Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1d1dc46-4a3f-466a-9977-5809598cdfe3.roa
File: f1d1dc46-4a3f-466a-9977-5809598cdfe3.roa (raw, json)
Hash identifier: LXmbeG1BTU42uMDBCjwBnjgoJ0qjV8bAojiKr8dLOa8=
Subject key identifier: A5:49:D4:1E:AB:01:AC:54:BF:B3:9B:B0:02:14:D4:F4:76:D9:75:A1
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 52784DDEDFAD183D2700296E29CDEA235A00C9CC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1d1dc46-4a3f-466a-9977-5809598cdfe3.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:552f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:78:4d:de:df:ad:18:3d:27:00:29:6e:29:cd:ea:23:5a:00:c9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=ca3505de54f711e3ddbbb3d47251fd995b37d5cc23653071fd0600a0520f70e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:4f:75:af:6c:37:ef:22:29:c9:81:10:ac:
43:cd:60:2f:27:ab:6b:7c:89:d7:85:fb:c8:2b:df:
f3:45:06:18:52:a1:20:ac:d6:b5:af:7c:cc:e4:88:
4d:ec:a3:cc:af:17:69:4e:b3:48:8b:de:ab:39:4b:
25:ad:32:01:93:37:1e:10:7e:9d:05:ae:36:f7:58:
9e:bb:2b:e1:20:7f:0e:be:f8:43:c3:2f:07:ff:61:
33:d6:6e:7c:5c:cc:0a:10:48:c2:58:cb:f1:69:93:
8e:ac:b0:1d:bf:d2:f2:2a:2f:cf:df:ed:55:63:63:
4d:2a:fc:25:79:c8:11:30:e7:df:14:9c:27:6b:b1:
2e:ac:52:85:98:d2:a8:be:2b:39:38:88:12:f4:b3:
69:04:04:e3:d8:80:49:9e:59:ce:26:be:76:62:d4:
78:97:37:7a:4c:69:74:4b:9f:f6:db:0e:41:e7:e6:
c3:c3:b7:5d:4e:58:06:19:d6:93:39:ec:bd:db:0e:
f9:74:61:d9:f2:18:00:16:b0:f5:91:7b:9b:14:e2:
de:aa:9d:68:64:18:bd:66:d5:a8:72:22:a0:09:35:
d0:cb:9c:78:39:c0:81:96:66:59:64:8a:95:3d:63:
8f:87:b9:ae:4d:c1:2f:0b:08:38:a0:0b:d9:0a:8c:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:D4:1E:AB:01:AC:54:BF:B3:9B:B0:02:14:D4:F4:76:D9:75:A1
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1d1dc46-4a3f-466a-9977-5809598cdfe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:552f::/48
Signature Algorithm: sha256WithRSAEncryption
59:82:13:7c:b3:bf:ce:eb:31:31:c2:bf:6c:15:9c:e9:02:26:
5d:79:4d:7b:5b:c8:f0:a6:f5:f6:5b:95:36:7d:d5:b6:ab:08:
40:28:97:fa:b7:3e:a6:be:0b:a9:74:87:96:27:6d:38:04:18:
a1:de:b3:cf:ad:d9:29:93:b2:ac:a0:20:bf:23:41:c7:0f:5b:
7d:a4:f3:b2:f0:b0:a6:81:e9:12:7f:22:e6:ee:89:49:bc:85:
92:d5:26:fd:0d:84:f2:c8:d0:72:ac:f1:44:1c:23:b0:8e:f5:
ff:07:4c:ad:52:7d:f5:72:53:74:a4:52:80:33:c9:33:31:8a:
38:85:0b:ef:1c:a5:91:b5:6c:8e:08:2c:69:6a:a8:34:e9:a0:
c4:ee:5f:d6:f1:78:ec:d2:7d:0d:f8:1c:4a:d7:2f:03:00:f8:
6a:04:29:dc:e6:c4:21:48:d0:82:16:7d:f4:62:80:7c:84:2b:
d3:0c:4b:37:89:97:5f:8d:1c:17:ef:c2:f0:35:00:ae:f9:50:
0b:30:61:d5:3a:47:42:a2:f2:92:7d:ce:76:43:8e:53:e7:e3:
bf:22:f7:05:c3:fe:02:dc:4a:01:a3:fe:47:ed:2b:4d:09:c6:
82:e0:88:fc:e3:72:a4:a3:c6:2c:ee:d0:ff:7a:85:1f:c9:65:
fe:66:e4:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net