Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/19835e5e-11ab-4d91-86b9-82a583ad78dd.roa
File: 19835e5e-11ab-4d91-86b9-82a583ad78dd.roa (raw, json)
Hash identifier: dwWZt8aBbjxow9Xm4rQlqecrGXB0dRwoGBIHXL6wuEo=
Subject key identifier: B5:7B:11:37:43:56:A6:9F:13:A8:06:0C:37:21:E9:58:1C:92:33:BF
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 6EEDF7B085F53A6A0C10B33009C5CC3BD1BC50A6
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/19835e5e-11ab-4d91-86b9-82a583ad78dd.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ed:f7:b0:85:f5:3a:6a:0c:10:b3:30:09:c5:cc:3b:d1:bc:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=19c06f5d6e70131bec64733fe3930d0dd472caf5d9ff7b8c016310a6e7feefdc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:41:5f:fe:d3:33:0c:13:fe:a0:26:e7:4b:
7f:fb:73:29:5f:5d:53:7a:f9:25:2f:c5:ed:0f:16:
a6:23:48:fd:62:97:4e:47:e2:a5:3b:aa:db:20:62:
62:d2:78:87:63:c0:04:15:0b:ed:03:c6:95:cc:96:
c6:64:11:42:cc:ce:ac:c2:2e:49:23:50:e8:ae:c6:
f0:c4:ee:81:74:38:a8:1b:27:87:88:90:4b:b6:e3:
8f:ee:7f:12:06:61:e0:23:f5:a8:f1:7c:2b:0e:fd:
ea:12:0e:c9:1f:d3:38:c5:1b:4a:d9:f0:46:fa:86:
9a:c3:e4:51:4e:26:20:1b:bc:83:c8:08:bc:0e:71:
e0:e8:02:97:cd:0f:58:05:8e:90:d6:f8:fe:a7:3c:
4a:a6:35:37:16:2e:f8:0f:54:ed:21:5e:7f:8d:55:
7d:d3:ae:ad:71:6f:df:79:fb:32:84:70:f2:e2:06:
75:71:39:2d:91:6b:90:e1:2c:43:15:e6:90:1f:59:
01:47:f5:d1:a0:84:15:7f:6c:6f:74:8c:75:b9:c4:
95:df:46:7f:3f:a2:e4:a1:86:86:57:fd:80:21:1e:
d5:a9:f5:d4:4e:ce:b1:39:d7:f0:3e:60:0a:45:93:
af:60:dc:e7:2d:40:ad:4b:b1:a0:ae:20:6f:56:5b:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:11:37:43:56:A6:9F:13:A8:06:0C:37:21:E9:58:1C:92:33:BF
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/19835e5e-11ab-4d91-86b9-82a583ad78dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:df:20:1a:11:7f:1d:19:6a:fa:6a:90:25:4c:9f:7d:ba:99:
84:89:a1:c2:bd:02:cd:cc:8c:1e:e2:b8:ad:ab:0f:bc:25:5a:
8c:a8:9f:12:4d:99:0d:6d:e8:11:0e:a4:55:f2:7c:0e:29:c6:
23:93:62:cf:e2:30:43:a2:24:da:80:b7:fc:2a:99:a2:1a:2c:
28:a4:6e:fc:1b:ad:56:2a:f4:78:a7:31:a1:5e:5e:80:20:74:
be:8b:24:e2:30:8a:10:b5:cd:78:30:2b:d7:15:f4:ab:9c:4d:
29:de:b7:78:71:31:4b:f5:d3:fb:fc:29:04:c1:8f:24:17:57:
33:1d:e8:b6:9f:15:b7:65:21:fa:26:25:12:92:e5:21:a1:8b:
3e:83:0f:a8:a9:b4:16:6a:c8:18:dd:1f:11:b3:08:a7:46:56:
fe:ee:aa:2f:df:f7:da:76:2a:1e:0c:0a:d1:f6:7e:c1:61:da:
71:c2:2c:e2:ca:27:88:e8:f1:14:a3:6d:ff:25:fe:06:9c:82:
d4:be:d2:6f:5f:93:26:4b:6b:b5:b5:bb:48:3c:41:db:37:e4:
8e:ee:9a:65:f7:ff:1a:82:63:76:91:88:30:19:35:8c:23:b4:
f3:23:28:ec:6d:de:c0:ce:38:bd:11:29:b0:e3:21:da:41:0f:
c3:4a:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:04 2025 by rpki-client