Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1274c48c-bc97-48b2-9788-337a1a86405c.roa
File: 1274c48c-bc97-48b2-9788-337a1a86405c.roa (raw, json)
Hash identifier: LXFDpDiy+JQ8lX95aJXbMKoZBN0f6R25rCEX74pbAQs=
Subject key identifier: AA:02:7F:7A:BC:7A:FD:FC:46:5A:3F:BF:DE:41:F7:AF:A1:D1:16:89
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0D5374FA971F16954F7CAF13DEC5B40AE1DBE6E5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1274c48c-bc97-48b2-9788-337a1a86405c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:53:74:fa:97:1f:16:95:4f:7c:af:13:de:c5:b4:0a:e1:db:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=141c82ddc58bd1233d1001ce05e7641228f5bda371239c47ae074ff0ffb60874, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:e6:b4:9e:d3:dd:4d:87:47:15:37:6f:e3:
b5:15:cf:52:32:74:b4:be:ba:df:7f:6b:c3:4e:76:
cb:36:ac:d3:27:a1:fb:a4:1f:b4:8f:a6:15:d3:42:
79:5f:21:61:db:a6:84:28:35:4a:b8:92:e7:d2:25:
b4:a4:c4:b7:9d:04:2b:58:72:ce:b9:98:8d:7b:cc:
8c:a8:77:ad:01:c7:ec:9d:d6:e8:08:f5:8f:3b:d2:
26:13:b2:35:b5:24:67:8e:c2:9a:0b:53:f6:36:78:
bc:16:8e:d8:89:6f:f8:1c:8a:9d:44:fe:ef:d3:55:
b8:5d:ba:8c:53:d7:88:44:8c:1c:39:ef:25:88:62:
50:2c:73:a1:73:2d:c5:87:2c:9d:79:19:5f:e8:f0:
de:42:b4:71:5c:ef:2d:66:35:8b:42:5a:23:2c:fa:
22:36:df:04:26:10:e8:31:41:4d:f7:18:bc:70:6c:
af:1b:52:33:28:b5:b3:ff:64:a4:5a:a0:9f:94:5b:
a1:71:33:4b:28:0d:dd:3b:7c:95:b4:0e:4a:89:a1:
3a:2e:95:d6:7b:45:26:c8:df:a8:99:05:e0:01:37:
75:b0:93:08:a4:11:ff:f0:05:81:a4:6a:b6:80:fc:
2a:4d:06:cb:e6:c4:c2:ea:13:be:6c:d9:2d:25:4d:
7c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:02:7F:7A:BC:7A:FD:FC:46:5A:3F:BF:DE:41:F7:AF:A1:D1:16:89
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1274c48c-bc97-48b2-9788-337a1a86405c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:32:10:b1:83:de:f7:9b:ca:18:f4:0e:ab:c0:1e:92:d7:00:
a2:af:ce:56:12:09:5d:e0:7c:ed:00:68:d8:8f:b1:d1:e9:cc:
9f:4e:d9:1c:16:f7:d1:27:a4:d0:e2:aa:9e:b0:5a:17:7c:24:
fc:4e:c5:b7:b2:02:24:53:2b:ed:df:09:a7:bc:6d:ad:ae:51:
9f:fc:dd:d8:b2:35:91:04:4e:14:45:b4:6a:d9:e8:23:2c:db:
d2:b1:ba:cb:90:7b:b4:1b:b0:1c:6e:62:0f:a2:b4:81:d0:72:
2f:09:08:d6:c5:6b:e1:2b:fc:17:75:9e:5e:00:28:e3:5f:45:
b4:40:4a:ce:1a:6a:2b:6d:bd:65:50:dc:a0:b3:b7:40:24:a0:
56:60:22:a8:d4:f3:b2:16:7e:61:46:67:4a:79:a3:69:15:48:
3e:94:cd:30:5a:c4:e4:d9:35:1c:e0:fe:2a:92:84:da:19:21:
87:75:75:88:95:76:3b:99:73:eb:4d:82:19:6f:01:d1:d8:5b:
fc:91:f5:63:c3:a8:35:4e:3e:83:3e:a1:fe:c7:b9:f8:c2:63:
ae:bb:8a:db:cc:9f:14:7f:d9:16:26:bd:fd:a5:6a:9f:b5:94:
36:c0:ab:89:31:b1:aa:15:91:1a:dd:2f:de:a7:9f:a6:cf:fe:
c8:bf:d1:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDVN0+pcfFpVPfK8T3sW0CuHb5uUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDFjODJkZGM1OGJkMTIzM2QxMDAxY2UwNWU3NjQxMjI4
ZjViZGEzNzEyMzljNDdhZTA3NGZmMGZmYjYwODc0MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWAua0ntPdTYdHFTdv47UVz1IydLS+ut9/a8NOdss2rNMn
ofukH7SPphXTQnlfIWHbpoQoNUq4kufSJbSkxLedBCtYcs65mI17zIyod60Bx+yd
1ugI9Y870iYTsjW1JGeOwpoLU/Y2eLwWjtiJb/gcip1E/u/TVbhduoxT14hEjBw5
7yWIYlAsc6FzLcWHLJ15GV/o8N5CtHFc7y1mNYtCWiMs+iI23wQmEOgxQU33GLxw
bK8bUjMotbP/ZKRaoJ+UW6FxM0soDd07fJW0DkqJoTouldZ7RSbI36iZBeABN3Ww
kwikEf/wBYGkaraA/CpNBsvmxMLqE75s2S0lTXy9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqgJ/erx6/fxGWj+/3kH3r6HRFokwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzEyNzRjNDhjLWJjOTctNDhiMi05Nzg4LTMzN2ExYTg2NDA1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIjYDwwDQYJKoZIhvcNAQELBQADggEBACwyELGD3vebyhj0DqvAHpLXAKKv
zlYSCV3gfO0AaNiPsdHpzJ9O2RwW99EnpNDiqp6wWhd8JPxOxbeyAiRTK+3fCae8
ba2uUZ/83diyNZEEThRFtGrZ6CMs29KxusuQe7QbsBxuYg+itIHQci8JCNbFa+Er
/Bd1nl4AKONfRbRASs4aaittvWVQ3KCzt0AkoFZgIqjU87IWfmFGZ0p5o2kVSD6U
zTBaxOTZNRzg/iqShNoZIYd1dYiVdjuZc+tNghlvAdHYW/yR9WPDqDVOPoM+of7H
ufjCY667itvMnxR/2RYmvf2lap+1lDbAq4kxsaoVkRrdL96nn6bP/si/0Q0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:26 2025 by rpki-client