Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2ebc63-9aa8-4435-8e64-d40af8bb4f69.roa
File: ee2ebc63-9aa8-4435-8e64-d40af8bb4f69.roa (raw, json)
Hash identifier: 4JCZbibKNnRd6pDPtT+0kK6Y+k2ob3tMUlp7hglE18M=
Subject key identifier: 99:AC:DC:C4:00:F6:41:8F:68:18:10:E2:E3:82:E3:D5:7A:23:39:1A
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 738E6D59E064F2987EEAA11AF408F88021DC914C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2ebc63-9aa8-4435-8e64-d40af8bb4f69.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8e:6d:59:e0:64:f2:98:7e:ea:a1:1a:f4:08:f8:80:21:dc:91:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=21de536f9938928495d38d30a3fde50862fba08abb75aa774affe443f7e98269, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:67:bf:00:e6:3e:d3:8f:84:15:cf:f6:0d:
41:bd:69:4e:6a:ed:95:af:04:b5:99:41:f5:53:fc:
0b:96:f4:fd:be:d7:9a:13:44:b6:6c:14:b2:18:a8:
92:69:ba:80:ae:08:ab:5d:97:b6:62:84:fa:09:77:
c6:09:19:1e:82:49:a5:53:33:01:b5:b4:0d:74:f5:
f7:c8:57:12:c8:3c:e4:94:48:44:6c:1f:1d:75:6a:
9d:ad:ea:1c:51:8a:31:43:5a:e9:4a:92:a6:37:9a:
d1:28:6a:cd:35:dc:0e:e2:5b:11:e5:af:80:d9:29:
1b:1b:e7:65:6a:39:7b:ab:d1:d0:e3:44:61:32:1d:
db:4b:6b:39:b0:ab:27:cc:1d:a9:de:dc:f8:e4:29:
34:6c:18:b7:29:ab:81:4a:5d:f1:f9:7e:ee:36:5d:
32:44:4d:90:73:f6:1f:84:1e:fd:c6:f2:3b:c0:43:
d7:17:42:81:e5:74:69:e1:a1:82:06:f8:12:26:ed:
4e:25:1a:82:31:12:54:77:71:38:39:d8:92:10:18:
71:3d:bf:bf:3d:f7:4d:f7:c3:18:9c:8b:e3:9d:bc:
20:19:84:db:8d:5d:20:9a:48:10:12:09:28:7f:dc:
f9:4e:e2:a5:7d:45:ab:43:bf:5c:0e:06:8b:d3:32:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:DC:C4:00:F6:41:8F:68:18:10:E2:E3:82:E3:D5:7A:23:39:1A
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2ebc63-9aa8-4435-8e64-d40af8bb4f69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e900::/40
Signature Algorithm: sha256WithRSAEncryption
88:2c:3c:db:9b:2c:89:f0:b7:6a:2e:5e:e8:97:77:54:a2:cc:
e8:30:e4:cb:40:bb:56:f9:ac:84:c0:91:19:ff:cb:26:5a:e1:
c6:d1:4a:9d:de:36:a6:a0:99:3d:d7:ee:ac:88:60:c9:92:ab:
31:db:7c:c8:6c:b5:09:a6:24:ad:e0:94:e4:35:f0:b4:d3:57:
0f:46:81:f3:a9:e1:48:9e:f7:eb:bf:58:33:57:c8:33:90:fe:
f6:70:dc:2e:c1:ec:7d:76:cd:77:b8:ef:ed:72:4f:f1:90:c2:
72:82:ba:b1:2c:72:82:34:41:72:ea:14:ed:e8:47:c9:62:d4:
68:08:cf:cd:6d:8f:41:f4:94:b4:af:7e:de:38:7b:4f:a3:d2:
92:67:e3:10:6c:19:ca:0d:8b:9f:ca:6b:9e:a1:a7:b8:c4:91:
cf:99:26:12:62:d5:05:29:4b:f6:7d:c9:46:74:fa:0c:3a:6f:
a6:70:f5:eb:9b:ef:67:70:f5:59:f4:5d:64:e1:1a:43:cc:47:
92:8e:e5:0e:e6:7f:29:c9:53:e6:34:23:ff:93:07:15:b6:d4:
ed:d4:bc:2e:8d:a8:79:d7:ce:8d:2e:c5:6d:c7:4a:95:45:c3:
9d:b7:cc:67:a9:c9:dd:93:a5:07:d9:83:6b:7d:c9:be:ef:c5:
c7:a2:92:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net