Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
File: fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa (raw, json)
Hash identifier: 3eOfvCZ7mVoy3mUMQQR+2Abv0dKkyBKKF2WtInrGcTE=
Subject key identifier: C8:69:82:5D:4C:79:90:07:FE:76:48:9B:6F:A6:38:7E:E4:3C:51:0C
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 5E0F9A305A179AD6D84E4571565C9CFDA79A0418
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
Signing time: Tue 15 Apr 2025 00:50:07 +0000
ROA not before: Tue 15 Apr 2025 00:50:07 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f000::/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0f:9a:30:5a:17:9a:d6:d8:4e:45:71:56:5c:9c:fd:a7:9a:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Apr 15 00:50:07 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=d6bf819153e58fb1bdae4010e021d7f78ae8913c9044afeafa31a0816d61b690, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:3a:69:92:ff:62:ab:20:35:70:ab:80:fb:
dc:6a:20:c4:c8:2d:9e:5d:13:2a:ba:70:2e:78:4b:
5f:40:a0:9d:3d:fb:2c:d1:f0:a2:34:db:34:be:0d:
53:4e:60:15:08:f1:af:e3:bf:1a:27:d2:5a:b8:54:
c0:19:95:05:33:f5:8a:34:4a:6f:20:75:5d:df:9b:
1b:40:6f:63:93:35:c9:a0:6a:79:bd:c6:89:c0:53:
03:ab:f0:15:84:ee:b7:b8:75:d9:fc:3c:27:e9:40:
c9:b2:aa:37:51:35:2c:e7:ad:76:c4:76:b8:d5:22:
db:d2:38:79:ee:6d:f6:df:c3:b1:b6:25:0c:b3:40:
45:95:2c:ff:56:fb:15:5f:24:f9:56:68:3f:ed:52:
cb:32:54:b0:5d:a8:27:00:1f:36:94:68:30:c4:23:
dd:63:63:e4:7c:3f:b6:ff:7f:62:f7:34:f6:e9:05:
ca:24:f4:6f:b9:a4:95:2c:7e:a8:7f:ad:a1:d8:a6:
7e:76:1d:3c:09:56:54:0e:b5:cd:ec:07:15:18:93:
53:21:e1:e9:c9:72:27:7c:ce:7c:f3:f2:02:fc:56:
ce:aa:5e:f9:2f:64:b9:ba:ec:79:a0:1c:64:03:ec:
6e:98:9d:45:0f:6d:40:07:29:71:f4:8b:69:42:43:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:82:5D:4C:79:90:07:FE:76:48:9B:6F:A6:38:7E:E4:3C:51:0C
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f000::/24
Signature Algorithm: sha256WithRSAEncryption
54:c1:5b:86:bd:86:d0:be:0d:ba:7a:94:2b:82:22:d1:87:da:
89:89:dc:25:65:e7:24:bb:7e:69:e7:d6:62:60:ba:90:5b:57:
fc:81:f2:33:e4:ba:05:3e:64:4a:2e:54:35:d0:3c:a3:97:c6:
96:2a:35:18:55:5d:5c:ff:54:27:e4:86:65:7a:72:9d:98:00:
d8:bd:d2:a3:e2:f1:55:24:50:84:30:86:f6:e5:95:3e:6a:66:
4b:70:2a:2c:f5:1a:f2:3a:77:54:ce:2d:f6:68:f8:7a:64:5e:
9f:47:32:55:4f:17:00:f6:2a:3a:0e:e0:ac:b1:2c:c9:99:30:
b2:43:02:00:c2:1c:3a:88:14:ac:bb:20:64:56:d3:b8:3d:7e:
5d:54:df:da:fa:97:29:9f:2d:b0:2d:14:61:92:97:c9:8e:ac:
c7:07:32:13:c0:d4:fe:91:1d:4a:69:c8:d0:fc:da:82:96:0e:
48:6f:02:f2:89:0b:80:da:24:73:49:d3:bc:7d:12:bd:9e:31:
52:44:5f:d1:56:bb:57:57:7c:22:b2:20:24:aa:45:69:64:92:
6e:1c:42:92:40:f8:6d:08:8e:f2:8b:16:5a:bc:c7:d5:8f:64:
5b:3f:57:5b:eb:89:59:9b:02:ab:4f:c1:53:5a:0c:a3:1d:ea:
47:d9:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net