Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/19835e5e-11ab-4d91-86b9-82a583ad78dd.roa
File: 19835e5e-11ab-4d91-86b9-82a583ad78dd.roa (raw, json)
Hash identifier: EgTFRgNLnUu2EJNq6xYDT6zrxiOG7Zdgp/ambj1DMNg=
Subject key identifier: 0C:D7:BF:3F:A3:04:DE:4E:F9:AF:DA:1A:92:3D:8D:AD:F0:0C:86:26
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 323138B2C3125AF3AD674C989F45F45D0C9E150E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/19835e5e-11ab-4d91-86b9-82a583ad78dd.roa
Signing time: Tue 04 Mar 2025 23:00:08 +0000
ROA not before: Tue 04 Mar 2025 23:00:08 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:31:38:b2:c3:12:5a:f3:ad:67:4c:98:9f:45:f4:5d:0c:9e:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 4 23:00:08 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:88:32:43:3d:f0:ce:a1:b2:de:bc:1f:24:
ea:88:6e:61:61:e3:f1:db:3f:6d:9a:d5:2a:25:f0:
69:37:f9:8e:a1:ec:81:33:bd:3e:b9:f1:0d:60:d8:
5b:c4:33:ba:bf:84:ef:4d:8f:cf:84:95:e9:72:ce:
9c:9c:6c:ae:5b:f4:f9:02:ec:44:f9:96:ef:0a:3e:
f8:94:7e:ce:69:fa:13:30:7b:aa:59:29:06:bd:26:
34:c8:02:ec:74:68:42:ac:91:b9:bb:b6:90:ec:81:
e9:33:b7:24:c5:25:e6:ea:90:3d:6a:e3:2e:fe:71:
7a:43:24:58:a9:d6:0a:57:27:0b:b3:80:67:6d:f3:
50:76:c1:6c:2a:6e:85:7c:0f:ed:18:10:4c:1b:c3:
a2:ba:26:35:77:eb:5c:20:e6:56:4d:92:95:ec:fb:
e4:25:aa:9c:d3:19:df:0c:85:ef:04:b3:92:ec:5d:
30:d8:24:ad:74:4f:28:44:c6:14:3f:77:dc:6c:2b:
f4:a4:9d:9b:b0:46:d1:8e:6d:d1:a3:07:ea:8e:b3:
f0:63:9b:2c:2e:96:15:c7:26:71:b7:31:13:ae:08:
a7:5c:3c:0b:39:d0:a4:05:a9:f4:32:6c:41:ac:c1:
37:2d:ac:8d:4a:47:10:0e:ed:2b:54:bc:a6:0a:e0:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:BF:3F:A3:04:DE:4E:F9:AF:DA:1A:92:3D:8D:AD:F0:0C:86:26
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/19835e5e-11ab-4d91-86b9-82a583ad78dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:1e:66:b0:0e:4d:c7:10:af:fc:85:3c:87:3d:53:4e:25:97:
31:33:e9:1b:7d:c6:d8:32:74:c9:e3:cc:f5:28:38:54:7d:97:
2a:17:67:31:cf:b4:28:1f:ba:25:83:79:7f:8c:13:54:eb:34:
05:46:64:86:01:f0:0a:c8:7b:8f:20:4a:c6:e7:99:3b:8e:4d:
c8:7d:db:3f:bb:5b:1b:dc:4a:46:ac:29:9a:ea:c5:4d:b0:ea:
77:6e:c4:28:80:9d:7d:4f:4c:3b:4d:01:f8:67:b7:22:72:7c:
92:7c:ef:8c:29:f4:1a:eb:62:4f:25:63:66:ee:6f:31:0f:42:
fa:06:54:51:a3:78:9c:e8:67:ab:af:ce:6a:ac:1d:c9:3f:e8:
f3:da:51:52:64:f0:6f:74:f1:d6:cd:01:07:c5:33:04:2f:48:
97:7f:2e:6c:2c:a8:57:83:b2:b2:51:94:5e:48:02:7a:6e:3a:
c9:51:82:e7:47:3d:8c:6a:ed:17:25:a1:38:4c:86:b9:63:a0:
fd:39:ef:bd:89:ff:b4:40:50:d7:a1:1e:bf:ea:e9:2a:70:d1:
96:b7:0f:44:ff:cc:ee:5d:0e:1e:8d:06:e3:a0:bc:35:44:23:
78:5a:7d:6b:e3:a1:e5:85:80:44:0f:f2:34:02:7b:b4:e7:12:
85:2a:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:10 2025 by rpki-client