:4a:9f:95:9c:d0:8a:3a:
3b:4f:51:3e:b5:70:e1:ee:99:da:73:b0:cc:2d:6e:5b:f1:8e:
42:c7:07:76:69:50:86:fb:c9:04:82:11:64:c1:47:2d:14:23:
2d:d3:cf:cd:f3:74:5a:8b:5a:2b:e9:a9:2a:0d:b4:68:16:00:
ee:16:bd:3a:04:64:bf:31:91:33:7a:06:a0:fd:32:29:05:a8:
16:38:75:40:83:72:38:9c:02:4f:13:1d:92:50:6f:c7:38:ce:
7a:5f:2b:84:5e:d4:a4:ad:24:0a:5f:a2:13:b9:d3:1a:da:ef:
9f:eb:9d:ad:07:55:bd:64:16:20:8d:76:aa:99:00:7e:dc:af:
a0:7d:ed:29:31:5d:4f:55:6b:ff:8d:bc:44:9e:83:d1:e2:1f:
cf:67:85:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net