Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json)
Hash identifier: lcj74pX/h93lGmb+UTMDkmaLZJMAW3qEt5d2P7k5KJg=
Subject key identifier: 2D:95:4A:19:26:8E:7D:78:1E:14:1D:75:80:E0:98:3A:0B:7A:CE:C8
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 50D2ED07CF7D6D79D2884CEBE97984FBC44D19BC
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d2:ed:07:cf:7d:6d:79:d2:88:4c:eb:e9:79:84:fb:c4:4d:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=c83bffcdcf793573f587978452f063186ad740cf21cddb0586151f3febcbb599, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:5f:24:0b:48:95:0a:c2:33:63:5c:80:48:
5e:f2:53:c6:b3:ce:56:57:78:68:79:00:7d:67:f1:
85:9f:bb:c7:07:f1:4f:71:99:51:8c:e4:e0:88:f6:
9e:17:e6:0e:41:56:3e:03:68:4c:87:60:dd:78:47:
f6:71:f3:be:3d:c6:0a:e6:34:20:8a:c0:f9:d1:77:
f4:68:47:e1:3d:dd:a8:09:30:90:83:8d:3b:09:bc:
8e:ab:41:ab:60:e9:61:14:69:d5:ba:f1:88:6b:c1:
17:5e:dd:62:a7:b1:90:50:df:8c:fa:f6:16:b5:19:
c6:be:af:f2:00:73:a2:3b:c7:6e:33:0c:99:7b:e5:
89:46:92:16:7a:13:0e:6e:b2:b9:ab:84:6d:d6:6e:
61:f7:f7:e7:db:8d:2c:2f:ac:0d:82:8f:7e:75:be:
5a:63:14:c9:4f:5d:ea:94:35:62:fa:d6:99:50:f4:
84:4a:b8:2b:b0:5c:2c:12:99:24:59:07:dc:9f:22:
ed:ff:b7:66:ad:fc:bd:77:d4:6c:79:07:2c:79:1f:
27:b4:2f:e3:df:2b:eb:a7:bf:37:98:e5:49:66:56:
66:2f:5e:83:cc:16:98:24:73:e5:e4:4e:b7:85:fd:
32:69:a5:65:f9:21:3c:db:24:6b:21:a2:f1:96:11:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:95:4A:19:26:8E:7D:78:1E:14:1D:75:80:E0:98:3A:0B:7A:CE:C8
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.9.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b9:d7:40:7f:e7:59:31:76:bb:07:48:8b:6f:f7:b6:3d:f5:
62:fd:5c:a1:8c:e1:6f:cd:1a:71:33:23:65:19:90:76:1f:86:
bf:5f:03:b7:f5:01:16:fb:c8:5d:19:4e:2d:1a:b1:34:73:2f:
dd:d8:39:c1:5f:91:06:90:53:63:56:a6:71:b3:f5:4d:05:50:
b0:ed:9e:ba:6f:07:45:63:51:6e:a3:dc:89:7d:f6:ac:ae:9d:
66:c0:f7:51:0d:3b:f6:cd:9f:03:f8:76:6d:8e:80:b1:bd:5c:
6e:62:48:50:d5:13:e9:ce:57:a9:c1:91:99:a2:a6:cb:aa:87:
ad:fe:1d:34:6b:fb:40:8c:06:c3:7c:32:a3:74:87:f7:40:90:
a8:1a:14:a5:1a:2d:cd:e2:9d:11:a8:ba:e0:6f:1b:5e:ac:51:
63:2a:14:bd:68:18:a6:40:37:9e:9a:a4:9e:94:88:d0:3b:bb:
6d:25:0c:34:c7:0a:de:07:8d:5e:5a:26:11:67:7e:04:38:0b:
5d:37:a7:1b:b8:3b:5c:62:be:f7:92:78:1a:e5:a7:67:1c:0d:
ed:d8:d5:8e:41:cb:7e:11:c1:7b:08:be:35:54:d8:36:85:03:
8f:53:b0:25:5a:74:63:6a:95:20:f7:23:f4:cc:eb:27:d5:68:
bb:06:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:50 2025 by rpki-client