Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa
File: e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa (raw, json)
Hash identifier: W1fBBG2eaZnUxWoAb2EueLRhylE1Sus2FFTPye2Jy4E=
Subject key identifier: 0D:65:A5:00:93:EA:A1:E9:CE:C1:E2:5D:86:F3:E3:C4:C7:42:34:72
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 56DC0DFCE2E507720D3B4A36A14EC9E5954B23A0
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:551f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:dc:0d:fc:e2:e5:07:72:0d:3b:4a:36:a1:4e:c9:e5:95:4b:23:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=eb1066ba8be62132e178715232698f45084e5ceade1e3e1732362a8c8db8d202, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:cb:63:b1:40:a6:7f:c4:1a:16:49:7d:c3:
f8:93:39:fa:1d:ed:b1:61:8f:63:76:b2:e8:a6:ac:
16:59:73:ba:a0:34:47:89:5b:7b:c3:cd:95:4d:d9:
47:31:13:36:70:92:a9:b8:79:b6:af:cc:e9:db:d0:
b0:3a:17:7e:7f:e0:49:9e:4c:97:2b:af:cd:c3:9b:
fd:b4:a5:cd:3b:d1:08:c6:dd:46:43:20:28:ee:39:
53:9c:6c:21:a6:9f:b7:8a:56:bd:ef:99:d9:f5:cd:
26:c7:54:44:c5:f1:97:1d:e3:23:83:e3:e5:43:df:
4f:ea:e2:6d:76:d6:12:40:b0:b9:42:cf:8f:d6:d5:
d8:69:a1:25:8c:e9:74:4d:d8:bb:bb:b6:ec:bf:33:
62:b9:4e:a0:82:80:55:b6:f0:95:52:c1:1d:4d:4a:
64:8a:45:18:1f:73:95:33:ae:f8:67:8b:e1:c6:70:
ca:16:40:b3:f1:0c:83:94:13:1c:a7:6f:af:70:58:
f9:26:fb:65:52:a4:bd:a1:ac:44:cf:d9:b7:e1:7c:
91:12:4f:9f:07:b2:09:c5:07:fb:fd:90:75:c9:55:
9f:3a:d0:be:91:a1:a3:c7:41:5f:98:3d:8d:d5:81:
dd:ea:e4:47:79:d9:0d:6b:f2:76:fa:97:05:74:d1:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:A5:00:93:EA:A1:E9:CE:C1:E2:5D:86:F3:E3:C4:C7:42:34:72
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:551f::/48
Signature Algorithm: sha256WithRSAEncryption
09:31:01:ed:cd:8b:70:ed:ce:d2:de:88:ea:6a:83:31:ed:f0:
1f:43:56:09:6d:31:31:eb:33:40:9e:5e:ec:e3:ff:2d:57:9c:
fa:98:82:a0:db:02:03:6b:6b:f1:b8:54:bd:ed:86:9c:e7:86:
bc:2b:55:80:59:fe:5a:4d:42:0d:d2:46:ab:a8:c3:54:1d:ad:
f9:5f:85:08:7b:88:c9:75:cf:dd:5b:8a:fe:26:df:2a:e5:a6:
50:c8:16:af:be:b5:2f:0e:b9:0b:bf:e3:56:54:e3:83:3c:f0:
d4:40:5f:3d:69:d5:af:a1:7d:08:dd:46:b1:25:33:6a:68:d8:
e0:68:df:22:af:2f:f5:23:87:78:06:64:1f:57:39:d4:47:cc:
9a:dd:70:24:be:7c:62:98:08:87:fe:9d:db:38:df:71:56:23:
99:56:0b:17:d1:83:25:28:d4:1b:c7:52:0e:d5:d9:fd:c3:53:
4b:7e:40:fa:40:77:cf:d0:33:b6:db:53:a3:48:c8:0b:fd:70:
c0:66:7a:c3:c1:94:b7:60:7e:f1:eb:ca:09:49:31:bf:be:0c:
30:05:38:9e:5d:18:34:94:8e:bd:10:21:81:54:ce:05:28:4d:
47:3b:d0:20:d2:88:4e:6a:c2:28:ee:4f:81:25:08:0f:40:03:
95:4b:31:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net