Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa
File: 3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa (raw, json)
Hash identifier: W0iI8YpfPK5mT4xf5KBFmod5nWU7tCgJtH7NsCXD28M=
Subject key identifier: 57:4B:3B:41:2F:F8:F6:32:E4:4E:C0:4E:49:69:0B:51:FB:92:AA:14
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 73E7ED6804C01737F114358FD7B998B890724C7C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa
Signing time: Fri 21 Mar 2025 00:50:21 +0000
ROA not before: Fri 21 Mar 2025 00:50:21 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e7:ed:68:04:c0:17:37:f1:14:35:8f:d7:b9:98:b8:90:72:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 21 00:50:21 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:ac:a3:31:44:ad:18:38:aa:a0:6e:b1:31:
17:23:bb:79:bb:5c:c2:3f:91:0e:22:b1:bd:58:83:
6c:26:0f:a3:50:7d:6c:8e:d3:74:59:cb:c5:50:31:
73:47:8d:db:36:3e:b7:91:e0:34:62:e8:b7:e3:55:
5f:0f:1d:b6:9c:22:89:14:a1:da:c1:04:3d:43:6e:
31:b2:28:c5:0f:bf:5f:2d:70:e6:52:9f:0d:05:bf:
be:e6:1f:99:6c:fd:85:12:3a:e6:2d:09:cb:38:1a:
0b:7b:5e:c9:d0:b3:2c:1a:16:bc:f2:11:e9:a3:ec:
89:df:19:78:d0:be:f7:46:85:e2:37:c7:ed:b1:05:
55:29:2e:81:b3:4c:c6:36:c1:0c:a7:e2:f8:a1:90:
b1:e4:82:6e:05:ff:a5:6f:be:75:78:07:78:3a:df:
87:06:ae:ed:fe:5d:3a:83:ad:9a:af:19:b9:a3:1e:
66:40:e3:c1:e2:3e:69:39:e0:57:2e:8d:bb:84:e4:
6b:88:83:b1:ef:11:59:c6:00:8e:75:e8:9b:12:57:
56:07:36:a7:47:b2:ad:d0:ce:d6:92:34:a5:d3:59:
d6:96:65:7d:e7:c9:d1:81:ab:a5:49:59:a4:01:30:
40:55:17:dd:30:39:25:b6:94:fd:9d:a5:b8:7e:24:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:3B:41:2F:F8:F6:32:E4:4E:C0:4E:49:69:0B:51:FB:92:AA:14
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d1:6e:43:a2:2b:bc:02:f0:e6:03:b4:26:fc:67:95:38:32:
67:da:40:6c:e0:a9:9d:72:89:63:e6:5e:5b:40:8e:00:10:a8:
af:23:19:e8:cb:1b:2f:17:54:fb:24:cd:32:10:2b:60:7e:db:
dd:41:9a:b6:14:54:4c:75:77:00:c7:24:72:3d:ac:5f:3e:32:
8d:ac:4e:81:a2:d6:83:a2:c7:9a:50:31:7e:fd:cf:21:32:44:
df:87:90:29:5c:91:ca:37:00:1a:e2:22:37:bd:fa:56:33:f0:
a5:a9:1c:64:09:5f:a1:b5:96:04:31:fc:1c:91:8e:16:b1:f9:
b2:ed:2e:a0:e8:56:43:6d:1f:9a:4f:f2:9e:4d:b2:7e:6a:b4:
60:55:9a:7b:ac:e8:7b:a4:cc:14:db:06:64:45:bf:cd:9e:ce:
55:5e:a1:64:84:bc:92:9d:b4:31:c7:89:7e:0c:20:b8:0b:91:
e5:25:f6:c9:7d:2d:b3:d5:20:8d:6f:4c:77:a6:b0:f8:98:01:
19:7e:f2:6d:df:d6:a6:20:4c:40:f4:f3:0d:42:37:81:17:a7:
ee:c2:d6:c4:c7:97:1c:52:c8:3a:b8:12:c4:94:c4:20:7f:50:
b8:e0:6d:2f:15:70:98:81:65:34:3a:ff:83:59:2a:fe:98:20:
cc:1a:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:31:34 2025 by rpki-client