Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a800ec50-0c14-4dee-9414-f6165de22e7f.roa
File: a800ec50-0c14-4dee-9414-f6165de22e7f.roa (raw, json)
Hash identifier: 4gAy8PdB0ReyGgpYdSn6oxWZpvc5vbPnUBwNL1VJHNk=
Subject key identifier: 74:28:5D:01:45:8A:86:DD:B2:1C:B1:B0:5B:F8:CA:44:02:AF:C2:97
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 35F215CCD886A07152CCB00962C2A7F9CA7E8F7E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a800ec50-0c14-4dee-9414-f6165de22e7f.roa
Signing time: Wed 11 Dec 2024 00:00:00 +0000
ROA not before: Wed 11 Dec 2024 00:00:00 +0000
ROA not after: Wed 15 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:553e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f2:15:cc:d8:86:a0:71:52:cc:b0:09:62:c2:a7:f9:ca:7e:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 11 00:00:00 2024 GMT
Not After : Jan 15 23:59:59 2025 GMT
Subject: serialNumber=c1136c064d3f909ecb5d5ad7672a90ba0e11197eadc82e8162e7b1ccbf97922f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:dc:22:3f:e1:fb:3b:b7:cf:d2:7c:f9:16:
06:d1:ba:52:8e:de:89:4d:5b:a4:af:4a:2a:7b:5b:
7a:45:58:a3:4c:1e:1e:04:0d:76:87:0f:ac:01:04:
9f:74:d2:ad:75:70:31:e6:a0:86:f5:f1:85:1e:3c:
ac:2d:2b:bd:b9:2f:9e:25:05:9c:5c:79:c2:2e:5d:
ea:a8:eb:6f:d2:26:bc:25:c3:d4:53:ae:16:c3:38:
59:a9:36:b9:e1:6b:5a:7e:ae:d2:c9:58:e9:b2:d9:
f7:ee:2b:3c:1d:0a:99:9b:b7:e9:c5:54:c7:c8:a8:
95:ef:ba:16:83:2b:ab:e6:25:52:3e:b5:10:43:80:
e1:a0:31:9c:fd:ee:58:31:5e:9c:c1:b4:2f:bb:db:
12:0c:81:ff:6b:96:c9:12:ae:77:76:2d:a3:01:18:
d3:36:6a:d2:9f:12:04:0a:1f:31:94:37:6b:76:6e:
e3:3e:7c:13:3d:7b:eb:ac:77:ea:d4:1f:1d:71:c9:
23:c7:a1:30:80:33:56:72:83:40:67:9a:0b:c0:dd:
48:e1:f5:23:5c:24:b5:9c:d9:3d:c2:ea:3f:31:5f:
cc:47:58:c6:11:1f:3b:c9:50:d3:ac:0a:ae:e2:e8:
68:5c:e8:4f:6f:aa:aa:e8:cc:2e:5b:ac:80:92:b7:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:28:5D:01:45:8A:86:DD:B2:1C:B1:B0:5B:F8:CA:44:02:AF:C2:97
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a800ec50-0c14-4dee-9414-f6165de22e7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:553e::/48
Signature Algorithm: sha256WithRSAEncryption
58:1b:fe:54:4b:8e:da:35:2d:3f:5d:5d:52:b6:f7:d1:db:05:
11:f7:28:6d:2d:f6:1c:e5:b9:27:ec:6c:7e:5d:69:3e:11:e3:
d3:25:7d:13:41:60:e1:79:b9:fe:ea:ea:49:49:8f:6b:12:f7:
bf:8e:cc:89:c5:fe:0d:e3:5c:03:24:4f:f2:ef:3f:4b:39:20:
fd:5c:2c:e8:40:2e:82:38:a5:19:0e:96:2f:e5:66:e4:18:e3:
2a:54:00:b0:18:aa:c5:3c:ab:92:93:50:e2:8c:e7:db:ab:a9:
18:57:d8:ae:41:e1:40:96:d6:2a:bf:76:5d:9c:46:d5:ff:95:
bd:d3:6c:92:fc:30:32:ae:db:5d:98:c4:f4:f8:da:01:d0:d8:
a5:20:ed:66:c9:cb:41:29:94:1a:8c:25:31:58:6d:39:f5:12:
33:4a:81:06:a7:04:11:d1:d1:94:d2:1d:da:08:7e:94:15:56:
76:f6:2d:87:e5:98:87:e6:0f:ba:cd:a0:7b:09:0d:ee:62:f5:
de:56:4b:0f:8d:7f:14:8f:af:db:e1:cb:ed:b3:aa:1b:83:dc:
65:a7:a4:3b:2d:c3:b5:85:c1:7f:ba:ba:df:1a:e2:89:d2:ee:
ee:aa:65:c3:2a:50:8a:a1:ae:e8:a2:7a:66:66:d9:03:3b:1b:
2b:98:06:9e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNfIVzNiGoHFSzLAJYsKn+cp+j34wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjExMDAwMDAwWhcNMjUwMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMTEzNmMwNjRkM2Y5MDllY2I1ZDVhZDc2NzJhOTBiYTBl
MTExOTdlYWRjODJlODE2MmU3YjFjY2JmOTc5MjJmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpMtwiP+H7O7fP0nz5FgbRulKO3olNW6SvSip7W3pFWKNM
Hh4EDXaHD6wBBJ900q11cDHmoIb18YUePKwtK725L54lBZxcecIuXeqo62/SJrwl
w9RTrhbDOFmpNrnha1p+rtLJWOmy2ffuKzwdCpmbt+nFVMfIqJXvuhaDK6vmJVI+
tRBDgOGgMZz97lgxXpzBtC+72xIMgf9rlskSrnd2LaMBGNM2atKfEgQKHzGUN2t2
buM+fBM9e+usd+rUHx1xySPHoTCAM1Zyg0BnmgvA3Ujh9SNcJLWc2T3C6j8xX8xH
WMYRHzvJUNOsCq7i6Ghc6E9vqqrozC5brICSt1mBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdChdAUWKht2yHLGwW/jKRAKvwpcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2E4MDBlYzUwLTBjMTQtNGRlZS05NDE0LWY2MTY1ZGUyMmU3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVT4wDQYJKoZIhvcNAQELBQADggEBAFgb/lRLjto1LT9dXVK299Hb
BRH3KG0t9hzluSfsbH5daT4R49MlfRNBYOF5uf7q6klJj2sS97+OzInF/g3jXAMk
T/LvP0s5IP1cLOhALoI4pRkOli/lZuQY4ypUALAYqsU8q5KTUOKM59urqRhX2K5B
4UCW1iq/dl2cRtX/lb3TbJL8MDKu212YxPT42gHQ2KUg7WbJy0EplBqMJTFYbTn1
EjNKgQanBBHR0ZTSHdoIfpQVVnb2LYflmIfmD7rNoHsJDe5i9d5WSw+NfxSPr9vh
y+2zqhuD3GWnpDstw7WFwX+6ut8a4onS7u6qZcMqUIqhruiiemZm2QM7GyuYBp4=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net