Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bff8695d-f830-4f53-a99f-3c59e3b90b32.roa
File: bff8695d-f830-4f53-a99f-3c59e3b90b32.roa (raw, json)
Hash identifier: 5wQW/wTPxauuW0M6pdk2zxXD4QTOf4OhClc0+s/urkU=
Subject key identifier: 5E:AC:28:A8:CB:D4:F0:E5:68:97:28:07:7A:34:F8:47:99:F8:D1:43
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5F73DC8E993EE34A1D1C5B0FF5B4F843D23E834D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bff8695d-f830-4f53-a99f-3c59e3b90b32.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:73:dc:8e:99:3e:e3:4a:1d:1c:5b:0f:f5:b4:f8:43:d2:3e:83:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=a368ad3af89a728de2c720fe9e8269141c8f2575e5e73bdd5de446dd283ba885, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:46:94:4e:32:a0:bf:a5:e6:f8:3c:cf:39:
33:39:8b:d0:9e:64:38:da:d5:f3:75:77:0d:c1:c2:
2b:1c:68:dd:38:5b:53:d6:05:f4:34:22:1f:7b:1b:
16:31:97:14:da:13:fe:f7:1d:db:1a:84:74:11:66:
e1:ef:8e:9a:82:b6:e6:91:d8:67:41:64:67:2b:10:
5e:e8:84:3e:68:94:5a:8c:16:7a:7e:7a:f4:80:e6:
36:d2:e4:a4:91:07:15:1b:00:0c:0f:a5:62:b9:08:
b1:7f:65:93:0a:48:7a:39:bb:08:ec:17:83:68:3a:
97:b1:25:bb:ad:6d:79:1f:0e:1b:6b:32:05:9c:b4:
64:b2:a2:a9:6e:8a:65:28:96:d7:70:d0:af:04:5c:
c4:4f:ac:18:b8:b7:23:73:95:67:ba:7d:47:5d:33:
ee:a4:e5:c5:8f:a5:e9:26:01:da:ef:ad:ba:48:fc:
ab:67:b6:d4:d3:32:47:c7:aa:d3:31:c9:20:6b:a7:
5b:05:52:2c:8a:bf:58:2a:92:dd:62:6a:0b:d7:77:
6a:98:14:e3:60:ad:9a:0f:74:50:67:15:5f:e8:c6:
71:68:fb:02:35:68:b3:23:f4:81:3a:c0:96:9b:6b:
22:1e:ff:0b:28:82:95:e6:83:35:3e:27:30:f6:94:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:28:A8:CB:D4:F0:E5:68:97:28:07:7A:34:F8:47:99:F8:D1:43
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bff8695d-f830-4f53-a99f-3c59e3b90b32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.13.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2f:e8:d7:f1:32:1f:fb:a0:fc:96:81:12:c2:98:4c:2d:01:
93:81:2b:bf:07:33:50:0c:66:93:68:5a:01:9a:62:91:ff:a6:
b4:9b:e4:3e:ee:61:27:69:e1:2f:cc:d4:b2:64:fb:f1:22:cf:
2f:be:9c:17:e7:b4:91:a9:04:9f:7a:5d:08:d8:63:ff:75:38:
44:a6:9d:5b:f2:e4:c2:60:d1:eb:f7:12:96:dc:4b:35:ea:32:
9e:60:23:25:a7:8f:43:a0:29:ba:66:4c:8a:7a:d6:7e:75:bb:
68:71:f9:01:c3:1e:4d:61:d2:74:fe:11:ee:20:16:38:fd:b4:
f0:cb:d2:b0:f9:c9:0f:5e:da:55:b5:5c:aa:66:29:6e:71:63:
bf:aa:1a:16:63:30:4c:d9:de:4c:c3:bc:4d:1a:ea:94:b6:ef:
9f:48:e9:75:33:02:6f:2d:94:19:b7:fd:cc:47:6e:19:ef:4d:
13:2e:e3:e2:9e:d7:c3:ad:42:0a:56:fb:80:2f:33:16:f6:72:
97:04:5f:8f:b9:c5:af:89:52:e3:eb:2d:f3:6b:cc:b4:ba:b9:
bd:95:d0:90:15:42:6b:25:5c:1b:5f:40:2d:02:5b:51:fa:3d:
88:a7:6d:b0:4b:c9:55:b7:8d:2d:8e:01:a2:1b:fc:3b:e1:bd:
fd:0a:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:27 2025 by rpki-client