Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa
File: 4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa (raw, json)
Hash identifier: nKfSTBlVMV1C25rRUZbnVp4zLBXycFzuthXe+qxNZPU=
Subject key identifier: 19:72:14:6B:ED:A2:F2:14:94:02:5F:48:81:30:E3:DC:5F:EF:B3:6E
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 71E756EA81F72E87EAADD5446D2EC30E1BAEF851
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa
Signing time: Tue 25 Mar 2025 18:00:14 +0000
ROA not before: Tue 25 Mar 2025 18:00:14 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 12
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e7:56:ea:81:f7:2e:87:ea:ad:d5:44:6d:2e:c3:0e:1b:ae:f8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 25 18:00:14 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:01:b9:ab:58:38:9f:21:28:44:9f:15:2a:
6b:28:dc:1c:ab:d8:7f:82:27:5b:04:de:84:30:34:
38:0c:d8:6f:f8:98:53:ba:fc:95:a5:8c:33:50:04:
47:59:59:62:9f:6b:c2:4c:16:97:a1:aa:ab:f8:52:
90:0f:8c:3e:09:a8:f4:c9:ca:e6:20:ce:37:54:c2:
e6:d0:60:62:3d:6c:93:c8:6a:d7:89:db:c1:f4:e6:
8a:4a:69:64:74:88:34:de:8e:61:f0:b3:18:38:96:
b6:90:74:d8:8d:46:f5:02:8b:05:94:e3:0a:6b:32:
23:f4:02:95:be:9d:7c:f6:27:c9:2a:51:db:ed:4b:
b1:d0:a3:03:c2:07:f9:f5:54:55:92:6d:34:4b:e7:
25:df:cc:45:0c:1c:f2:19:3e:0d:06:43:78:2b:9e:
26:5f:1f:5d:6b:aa:5b:3c:68:16:b9:37:cb:11:71:
d4:63:66:e1:56:0c:e6:8b:b7:e1:73:6b:5b:ff:a7:
6e:97:eb:5f:02:f1:ae:ca:2d:d8:63:bb:83:02:84:
ad:45:f4:39:0b:ce:0f:14:c8:9b:32:39:b9:8d:cc:
20:5f:39:eb:06:5f:c5:cd:71:36:67:24:fa:60:a6:
48:8d:73:a7:d4:4c:9f:89:2e:92:39:00:ef:fa:3e:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:14:6B:ED:A2:F2:14:94:02:5F:48:81:30:E3:DC:5F:EF:B3:6E
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
Signature Algorithm: sha256WithRSAEncryption
49:0f:2d:52:f2:15:c2:4e:f5:ff:9b:47:6e:e6:76:7e:a8:d9:
99:d1:9d:10:bc:67:3c:fe:5d:03:d9:c0:99:ff:20:72:03:2d:
32:2e:38:b2:a3:00:bc:93:2e:57:2d:53:72:f4:ee:32:d6:e9:
ac:1b:c6:54:99:31:7d:df:ee:db:90:1e:39:c1:85:8e:e6:00:
54:20:da:54:7e:21:ab:70:3d:0a:73:4c:e8:e8:f0:fd:54:b3:
18:04:ce:c8:e7:de:c4:3b:eb:b3:f4:3c:af:65:15:95:64:9e:
25:fe:e9:91:db:d0:87:e8:38:08:d7:b6:5e:35:84:6f:6c:0f:
54:1d:35:88:46:1e:05:94:7d:67:72:d7:08:71:d7:c9:71:27:
a7:37:de:38:72:29:04:e8:4b:67:90:a9:3f:a3:f5:82:fe:2c:
e9:c5:a5:c9:c0:3e:70:be:7e:f7:c2:c1:40:fe:b9:14:36:c6:
f4:08:c1:4e:8a:62:94:12:a7:3d:1e:74:d1:f9:7c:65:f8:6c:
87:53:cb:25:4b:65:b1:c2:31:fb:db:a9:1e:a2:24:c2:d9:11:
81:a7:5a:3a:77:7b:92:63:25:1a:0b:ad:ef:54:a1:42:f8:40:
1e:73:35:80:b0:4c:11:ca:9c:fd:ed:dc:e7:e2:29:b3:76:86:
b9:cb:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:52 2025 by rpki-client