Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/babad843-9f3c-4882-8ace-4fe735213776.roa
File: babad843-9f3c-4882-8ace-4fe735213776.roa (raw, json)
Hash identifier: ggl1DhQU8xFgsqs6x4AkZBV40XR6gfCYSUTNWxUZjys=
Subject key identifier: 0E:FE:A8:D7:97:00:38:56:FB:F5:FB:CB:79:97:BD:EA:14:BB:91:40
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 403AC64A3809D20FEB668D568120187FD18A9106
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/babad843-9f3c-4882-8ace-4fe735213776.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f3:ce00::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3a:c6:4a:38:09:d2:0f:eb:66:8d:56:81:20:18:7f:d1:8a:91:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=14b61ae4f9ec344c452e574864e7a47cf7f931564608a570715aca68145896b4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:fd:ec:66:9f:4e:ac:5b:af:cc:12:59:52:
8a:e7:6f:c1:d0:16:86:76:a5:be:d1:0c:a7:d2:fb:
2b:9f:e2:53:e0:8b:ce:4f:8b:3e:ab:33:71:ea:db:
0a:48:ae:7a:0c:4e:54:19:38:57:c2:b5:d3:8e:8d:
07:76:64:6f:78:75:1a:f1:08:84:3d:de:9e:30:b0:
70:88:e9:38:ea:d6:64:a1:c4:fe:7f:bc:9e:b6:ed:
88:12:1e:85:e8:6e:7e:6b:1f:6f:33:78:2b:75:26:
14:1b:5a:e3:7f:1d:76:31:4c:44:37:1a:af:a7:04:
fe:5f:90:79:8c:28:fd:54:bc:d0:16:c1:21:67:d1:
b7:86:18:da:f7:58:b8:e6:f6:aa:bf:c5:9a:66:23:
f9:22:70:7e:08:c5:fb:e1:97:d9:1a:f0:82:bd:9c:
53:96:ea:09:d6:1f:7b:b1:37:43:83:60:4f:8c:b7:
0e:55:f2:40:30:62:46:86:fa:68:5e:6d:64:29:dd:
9e:ee:b1:7c:61:6a:af:2a:fd:69:e5:8c:5c:9a:29:
9e:1b:4a:5e:8d:a6:c6:91:2f:11:3a:c5:a0:32:0e:
b4:ba:3c:b0:de:a2:43:2d:cd:cc:dd:9f:d5:96:a3:
f4:a7:a6:80:26:af:5d:2b:8d:d6:e2:cb:6a:32:dd:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:A8:D7:97:00:38:56:FB:F5:FB:CB:79:97:BD:EA:14:BB:91:40
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/babad843-9f3c-4882-8ace-4fe735213776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f3:ce00::/42
Signature Algorithm: sha256WithRSAEncryption
90:3e:ca:5a:c9:b9:36:dc:53:5d:29:19:19:8a:41:e2:03:7a:
43:2a:d1:06:13:04:ac:48:23:ca:dc:73:1b:9d:31:72:25:57:
b2:92:9d:8b:98:ab:74:d9:3c:07:d3:17:ec:fc:d1:6a:90:ff:
1b:45:b6:2c:70:cb:7a:46:75:92:ab:1b:08:2e:82:be:71:af:
d6:5a:c7:3a:95:5d:27:ef:66:6c:db:58:1f:15:9f:f7:44:9f:
52:ca:a7:0b:88:7b:9e:24:08:03:ac:1a:8c:f7:c3:2d:4e:f1:
a4:c8:a7:ba:b3:07:64:10:ce:49:3e:22:90:c6:35:d4:f1:af:
80:71:55:1c:4d:7f:40:a8:e5:33:00:52:05:cb:29:75:d6:fa:
b3:47:41:42:2d:a1:5d:7f:2e:96:67:5f:a5:16:ff:dd:a6:89:
4c:e7:41:37:e1:cf:2a:42:90:8e:82:7e:a2:97:4a:c9:8e:88:
e5:8e:ce:50:1f:95:cc:b7:ec:e7:7a:05:22:d0:dd:ba:59:ae:
0d:7f:a3:fb:fb:44:7b:14:89:a0:86:ce:91:01:11:3c:6a:88:
d8:c4:22:e5:8b:ca:91:86:57:6b:41:51:f2:fb:1c:a8:d5:77:
17:8e:66:1e:7d:15:92:df:38:67:fb:25:83:47:56:ed:d5:ba:
23:67:49:b4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQDrGSjgJ0g/rZo1WgSAYf9GKkQYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNGI2MWFlNGY5ZWMzNDRjNDUyZTU3NDg2NGU3YTQ3Y2Y3
ZjkzMTU2NDYwOGE1NzA3MTVhY2E2ODE0NTg5NmI0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Wf3sZp9OrFuvzBJZUornb8HQFoZ2pb7RDKfS+yuf4lPg
i85Piz6rM3Hq2wpIrnoMTlQZOFfCtdOOjQd2ZG94dRrxCIQ93p4wsHCI6Tjq1mSh
xP5/vJ627YgSHoXobn5rH28zeCt1JhQbWuN/HXYxTEQ3Gq+nBP5fkHmMKP1UvNAW
wSFn0beGGNr3WLjm9qq/xZpmI/kicH4Ixfvhl9ka8IK9nFOW6gnWH3uxN0ODYE+M
tw5V8kAwYkaG+mhebWQp3Z7usXxhaq8q/WnljFyaKZ4bSl6NpsaRLxE6xaAyDrS6
PLDeokMtzczdn9WWo/SnpoAmr10rjdbiy2oy3dzjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDv6o15cAOFb79fvLeZe96hS7kUAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2JhYmFkODQzLTlmM2MtNDg4Mi04YWNlLTRmZTczNTIxMzc3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPDzzgAwDQYJKoZIhvcNAQELBQADggEBAJA+ylrJuTbcU10pGRmKQeID
ekMq0QYTBKxII8rccxudMXIlV7KSnYuYq3TZPAfTF+z80WqQ/xtFtixwy3pGdZKr
Gwgugr5xr9ZaxzqVXSfvZmzbWB8Vn/dEn1LKpwuIe54kCAOsGoz3wy1O8aTIp7qz
B2QQzkk+IpDGNdTxr4BxVRxNf0Co5TMAUgXLKXXW+rNHQUItoV1/LpZnX6UW/92m
iUznQTfhzypCkI6CfqKXSsmOiOWOzlAflcy37Od6BSLQ3bpZrg1/o/v7RHsUiaCG
zpEBETxqiNjEIuWLypGGV2tBUfL7HKjVdxeOZh59FZLfOGf7JYNHVu3VuiNnSbQ=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net