Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/21a39397-e252-40ea-8610-34b22600667c.roa
File: 21a39397-e252-40ea-8610-34b22600667c.roa (raw, json)
Hash identifier: pGZRFOs5DPmKz13TZwgJz+0UrWGZJPGMXEui8lntF+o=
Subject key identifier: 7F:6B:5E:12:05:CC:BE:C0:34:A6:7F:53:CC:FB:F3:43:22:21:62:52
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 7A5D2BAB88020D6308064C36913A1FF198EE475A
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/21a39397-e252-40ea-8610-34b22600667c.roa
Signing time: Thu 30 Jan 2025 00:00:00 +0000
ROA not before: Thu 30 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5d:2b:ab:88:02:0d:63:08:06:4c:36:91:3a:1f:f1:98:ee:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 30 00:00:00 2025 GMT
Not After : Mar 6 23:59:59 2025 GMT
Subject: serialNumber=ccf50f46b86dbd70c4a9b6b155945e1bcfb70654e36ff80280837cf0ad051e4b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:5d:15:df:0b:bb:0a:39:8e:b8:13:e8:49:
8a:35:08:62:82:fa:f1:79:eb:0d:cc:d9:cc:b0:1c:
18:58:0d:a1:01:9a:77:8e:45:91:e6:07:af:73:3b:
f3:77:b2:77:37:a9:d1:b6:cf:36:bd:83:4c:f2:8c:
58:dd:1b:ec:45:53:b2:a6:86:9f:db:1a:e7:e7:13:
ef:8c:14:d3:36:f1:62:70:51:c4:e9:34:28:9d:66:
ec:53:1e:4f:ed:9c:c9:e5:18:ff:30:81:d5:c8:10:
3c:8c:b4:7f:24:90:17:cb:75:d9:7a:a0:a7:76:bf:
9f:ff:2c:c9:34:95:7a:69:02:8e:06:7a:0b:1b:4a:
6c:4e:a8:e8:56:6b:fd:21:c8:1e:e7:d4:f0:b3:46:
ed:93:02:9f:a9:63:64:de:04:42:42:10:a8:dc:8d:
8a:7d:22:77:4e:7f:d4:e4:3e:29:a1:91:c8:6e:6e:
ab:7d:82:e2:bb:40:2e:25:30:53:03:b5:39:bd:7e:
92:b2:03:9d:ac:fd:aa:bf:c5:53:57:24:96:c3:5b:
5f:b6:3f:73:e2:b1:71:40:6c:90:3a:ce:a1:62:ab:
01:81:64:f6:a5:51:a3:d5:f6:a9:13:fb:74:42:96:
fd:3e:e4:5b:2c:bf:86:a9:4e:ff:ea:66:a8:9d:04:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:5E:12:05:CC:BE:C0:34:A6:7F:53:CC:FB:F3:43:22:21:62:52
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/21a39397-e252-40ea-8610-34b22600667c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.243.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2d:c6:5c:cd:be:b3:d2:99:48:3d:6e:ac:ac:ca:c9:53:cd:
de:9a:92:25:88:f7:7a:8e:59:6f:85:d5:33:6a:9c:a3:66:92:
50:47:a5:0d:cd:d6:6d:48:50:e4:b9:48:5f:d0:f3:90:21:4e:
62:90:ef:35:11:9a:9e:fd:df:b3:bd:1b:c4:47:4d:65:4e:3a:
80:10:e5:0c:32:31:94:d5:ea:71:22:6f:fe:75:00:1f:53:53:
c9:4e:a0:9e:65:90:12:73:8f:cc:4c:27:74:96:93:72:43:7f:
63:a1:37:ee:e7:3a:c1:78:25:d0:cf:a4:11:29:c5:38:16:41:
70:cc:a0:b3:6f:c1:65:6f:95:19:d6:cb:ae:aa:d8:f5:87:5b:
6c:7f:b1:07:74:17:16:20:77:f8:da:70:56:79:21:b5:8d:5a:
74:36:98:9a:95:cd:28:73:ed:39:23:c6:41:33:cc:a9:70:da:
78:22:99:28:67:18:2e:2a:d5:67:8b:9d:f3:a7:db:a3:b9:7e:
d8:05:1f:81:fe:2b:13:bb:db:fc:e6:4b:a5:f8:53:f4:6f:64:
65:7a:4d:00:e9:0a:0a:32:82:ed:f5:33:5a:4f:05:b6:c4:16:
eb:a3:69:a2:b1:09:49:c8:8f:69:b1:82:f6:57:f1:20:58:04:
9c:9a:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:15 2025 by rpki-client