Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a9dbf8ca-af14-47d7-aea4-9556cb337059.roa
File: a9dbf8ca-af14-47d7-aea4-9556cb337059.roa (raw, json)
Hash identifier: dImtHEpE0pRvIfiGUQr0kM2L/EDGB4AKReKIpJdlZ98=
Subject key identifier: 1F:F2:A0:2F:BB:CC:2B:07:29:FC:3D:26:F0:AB:DD:F3:04:3E:09:05
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 39AA03E99378EA65D19D01F2BC23893EDCBCACD2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a9dbf8ca-af14-47d7-aea4-9556cb337059.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5510::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:aa:03:e9:93:78:ea:65:d1:9d:01:f2:bc:23:89:3e:dc:bc:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=49a4648053659d5308621332adf4e0e10e866be0afc46d27c29ad91a1485faf4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:2d:4c:b3:fd:16:93:f9:ea:c2:07:d9:08:
4d:4f:3d:81:a0:13:6d:d2:46:a3:f8:1a:f0:e8:83:
dc:d7:67:4e:82:d1:37:c4:d5:a4:0e:b9:cf:3c:e5:
51:d9:5f:10:34:2c:c4:cf:6c:3b:75:cb:0c:56:b8:
11:2e:07:2b:87:0f:dc:9d:2c:f3:f5:92:70:18:70:
01:9f:ef:e1:fe:27:bf:25:6a:e3:11:c1:ec:44:3a:
9c:9c:d2:3e:01:68:07:64:39:f0:f7:a4:07:dd:a4:
7e:b1:b5:4d:de:f0:08:cd:48:f6:53:1f:fc:a2:b1:
af:53:36:4d:e2:15:67:e8:fc:0c:22:cb:e9:ba:a3:
95:a8:7e:42:1f:27:67:50:75:af:02:89:2a:b4:a8:
96:dc:ef:42:59:bd:85:43:96:ba:fa:45:cf:14:a5:
5c:49:87:49:4c:1c:e2:17:49:31:6e:d4:e2:e2:47:
d0:74:bf:bb:d5:c0:a2:e5:bf:69:64:26:46:4c:d1:
4e:31:41:73:cb:34:7c:25:9a:34:6f:b2:12:68:6f:
94:4f:05:01:54:1b:81:18:85:90:df:9d:f6:33:73:
f1:ef:21:53:0e:03:ed:e1:e4:88:41:f8:8b:65:18:
cb:21:a7:c5:f0:c7:aa:2c:7c:e0:ae:96:b6:e7:30:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:A0:2F:BB:CC:2B:07:29:FC:3D:26:F0:AB:DD:F3:04:3E:09:05
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a9dbf8ca-af14-47d7-aea4-9556cb337059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5510::/48
Signature Algorithm: sha256WithRSAEncryption
46:9a:7a:f9:67:6c:1d:e3:b2:a3:a6:5c:7c:9a:70:a8:cb:03:
7b:c5:2d:10:93:e3:88:8f:88:ec:02:7c:3d:d9:e8:71:e3:fa:
b0:cd:db:69:23:b9:59:4f:2a:a7:11:e4:51:af:0f:23:90:dd:
fb:c4:cc:eb:bd:44:d9:a2:c1:71:ef:cb:84:a5:18:ce:aa:9c:
eb:d6:89:60:2c:22:e9:4e:66:27:8a:2c:04:02:4f:38:23:ba:
53:8c:0f:87:bc:3b:de:00:35:62:c6:65:07:35:92:8b:a2:c0:
d4:9a:49:36:09:cf:70:c2:41:50:c4:48:97:9c:c3:dc:48:05:
6d:d3:5b:02:4c:64:2e:ba:f1:a1:5f:2f:f5:9e:0a:f5:d7:af:
42:fc:28:99:61:aa:d7:f4:1e:82:ac:77:ce:57:24:b7:36:b4:
df:ec:0a:88:f4:a9:99:0e:da:ba:3a:bd:a1:0e:25:e0:62:cc:
a9:d6:cc:5d:53:39:3c:6e:5d:d2:30:ca:66:ae:12:ed:4d:02:
59:b4:d2:b3:3c:93:93:fd:42:9e:66:ff:1a:25:d7:05:4f:2a:
35:b5:fe:83:9d:d7:50:cd:49:ec:d4:16:15:b4:cf:00:7f:33:
61:55:f2:06:7f:09:45:22:b9:29:0f:08:e3:e7:f5:0c:93:cf:
01:a7:3e:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net