Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c68dfd72-b00b-4af0-8b2f-6baf62910f28.roa
File: c68dfd72-b00b-4af0-8b2f-6baf62910f28.roa (raw, json)
Hash identifier: 3Tt4EW41GAAOj0scXAm5RZqfGYMde66rB5yxTyMcQhM=
Subject key identifier: BF:3B:A6:E7:EE:FA:F4:81:09:75:8B:BD:CB:76:C3:C5:7B:74:57:B5
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 4604D7BCDFA1FFA5818473B1D993C8D778C1FE20
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c68dfd72-b00b-4af0-8b2f-6baf62910f28.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:04:d7:bc:df:a1:ff:a5:81:84:73:b1:d9:93:c8:d7:78:c1:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=b26bcb42aeb1fe4585fd8cf10bd17c6235da85774e247a28507146e9236edd13, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:de:4e:c1:77:9c:00:a5:8e:67:c9:88:1e:
2e:8e:45:f2:7a:6c:5e:5f:f4:f2:e2:b7:85:3d:a4:
d3:ae:62:67:d7:a0:4c:a7:7a:81:6e:a0:e3:3d:b3:
73:02:3d:ce:39:dd:fe:35:ab:5d:62:f3:22:2b:45:
5d:31:23:2a:2b:d8:cb:04:9b:30:17:c7:8d:62:f4:
a0:af:6d:47:aa:dc:0d:5a:8c:cd:fa:0f:72:71:e2:
a6:19:4b:c6:50:cc:4a:bb:71:42:ba:cf:a6:05:ff:
ff:5d:ab:40:33:31:b9:dc:4d:41:a4:d0:0d:07:e1:
35:81:26:bc:cd:12:06:a0:46:85:ea:0d:49:90:07:
3d:5a:c3:76:ff:f7:b7:dc:58:4b:3f:0d:f0:8d:a1:
ee:bd:c3:07:b8:d7:8f:13:d2:3c:8d:c4:76:8a:aa:
ac:cb:74:2d:14:3b:5f:aa:4d:90:26:36:92:03:41:
23:83:93:e8:bc:53:f1:2a:f2:c7:76:45:fa:9c:95:
df:4a:79:e9:21:03:df:30:b5:29:1c:ff:03:32:e3:
6d:aa:0a:b2:79:90:84:ff:1d:f1:f3:7e:a8:28:ca:
74:ac:8f:91:0f:38:18:3e:22:59:d3:8c:54:92:66:
76:83:a8:67:01:c1:fc:a1:e3:27:f9:eb:4b:c5:95:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:A6:E7:EE:FA:F4:81:09:75:8B:BD:CB:76:C3:C5:7B:74:57:B5
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c68dfd72-b00b-4af0-8b2f-6baf62910f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.16.0/22
Signature Algorithm: sha256WithRSAEncryption
39:bb:da:b9:15:55:b4:57:34:e1:1b:17:10:8b:ef:42:04:1a:
2a:31:61:04:3f:7e:77:46:ce:3a:14:77:f6:06:56:ba:b1:4c:
41:87:50:b0:08:2b:e6:9d:e1:29:43:4a:73:ed:76:2c:c2:2e:
1f:24:04:a6:bc:79:19:bf:fd:39:35:ae:2d:2a:31:d0:96:17:
88:03:17:44:89:e9:ee:e4:73:26:df:89:bf:1f:34:de:47:35:
2b:75:2c:18:6e:03:db:25:01:6b:34:e4:fb:50:3b:f7:59:76:
ea:2c:42:a4:d9:7c:3a:ff:9b:f7:b6:c0:32:3d:3f:ef:7a:40:
66:56:32:c4:84:65:95:b2:9b:77:cd:a0:d5:ee:92:aa:a7:90:
88:3d:6f:34:ee:c5:96:c8:39:06:8d:7f:46:8b:56:3c:09:a2:
3b:68:ed:56:51:59:aa:01:f9:73:84:e5:b1:98:3d:b2:ed:60:
af:15:93:f9:ed:d6:15:e6:59:41:97:5a:5e:f7:7a:5b:3a:11:
48:d3:c4:75:73:e4:97:23:39:08:9d:37:1f:18:10:bc:28:50:
0c:be:d7:60:15:68:31:ec:ef:1f:d8:42:71:05:e1:00:8a:4e:
fb:6d:d6:47:db:5c:a8:07:65:e3:1b:64:a5:f9:72:ad:4b:5a:
83:d9:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:09 2025 by rpki-client