Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eef31a02-a7ad-4e86-97ff-a86190168351.roa
File: eef31a02-a7ad-4e86-97ff-a86190168351.roa (raw, json)
Hash identifier: F7gDRgqaBui/CE6jWOqmdhDnn7nL9PKSoRrC0JxDt3I=
Subject key identifier: B5:D7:AB:D2:6E:28:86:51:54:88:57:B6:B0:C0:72:B9:90:1B:27:39
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 60DF9127328918A06B79AFF72998E1229155E8DC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eef31a02-a7ad-4e86-97ff-a86190168351.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:85::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:df:91:27:32:89:18:a0:6b:79:af:f7:29:98:e1:22:91:55:e8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=ae8cdffaef6dd02f5a29fe45d3d2071354a04cae46aea023b45203140fd3a367, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:74:72:2f:0b:d0:f6:ac:05:e7:31:76:80:
85:8b:6c:cc:d3:45:96:b8:8a:9f:35:8a:98:c3:f0:
47:2a:a2:99:76:0d:42:7c:ad:ee:9c:a0:4d:df:7f:
fe:c9:e6:d0:ba:e3:45:d9:9a:54:3c:31:01:22:fa:
31:b3:0f:e9:40:51:77:f6:85:d9:43:fe:b9:05:8d:
02:32:d6:dc:2f:85:cd:3f:fb:05:d9:ce:f6:ab:5e:
7f:b2:e4:2a:86:97:65:0b:fb:b7:d6:44:94:2b:70:
4d:a6:ea:41:4e:f7:51:ce:ae:3e:ec:b2:19:0b:f4:
bc:f7:dc:cd:92:72:0a:cd:1f:74:f4:38:e2:90:c9:
f6:4c:ae:57:44:a7:45:2c:4f:28:c2:b7:be:12:da:
f6:f5:46:02:d4:7f:cd:ce:d1:62:48:8b:3b:f2:6e:
c6:7d:2a:42:4c:78:db:45:72:6d:b9:69:2c:4c:ed:
ec:6e:34:e4:63:3e:73:ef:72:ba:b6:f0:cf:0d:ca:
6d:d5:9a:57:e9:a3:c9:4e:0a:36:db:38:0c:f4:a8:
01:9a:3c:bc:14:c3:f5:c3:78:f0:db:dc:ed:8c:b5:
3a:00:30:ab:28:b3:1f:c2:c1:a0:f9:48:be:ef:ae:
a9:96:68:d5:68:2e:40:6f:52:60:2e:1d:c0:92:1f:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D7:AB:D2:6E:28:86:51:54:88:57:B6:B0:C0:72:B9:90:1B:27:39
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eef31a02-a7ad-4e86-97ff-a86190168351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:85::/48
Signature Algorithm: sha256WithRSAEncryption
7e:e5:52:cd:30:73:10:0d:78:d9:53:93:87:64:df:f4:6e:59:
fd:2c:61:df:0c:65:2f:97:71:84:8a:e6:2f:23:7c:7e:fb:3e:
ae:2e:64:a0:89:18:43:44:bf:50:f1:02:ef:75:c9:ee:1d:68:
af:8d:b5:7d:16:af:d8:7f:2c:b8:78:d0:fc:e1:6c:53:14:22:
04:46:a6:cd:2b:0a:9e:ac:2a:7c:67:64:92:48:dd:ab:09:3a:
5f:a1:39:8f:b1:4e:b4:6b:bc:67:17:c8:b1:79:ed:72:62:50:
a4:74:26:4d:f9:ff:51:13:33:80:f1:3a:0e:77:16:76:6e:6a:
43:84:27:bc:ef:eb:15:49:bc:ef:77:e6:9a:4e:b1:0e:ff:9f:
b3:3b:12:9f:4e:8f:f5:ab:2c:d1:04:72:ea:07:04:fc:06:d3:
87:52:c7:10:18:17:b1:c1:31:8d:8e:47:0f:e2:51:72:7c:3e:
b0:f1:4a:bb:90:fb:13:d0:a9:3c:9f:a2:f8:f1:3b:6e:d4:8d:
d4:07:6a:c8:83:20:16:d6:9e:be:8d:51:a4:18:96:8d:39:af:
de:07:64:38:2e:38:16:fa:41:11:70:29:66:99:f6:69:4f:a1:
f8:25:e2:7d:11:62:77:ca:d4:89:07:a0:ae:96:39:e1:be:02:
bd:f1:48:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net