Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
File: ecc15691-9732-4fda-b2d1-5ad157c2818e.roa (raw, json)
Hash identifier: oHPYRextjcQwi6huV2DLzSVnPBdXvuu3DAv8liJ5XsI=
Subject key identifier: 90:0C:39:7A:A2:5A:E1:E1:30:04:13:0F:E7:08:A1:DC:F2:67:31:D6
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 3B46C2BA7E44FE1ACA434798DFFF1B07105E0C0E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:46:c2:ba:7e:44:fe:1a:ca:43:47:98:df:ff:1b:07:10:5e:0c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=eba7ca06b9071ba07fba134b207336b727377690101a7c12b5fc792e5be3188e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:c0:56:c4:a8:c6:ac:72:16:ca:73:09:a1:
e4:45:a0:9c:ef:c8:d7:b5:5a:29:e4:2e:34:25:94:
ec:25:4b:5e:89:1a:10:24:72:a5:14:3c:59:d3:76:
df:09:ae:71:22:bc:20:1e:16:d4:1b:a7:b7:60:0d:
d3:b1:26:e3:08:5d:39:09:b5:e5:52:dd:51:fc:c7:
0c:51:c2:0f:c8:6c:e8:0a:22:2a:7f:91:0a:95:cf:
bb:fd:58:86:94:6a:7d:6b:69:da:c0:4f:4f:dd:f0:
04:db:3e:ed:04:87:0e:43:52:9f:26:15:74:65:7c:
f5:d1:34:6e:6e:1e:b6:14:2e:63:2c:03:a1:b4:a6:
78:38:07:cf:a1:a0:28:08:c9:c7:3a:06:e0:56:01:
8f:a8:9f:75:c3:87:07:3c:f3:cb:84:13:52:ee:f9:
c9:0e:e1:d3:24:53:b0:f3:81:31:41:46:19:0f:da:
8d:df:5d:d2:a6:1c:63:4f:35:c1:1c:3b:e0:12:dd:
ab:19:17:d4:7b:df:6b:73:5e:4e:2d:8d:e3:26:cd:
42:1c:8f:17:07:4b:2c:17:63:f4:0c:69:b7:58:47:
63:46:8a:31:cb:4b:a7:f6:2a:df:b9:2d:70:0e:a4:
de:2d:ab:7b:bf:1d:59:91:af:82:c4:7b:56:a9:c2:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:39:7A:A2:5A:E1:E1:30:04:13:0F:E7:08:A1:DC:F2:67:31:D6
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:03:c2:c4:28:5d:c3:5f:02:88:f8:55:30:dd:fd:1d:cb:2b:
67:24:f1:32:e1:9c:ee:12:10:3c:f0:d2:64:2d:45:8f:23:b4:
7d:9a:89:e1:ff:ea:02:07:85:fb:7a:c5:b4:e2:09:51:79:78:
52:54:d0:c4:ff:76:58:a5:d0:c4:d6:21:6b:17:db:29:7b:cb:
be:24:0c:8c:46:d8:4d:3e:0d:e3:a8:bf:b0:f6:d5:2b:a5:10:
89:ba:6c:f5:45:9e:7d:6f:2a:a4:5d:e5:69:5f:34:7f:9e:24:
9c:92:06:a3:a1:aa:5f:46:47:3e:7d:d7:25:66:6f:00:bf:d8:
3a:b7:2e:97:1a:ff:2b:35:2a:fb:16:9f:e3:66:0d:cc:9a:a4:
29:4e:8c:c7:15:04:64:0c:e0:2b:0e:2e:3a:c0:07:2d:af:81:
dc:cd:07:fa:9d:ab:60:45:37:a1:4c:d6:92:bf:30:db:be:cf:
a2:86:5e:2b:52:ed:c0:2b:9e:2a:8f:72:d9:49:58:47:fc:d4:
b3:5b:ac:e6:2e:06:a3:20:d1:b3:87:54:3f:e7:d1:e5:50:e8:
82:e1:37:88:24:5f:ab:94:db:ac:8d:8b:dc:4c:b4:63:14:6e:
68:7d:ff:13:43:2c:aa:94:0a:0e:37:0e:90:7b:a0:cb:ae:76:
10:ef:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:54 2025 by rpki-client