Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/76405039-e005-43ab-826a-f992dc5c0145.roa
File: 76405039-e005-43ab-826a-f992dc5c0145.roa (raw, json)
Hash identifier: 0iyCowpQjEPO+F0eBgeHqOjXag7yAIfCYGRqwIHWz7Y=
Subject key identifier: AD:3F:53:72:AD:DC:19:23:27:63:99:A7:A7:C6:66:DA:6D:CC:04:F3
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 4DA7FC85C410041FD03929A6FDB40AC74610823A
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/76405039-e005-43ab-826a-f992dc5c0145.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a7:fc:85:c4:10:04:1f:d0:39:29:a6:fd:b4:0a:c7:46:10:82:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=1973b1e0b53ff825ea373fb6d1ce970df95a6443a1c729d9c22161097f356098, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:e8:b7:d2:de:4b:a3:50:f3:75:7f:5a:80:
04:56:43:5a:fd:9d:ad:e4:f8:77:48:97:f5:69:af:
80:ba:44:a8:e4:27:f0:e1:4d:b2:13:83:56:9e:5a:
52:d2:ba:d4:42:5b:86:23:76:cf:06:3e:1f:1a:9c:
2b:e7:09:2c:cf:f0:41:fe:9e:e0:af:ea:b4:8e:84:
3f:b6:32:f9:e7:12:dc:1f:a1:02:99:6c:ff:20:0e:
02:bf:87:a2:ed:63:32:71:f0:fc:f1:fa:33:9b:2e:
83:42:60:89:e3:9f:bf:d4:83:6a:56:86:66:b4:44:
58:39:05:8f:68:ce:d9:c4:36:fa:02:8b:e6:ff:f4:
d0:dd:c0:25:78:54:49:ab:de:4f:68:1e:24:0e:b9:
6c:76:14:1e:36:3f:d7:03:05:2b:29:31:c1:1c:5c:
89:08:6f:77:5e:38:3e:21:80:56:ce:98:86:aa:21:
38:e8:d2:30:43:f0:d0:8d:ff:a6:aa:f2:22:56:03:
d5:bf:87:5b:64:46:22:13:53:e6:e8:9d:17:48:db:
f8:3b:f5:54:22:39:f6:99:63:90:e2:c3:59:97:67:
cc:65:66:e3:48:4d:61:46:3d:ba:d9:c1:76:ff:6a:
92:0f:92:6a:2b:3e:74:35:f2:56:4c:4b:82:4e:31:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:53:72:AD:DC:19:23:27:63:99:A7:A7:C6:66:DA:6D:CC:04:F3
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/76405039-e005-43ab-826a-f992dc5c0145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.80.0/20
Signature Algorithm: sha256WithRSAEncryption
59:42:a1:79:65:2a:d1:73:63:66:a4:da:6b:fe:c4:e2:5a:16:
3d:c0:a6:b5:9e:58:2b:6f:8b:2a:4f:3d:a4:a5:94:00:fd:0d:
3f:00:35:bc:48:29:1b:9d:48:6b:f9:38:cb:29:fb:05:01:34:
be:81:0e:ca:83:08:41:32:40:fe:bd:8b:02:1e:b6:fa:57:ac:
ed:d3:43:8e:15:6e:80:20:66:10:d1:fd:90:21:f7:3a:c7:4c:
1c:1f:9d:57:50:ec:4e:84:af:77:5a:b3:ba:9f:e4:16:3b:7f:
02:88:a9:4f:69:b7:71:76:49:5f:a0:53:d4:57:c8:dc:da:f6:
c6:7a:08:44:44:a2:3b:ea:63:c0:60:3b:f4:4c:a5:88:91:b8:
c8:47:8a:67:5a:1d:4c:cf:24:bb:e1:87:61:0e:9b:4d:5c:76:
c6:3f:0d:9b:86:3f:0e:e9:9f:75:ef:53:d7:d4:5c:07:39:01:
b0:02:92:1a:3c:0a:66:17:e8:1d:fe:53:c0:8d:ad:cb:51:5a:
f7:c8:74:4e:4f:03:51:ed:3d:2a:19:4d:3d:9a:92:b6:85:ba:
c4:34:42:20:d5:be:ba:95:fd:f2:b8:b0:35:83:a9:f5:22:c1:
12:bf:9c:b9:71:c6:9b:49:0c:74:14:de:85:78:30:98:a6:de:
12:77:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:51 2025 by rpki-client