Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa
File: 42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa (raw, json)
Hash identifier: PrKSGr262mALWwtiivbbQMW2+ftFVawaDWOQ25MsUu0=
Subject key identifier: 69:36:FB:9F:79:0D:EF:62:39:9C:A0:7C:AF:C4:ED:E4:C6:C9:B6:3B
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 29B08EB23B1934E3886225E1636548ACC842C498
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa
Signing time: Tue 04 Mar 2025 23:00:47 +0000
ROA not before: Tue 04 Mar 2025 23:00:47 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b0:8e:b2:3b:19:34:e3:88:62:25:e1:63:65:48:ac:c8:42:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 4 23:00:47 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:9d:61:67:65:d5:92:53:4e:29:82:9c:91:
75:a4:6d:3c:68:52:4e:fd:c8:c6:51:e7:ed:2b:d5:
25:b5:9e:bf:c2:5a:f6:79:e4:a8:08:89:c2:e7:74:
d1:a2:10:3e:15:bb:f3:b8:5d:b8:fb:0b:62:40:33:
08:30:22:b6:e9:c6:0e:4b:17:72:0c:fa:0b:5a:92:
ac:97:6f:8d:a3:46:d5:0d:36:5d:b4:39:33:e6:98:
c6:89:9c:45:1d:e0:37:90:f7:82:02:56:d8:e6:77:
10:94:ee:2e:de:71:84:c9:ad:d4:88:f3:43:df:32:
10:17:a2:c0:52:a0:91:51:d5:9a:e1:91:f9:9d:e9:
5f:02:1e:84:f6:7e:0e:d1:91:a5:23:34:e6:29:ba:
31:3f:de:27:1e:65:2c:3d:b8:b2:f8:ca:a5:b8:22:
b9:d5:0d:de:31:b4:34:dc:1f:1d:2d:55:38:82:ed:
b6:40:8a:c0:39:87:6b:c6:a0:25:cc:89:3c:15:22:
ff:72:d8:6c:44:a5:e2:cd:05:02:5b:0a:ce:10:21:
3e:b3:2a:ea:50:95:c2:18:72:f8:f8:ab:d3:1d:03:
08:4b:a3:78:4c:97:41:d5:5e:cc:09:83:5c:5d:b2:
f5:a6:58:f3:89:fb:37:ca:d1:a6:34:99:e9:1b:aa:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:FB:9F:79:0D:EF:62:39:9C:A0:7C:AF:C4:ED:E4:C6:C9:B6:3B
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:3d:db:37:8b:60:95:f4:50:52:54:a3:de:05:e0:97:46:fc:
38:b7:ba:0e:5d:17:a4:b8:19:bc:73:7b:3f:65:0e:8f:9a:68:
e2:48:50:c5:63:94:bb:ff:5d:64:36:18:f7:1a:ac:29:9a:3b:
e8:6f:d4:79:81:ac:33:af:1a:52:ce:e7:c1:6a:32:82:ce:95:
82:d8:28:58:d7:8e:44:f2:aa:41:f5:e9:22:7e:9a:3c:de:e0:
34:af:8e:63:5f:b5:c8:77:be:02:44:52:b0:bb:86:52:65:f4:
7d:fd:c9:27:8b:c2:2b:5a:a1:76:b6:d5:a2:4d:45:24:7f:15:
d8:63:c6:93:45:5e:a7:ff:5f:3b:a9:11:74:3c:77:66:95:ba:
3e:32:73:91:9b:63:86:38:0d:b5:28:0e:ae:3e:07:b5:35:ea:
e1:a0:a1:64:7d:3c:26:e5:bc:f7:81:04:02:30:17:83:7d:92:
aa:7f:50:a0:52:2b:94:13:6a:86:8e:0e:b9:1e:bb:99:40:76:
0b:c4:cd:5f:7c:60:8f:c8:29:ba:ee:b5:79:39:18:a3:3f:22:
44:1a:6e:21:1c:58:4d:e6:39:86:8e:17:ad:66:48:bb:1b:ee:
39:09:bb:71:08:55:3b:e9:16:ad:bf:40:40:3e:6e:5d:61:c7:
6b:35:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:52 2025 by rpki-client