Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5dc3c8b-7112-480c-8fdf-2cedc5aec383.roa
File: f5dc3c8b-7112-480c-8fdf-2cedc5aec383.roa (raw, json)
Hash identifier: ZWvJlvCu9qhqnBhO1lIhI/4hDC3vJxPPRyoVFmuO/6A=
Subject key identifier: 5D:B0:F6:75:28:D4:51:BE:64:3C:0A:C7:74:15:D7:4E:BB:1D:7B:32
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 133EEF63AAB228F15FA741BCE4D371C7C4AC6266
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5dc3c8b-7112-480c-8fdf-2cedc5aec383.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3e:ef:63:aa:b2:28:f1:5f:a7:41:bc:e4:d3:71:c7:c4:ac:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=12b8ff7d682cba6bd5e3f07bab82a5b36c170351d684d0622e0a627de0834828, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:9c:ca:fa:c9:e8:59:19:92:17:70:b4:08:
00:96:7c:48:17:32:7b:ad:24:1a:12:be:bd:1d:84:
ad:8d:81:bf:11:6e:66:24:32:5f:51:00:d0:8e:bd:
6c:f6:77:db:2e:2a:29:f3:fb:d6:ac:bb:b9:31:8d:
f2:e3:2c:5f:a1:b7:40:79:ec:14:39:9b:24:68:3f:
87:f9:a8:2a:bc:bc:ce:0c:5c:4b:57:31:cd:c7:97:
ee:e6:a8:ac:6a:6b:96:41:9b:86:48:b3:65:8d:a2:
d0:42:d1:d7:09:c0:7a:41:82:6c:d6:bf:78:e5:30:
32:d7:11:8b:d8:c6:78:06:9a:ba:0a:da:30:a2:b3:
58:50:28:6b:4d:83:22:73:f5:e4:aa:c4:dc:0e:45:
f2:a9:a6:db:35:ad:ae:62:56:da:f4:94:9b:9d:f1:
20:0e:fe:36:18:2a:b1:79:81:c4:49:98:f2:43:86:
d4:08:cd:95:c9:b9:12:36:9e:97:38:50:51:0c:ec:
ac:c2:c9:99:6b:34:28:fd:d5:95:65:54:3b:1b:b8:
68:2a:63:71:a5:a4:93:f1:f6:3b:e5:b4:36:9d:87:
b5:1d:4a:17:d7:34:ca:4b:a7:57:8b:b5:89:3f:18:
f9:28:40:8e:ac:87:41:ab:6d:ce:8a:ed:3f:3e:03:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:F6:75:28:D4:51:BE:64:3C:0A:C7:74:15:D7:4E:BB:1D:7B:32
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5dc3c8b-7112-480c-8fdf-2cedc5aec383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e500::/40
Signature Algorithm: sha256WithRSAEncryption
3f:3e:cc:fb:a9:e9:f4:d0:4a:15:33:c3:90:42:21:c8:54:5f:
e7:a9:64:52:19:3b:71:b5:45:54:36:6b:4c:53:ae:0a:9c:1c:
56:af:f6:e0:1f:04:82:3e:e3:72:6b:b6:ae:cb:47:8b:47:d5:
4d:84:3f:33:80:4c:3b:09:c3:71:21:2d:03:49:42:aa:83:68:
e5:e5:38:9a:b8:79:e8:6e:a1:10:f0:b7:95:f9:92:1b:08:b0:
78:b9:8a:10:c8:27:bd:17:e8:aa:92:04:2f:63:11:11:92:81:
ce:e2:ae:38:44:2e:1b:bd:19:d9:f8:72:e9:37:03:b4:77:e8:
0a:4e:55:3c:6d:ae:c4:9f:ef:c3:85:86:66:fb:a9:00:39:16:
38:ed:37:5c:ff:8d:cb:28:c4:91:fa:1e:4c:73:fe:f8:2c:e1:
20:1c:1b:88:fa:d1:93:ec:df:69:53:a4:70:5d:29:21:c1:6b:
d0:9c:7d:06:5b:19:db:7b:66:88:d9:60:5b:24:fd:17:23:89:
4e:c1:79:2b:9f:f9:fb:42:ba:53:ee:30:30:1e:65:88:fe:91:
c4:21:2f:f4:3d:52:cc:32:a0:91:f4:34:f6:d6:78:22:12:cf:
fe:35:0a:c0:8e:b2:5d:5a:ef:1d:50:4a:e9:3c:89:69:e5:32:
77:98:1d:eb
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUEz7vY6qyKPFfp0G85NNxx8SsYmYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMmI4ZmY3ZDY4MmNiYTZiZDVlM2YwN2JhYjgyYTViMzZj
MTcwMzUxZDY4NGQwNjIyZTBhNjI3ZGUwODM0ODI4MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOo5zK+snoWRmSF3C0CACWfEgXMnutJBoSvr0dhK2Ngb8R
bmYkMl9RANCOvWz2d9suKinz+9asu7kxjfLjLF+ht0B57BQ5myRoP4f5qCq8vM4M
XEtXMc3Hl+7mqKxqa5ZBm4ZIs2WNotBC0dcJwHpBgmzWv3jlMDLXEYvYxngGmroK
2jCis1hQKGtNgyJz9eSqxNwORfKppts1ra5iVtr0lJud8SAO/jYYKrF5gcRJmPJD
htQIzZXJuRI2npc4UFEM7KzCyZlrNCj91ZVlVDsbuGgqY3GlpJPx9jvltDadh7Ud
ShfXNMpLp1eLtYk/GPkoQI6sh0Grbc6K7T8+A2s3AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUXbD2dSjUUb5kPArHdBXXTrsdezIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y1ZGMzYzhiLTcxMTItNDgwYy04ZmRmLTJjZWRjNWFlYzM4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPD75TANBgkqhkiG9w0BAQsFAAOCAQEAPz7M+6np9NBKFTPDkEIhyFRf
56lkUhk7cbVFVDZrTFOuCpwcVq/24B8Egj7jcmu2rstHi0fVTYQ/M4BMOwnDcSEt
A0lCqoNo5eU4mrh56G6hEPC3lfmSGwiweLmKEMgnvRfoqpIEL2MREZKBzuKuOEQu
G70Z2fhy6TcDtHfoCk5VPG2uxJ/vw4WGZvupADkWOO03XP+NyyjEkfoeTHP++Czh
IBwbiPrRk+zfaVOkcF0pIcFr0Jx9BlsZ23tmiNlgWyT9FyOJTsF5K5/5+0K6U+4w
MB5liP6RxCEv9D1SzDKgkfQ09tZ4IhLP/jUKwI6yXVrvHVBK6TyJaeUyd5gd6w==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net