Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa
File: 9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa (raw, json)
Hash identifier: xkZHJJdlh8383DKww0QlvIWScg/GZ2HK7oEKOn9lPcE=
Subject key identifier: CD:DC:17:BE:0D:16:C4:9D:29:97:C6:29:28:15:7C:FB:85:19:CC:81
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 04DD0548A4D2A5D42303085CE8A09C4387B3FB2F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:dd:05:48:a4:d2:a5:d4:23:03:08:5c:e8:a0:9c:43:87:b3:fb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=4756f63d0334c28d4e2f5cadcc06b28e7fc4a646a4cc486ba1b14a381603cbf0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:af:5a:4f:89:5b:43:a5:da:1b:fc:da:c3:
38:dd:07:e2:17:11:00:85:f8:ab:56:0c:1e:83:47:
65:44:6d:b2:2a:ca:e0:1d:41:38:0b:e6:e2:a9:3d:
63:e2:98:9c:e8:aa:f6:de:0d:25:b4:09:8c:5e:24:
5f:4c:3e:e6:b7:6e:ae:56:da:33:dc:d9:81:a4:2a:
fa:db:a3:47:15:60:5d:56:33:69:d3:c6:94:1b:78:
2c:47:6e:63:44:4c:53:48:83:db:ea:d9:52:39:f7:
e1:80:62:f0:72:ca:e1:f6:bd:79:6a:61:6d:a5:31:
5c:fd:15:dd:02:fc:ac:fb:f6:16:89:11:be:55:95:
a7:51:bc:cb:58:e7:24:57:3e:38:93:37:16:76:ce:
64:03:f9:a8:5a:42:a7:56:d9:81:fc:9d:46:ca:29:
77:f8:d5:f2:79:94:78:8e:96:aa:61:ac:65:62:56:
eb:5f:c5:0e:b5:9e:77:29:52:b1:83:96:c2:e3:4f:
65:01:45:0b:45:46:bc:6e:9a:69:4a:ee:e2:e5:9a:
52:ba:d3:a9:e9:89:59:a9:df:8b:fd:af:28:f7:3a:
b9:c2:cc:d3:67:7c:df:fa:bd:d8:bb:41:2c:68:a2:
34:5a:4c:2d:25:16:6a:d2:3b:f7:a7:08:20:47:19:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DC:17:BE:0D:16:C4:9D:29:97:C6:29:28:15:7C:FB:85:19:CC:81
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.11.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fa:e3:c2:89:f3:d9:10:3b:7b:10:c7:ec:e4:be:d9:81:d0:
95:cc:62:62:99:e6:41:6c:f6:67:a0:69:49:43:7e:9a:d5:ab:
57:f5:90:2e:84:13:89:59:73:dd:70:62:df:c0:f9:50:d3:37:
d0:1e:ef:6a:1c:df:f9:6c:49:2e:d7:fa:4e:82:7f:22:99:1b:
52:54:f0:b8:b7:b7:67:50:9e:2a:64:83:59:d1:54:3f:85:27:
ad:11:9e:d6:ec:cd:19:2f:18:04:2a:fd:da:af:14:50:3c:c0:
1d:ff:39:a9:a5:66:8f:98:30:55:28:4e:22:50:93:d8:f0:39:
30:21:76:e8:a9:15:db:f8:47:81:68:59:47:44:ab:fb:7e:f1:
08:f4:c8:b6:3a:27:70:b0:2b:00:41:ea:0f:7d:2a:c7:b8:c3:
df:05:e1:c5:e5:b0:56:cd:96:94:a1:21:1d:a7:a0:3c:9b:a2:
67:4e:ba:0f:66:c0:e9:69:7b:bd:86:f4:5c:48:e8:52:93:eb:
fc:80:a9:eb:81:21:89:b5:44:30:99:0a:d0:ac:6c:ce:37:76:
1d:e3:6e:90:3f:33:0f:05:f9:1d:fd:08:74:71:99:16:ae:5e:
9d:1c:c2:54:1a:06:b5:21:9b:c2:44:ba:d6:9b:46:d4:90:b8:
5b:15:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:54:42 2025 by rpki-client