Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa
File: 2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa (raw, json)
Hash identifier: g1fB3Cy8t5fwdJWh/eA3Nl7BzPPtHI8BCY2y25EVLUE=
Subject key identifier: E9:C3:F1:0A:FB:7C:A7:22:6F:3F:11:45:68:59:DF:56:70:6C:DA:11
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0CE0911952EAD114999B57ADC659500F264DA498
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e0:91:19:52:ea:d1:14:99:9b:57:ad:c6:59:50:0f:26:4d:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=aeb6f4eca5b90082fe6a6a35f8c807f782bc121e38bf7a04a5f8bac64b29f479, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:94:84:16:90:f4:d4:34:35:53:f0:78:6e:
66:2c:68:0a:9d:b3:62:f4:6f:f6:d4:98:fa:24:50:
3b:92:fe:d4:4c:fe:45:c7:ff:64:f3:f2:76:53:65:
84:24:79:ef:e1:09:82:b2:40:97:0e:68:5a:1f:3c:
e4:91:14:2d:b4:41:41:c0:97:1e:a8:2f:f8:00:b2:
39:a6:c6:35:38:e0:92:a4:f5:d3:d2:70:1a:ae:09:
fd:70:ae:fb:ac:c8:c5:8c:f5:76:4a:34:80:3e:a8:
8c:e2:66:21:00:e1:f7:1b:90:7b:50:0d:d9:ad:fb:
e4:63:56:5c:00:c0:a7:bd:32:3e:ab:1b:b3:08:25:
f6:5c:64:9d:c8:ec:fd:ca:b8:b8:52:8d:57:99:f3:
f6:26:fc:e6:e7:80:db:46:5f:c3:77:63:8b:87:f4:
59:9c:1c:0d:38:7f:e8:45:80:93:48:7d:1f:bc:37:
e4:14:86:97:d3:2b:6d:0b:29:a7:91:51:83:97:f8:
87:49:ba:ac:07:6b:0f:d1:ed:d6:fb:cf:54:d9:67:
ea:82:40:24:2e:7c:24:32:4c:75:c4:b4:eb:11:97:
33:7e:7c:8d:65:20:98:14:b8:b6:70:14:2c:ef:a0:
06:59:38:05:b7:24:f5:1e:bb:75:2b:7c:84:36:87:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:F1:0A:FB:7C:A7:22:6F:3F:11:45:68:59:DF:56:70:6C:DA:11
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3f:5d:ab:63:9b:55:0f:04:30:63:cc:b0:51:40:33:cc:7b:
e6:35:ac:08:6c:38:01:c0:82:fb:c2:98:56:e6:57:48:c7:27:
5b:9b:e6:b5:fb:65:cb:0e:90:7f:08:bb:39:0f:3f:41:33:b0:
d4:a6:c7:58:19:06:b9:1a:93:3b:26:d0:85:9f:80:89:ba:22:
2c:26:3a:2b:5f:fe:29:bc:aa:bc:46:0d:68:16:cc:47:ea:3a:
99:c1:af:31:2a:df:17:86:17:26:48:7a:a0:06:1e:58:60:a7:
4b:2c:b4:0a:cf:62:e8:7c:e5:a2:49:41:0b:8c:d1:c0:a3:29:
a8:13:ff:b4:7a:d9:fe:09:e0:7c:ca:d6:49:4c:03:5f:d5:d6:
d7:88:cb:0a:3f:31:2f:37:ef:aa:83:4d:1f:80:d0:b4:76:df:
07:54:94:05:cb:61:f1:42:15:60:c8:b5:fe:44:b4:fc:95:6e:
f6:f9:f4:30:3f:5e:f7:55:7a:f5:7e:e3:49:de:4f:50:17:b6:
44:44:77:f0:5c:1c:1c:32:cf:ea:c6:da:00:18:05:0e:09:d7:
99:60:16:3c:c7:9d:58:15:c0:da:5f:be:9f:4d:f3:97:8f:df:
80:dd:f4:ea:14:46:54:6a:ee:c1:7a:b5:4c:af:c5:5b:10:e9:
67:a6:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:23 2025 by rpki-client