Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
File: 0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json)
Hash identifier: 5LdPmqvXZxFVlFp/8dywuEGIttzN01lZM75cSX1+ZhU=
Subject key identifier: 50:A7:84:8E:CD:1E:F9:78:96:9B:84:DB:38:E0:1E:1A:EE:4D:53:14
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 33CCF50DADAE7221BC439D0D7187B58C2F6810FD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
Signing time: Tue 04 Mar 2025 22:50:05 +0000
ROA not before: Tue 04 Mar 2025 22:50:05 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:cc:f5:0d:ad:ae:72:21:bc:43:9d:0d:71:87:b5:8c:2f:68:10:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 4 22:50:05 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:cd:45:ea:45:b9:f2:27:40:d4:93:4b:21:
1c:fb:b4:ab:67:b6:33:36:ee:b0:18:c2:b2:0f:77:
3d:0f:03:6f:05:0a:1d:04:ac:99:de:f0:2b:5f:ae:
76:a9:77:5a:b5:c4:4c:54:1f:3f:7f:60:b4:7e:e1:
8b:9f:b8:38:1a:f8:84:38:77:04:be:2e:0e:b9:41:
6c:3c:04:b0:d2:aa:9f:df:0e:25:09:1e:70:e8:12:
a7:5f:ef:99:29:d5:59:ed:b1:1e:57:cc:47:3b:e7:
a1:5c:31:bc:3c:f6:97:55:77:5f:16:27:7b:e9:ed:
d9:9a:de:dc:26:1a:0f:cf:73:77:c1:a1:45:be:ab:
e2:ea:2e:8b:a7:f5:d0:66:c9:d4:49:b1:4e:f2:ed:
bf:64:23:5e:ad:c9:40:81:d0:96:3f:1f:35:3a:2a:
14:c5:38:b6:f9:14:47:6d:8e:89:7d:54:47:85:e2:
33:b9:14:a2:44:1e:3b:9f:a9:a3:17:95:60:26:ca:
60:ce:a3:c2:95:ec:8a:82:d5:74:9a:d8:00:79:cf:
5c:18:a4:f7:a1:b5:3e:35:9e:23:74:ce:3c:8f:a2:
06:96:2a:0b:4d:45:0a:90:46:57:a1:5f:45:bc:ec:
42:8a:e0:59:4c:5e:c7:43:98:22:fe:5d:1b:da:a5:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A7:84:8E:CD:1E:F9:78:96:9B:84:DB:38:E0:1E:1A:EE:4D:53:14
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:94:7f:d8:a7:77:18:e6:70:2b:8a:aa:db:79:a6:a3:98:c4:
b9:ce:0a:3e:47:b8:fc:a2:79:9a:2e:ea:e9:f3:bd:df:83:fb:
24:e9:2a:10:1a:72:b9:89:14:d0:15:2f:23:e0:74:d6:4e:32:
52:7f:80:65:6e:32:e2:58:bf:5b:95:15:ae:23:1f:d5:95:1c:
d6:25:86:3d:e6:be:01:e8:57:cd:cc:f0:55:bb:0a:80:f1:ae:
42:ee:89:61:3d:92:ba:d7:0d:36:04:4a:ea:8a:cd:05:5a:72:
06:14:03:17:2e:54:0d:4e:99:7b:5e:16:62:25:0f:f7:03:40:
8e:4e:1f:46:3e:6e:b8:0e:00:ff:1d:16:b5:58:b7:49:0d:49:
44:cb:8d:f7:d6:d4:99:41:30:71:36:c5:4f:02:32:79:ae:43:
09:e4:ff:fe:2e:2c:a6:d9:5f:3b:17:41:fc:1d:db:e2:79:3f:
44:43:50:b5:94:1d:26:68:15:a9:ec:b3:0a:e7:de:61:6d:e8:
62:7b:0c:f5:24:cb:9e:d9:40:14:39:ca:11:3f:3a:6a:fe:1a:
4e:c3:5a:22:ae:52:92:e7:82:17:2f:b9:03:04:ed:87:f2:dc:
83:e4:5e:60:86:b9:cf:fa:da:2f:b0:38:81:c0:cd:59:27:8f:
27:30:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:27 2025 by rpki-client