Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
File: 0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa (raw, json)
Hash identifier: 5NTbY1/Sj+pu6a3Vp28fk5wY4H/EPJm2dRrsI0OsfHo=
Subject key identifier: BE:02:34:E5:7C:59:7F:C6:CE:BA:F7:AA:1E:14:78:38:C6:F1:80:65
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0590FABA80157B9FA8E155BE5F538B7DA7146DF4
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
Signing time: Tue 01 Apr 2025 15:00:12 +0000
ROA not before: Tue 01 Apr 2025 15:00:12 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 801
IP address blocks: 2606:8140::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:90:fa:ba:80:15:7b:9f:a8:e1:55:be:5f:53:8b:7d:a7:14:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 1 15:00:12 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=0fc27619b536716f7a65831c81fbb703b3552e1528c240436fd442c802e0365e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:bb:30:2b:32:92:6d:0f:85:72:81:c3:52:
79:23:32:2c:f2:3e:a2:05:6d:c6:a8:4c:68:3e:59:
0e:37:47:3a:8f:99:d4:87:98:38:8d:35:aa:4c:79:
d0:d2:84:75:2d:a9:a9:e9:b1:fe:48:79:d9:00:07:
6e:24:31:b5:6b:8e:61:e1:76:39:f1:f7:95:a2:f8:
8d:d2:aa:82:70:2b:a3:78:a7:c0:46:aa:09:ad:e7:
5f:ac:db:6d:a6:17:e7:b0:b7:ad:05:9b:7f:15:42:
f5:2d:0f:10:be:71:6a:63:98:8d:63:d7:d5:5f:a4:
58:04:90:a7:10:33:43:18:2b:8a:5b:db:d5:0d:7c:
64:62:14:7a:b5:f2:5e:e2:f6:ed:0e:42:be:aa:a7:
10:d4:96:82:95:1b:bf:4e:dd:03:2f:88:ca:74:9f:
28:82:af:f4:93:67:90:5a:48:ae:0e:43:42:44:20:
dd:27:48:fa:98:a3:60:9e:6d:de:92:f2:bf:0c:8c:
02:ea:09:d0:be:c7:6f:18:e4:6e:a5:08:9f:7f:a6:
dd:76:fe:4d:6a:fc:ab:59:8a:cd:23:56:2b:95:e4:
3b:76:b9:98:cd:6d:78:02:88:b1:79:9a:89:25:00:
bc:e6:dc:f5:c2:17:cc:34:a2:b2:75:3a:99:b1:60:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:02:34:E5:7C:59:7F:C6:CE:BA:F7:AA:1E:14:78:38:C6:F1:80:65
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:8140::/32
Signature Algorithm: sha256WithRSAEncryption
99:c5:26:b9:d9:64:51:ed:42:73:da:e0:35:27:93:94:dc:13:
d2:b1:3f:03:79:b3:c0:d3:29:21:97:3a:40:86:59:65:c1:16:
80:0b:bd:29:90:b4:89:fe:96:86:07:5e:75:4a:cf:d4:b2:eb:
d7:de:5a:92:ec:f8:26:14:31:c4:14:68:ed:78:73:be:9b:f0:
74:b5:1c:1d:63:61:d6:42:3c:0d:42:af:60:9e:d0:1b:1d:55:
9d:4c:ba:4e:9d:68:b5:24:32:d4:b9:5f:25:57:e9:ed:3c:e8:
13:bf:ab:91:d1:b9:7e:9b:db:78:97:2d:89:f2:22:be:2f:a1:
5b:69:2e:36:98:c9:f0:2f:03:bd:e9:9a:29:e1:6b:7c:1e:fe:
0b:0e:63:4c:b6:1f:0d:ae:4a:05:75:15:9f:80:05:ec:18:28:
79:07:6d:dc:a3:75:a8:00:b1:87:1c:af:ed:ad:ef:9d:89:b8:
04:b1:a7:b2:67:da:70:09:a1:be:be:95:ca:db:4a:89:1b:ae:
cc:23:92:ae:05:14:ac:90:ef:0f:32:08:60:ec:1c:d5:f6:53:
d1:2d:66:b4:cc:46:46:cc:59:04:05:58:ad:02:69:29:b2:b9:
3b:05:44:6a:74:59:59:70:80:dc:dd:ca:00:35:16:29:bf:74:
6f:30:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net