Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e7a769f6-8dd5-4179-a653-99ec82616621.roa
File: e7a769f6-8dd5-4179-a653-99ec82616621.roa (raw, json)
Hash identifier: MWqcioDWxEiHuARNvsXypoKOsT+3xRpOqJGLjT4wNZk=
Subject key identifier: C6:90:F0:74:9E:E3:1D:98:0D:18:7E:34:17:C6:D7:0C:98:1C:69:1D
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7481667EAC39A05832C59C2FDB17CC712B2AB4EC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e7a769f6-8dd5-4179-a653-99ec82616621.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:81:66:7e:ac:39:a0:58:32:c5:9c:2f:db:17:cc:71:2b:2a:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=9491c7688398dc79ff360785e5229306b5aedfcfaad71a9a036ce4d268b5d3db, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:7d:86:c4:9f:62:82:5a:82:14:d8:63:5f:
8f:9d:27:9f:4b:68:03:4f:b2:ea:40:c8:a3:77:c5:
b4:49:76:69:f1:c8:51:79:23:e5:c7:6e:ed:8e:e2:
ea:48:a4:a8:0b:b4:ef:74:56:6f:62:f5:2b:ef:ad:
52:9d:82:5a:3f:6a:58:5e:28:04:ed:19:5b:ac:41:
20:f7:7d:db:28:a1:49:51:61:28:f8:bc:0e:de:72:
19:27:4a:3e:0c:7d:c5:25:35:50:e8:7c:02:73:bd:
f8:db:34:2e:ec:54:75:2e:63:82:1d:ef:d7:21:62:
02:a0:9d:20:26:e6:4e:05:90:f8:c8:7c:14:0d:3b:
6b:87:c1:7c:c0:fa:46:c7:62:d1:fc:96:d7:f3:01:
0a:ff:28:20:1c:8b:0a:0e:f2:fb:0e:ea:d0:97:2f:
a0:b3:c1:9a:02:7b:57:dd:ac:8e:91:70:32:04:57:
fc:1f:d6:b6:55:fa:c9:08:1d:bf:c3:15:c1:91:49:
83:b5:82:29:93:42:97:4e:f0:63:fc:ee:4f:19:93:
f6:81:34:d8:73:ab:c5:b7:d9:06:05:bb:65:a3:07:
39:04:1b:33:db:fe:f0:49:2a:67:df:f6:d6:69:38:
29:27:e8:04:ef:cd:ca:b8:e5:0a:be:0c:ef:3d:3c:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:90:F0:74:9E:E3:1D:98:0D:18:7E:34:17:C6:D7:0C:98:1C:69:1D
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e7a769f6-8dd5-4179-a653-99ec82616621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e800::/40
Signature Algorithm: sha256WithRSAEncryption
31:0f:1a:4a:77:d4:63:fb:62:6c:30:eb:c5:3c:33:b6:6e:22:
34:96:95:54:31:78:1d:a7:a7:3d:d9:a3:c3:b5:06:fc:e5:50:
3c:8a:23:ad:72:13:29:a2:f1:72:c2:18:6e:92:d1:98:fe:87:
85:c1:ce:4e:01:59:f8:55:bb:e2:78:8c:15:13:a6:35:af:10:
a7:95:e8:c8:6f:6c:e4:5b:59:1c:38:de:7e:66:37:ae:2a:40:
cf:a6:29:9c:4b:bb:c0:5f:94:53:8b:2f:a7:1b:9a:99:df:60:
87:17:bf:b4:13:94:e8:87:cf:d7:41:9b:54:6d:6c:c2:24:4f:
3c:3c:07:84:4e:97:0b:6d:fb:3f:f1:21:05:4e:07:69:f5:87:
e0:66:5d:66:c6:3b:88:b5:8b:ee:4d:cd:59:5f:45:16:fa:ec:
d1:45:86:71:51:49:13:8b:e6:69:b7:af:15:56:df:3a:94:3c:
ea:0f:96:2b:a6:f7:20:bd:9a:5f:78:bd:4d:7a:21:69:81:a0:
5c:59:ea:31:88:e4:72:b7:f9:94:dd:58:ba:54:c8:46:c7:52:
d3:79:12:3e:05:ed:05:83:12:42:7c:35:bb:37:f1:02:25:39:
6a:7c:f4:6c:9c:e1:f1:44:79:73:7e:a5:5c:cd:02:22:39:ad:
b3:3a:fb:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net