Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa
File: 724c8337-ea3c-48d0-aa37-5e55be799b4e.roa (raw, json)
Hash identifier: UeGmWMdKSy3FSelhKNpXiwtBZZT4SBQHzBhrvbWXA20=
Subject key identifier: C6:88:E3:3A:80:C6:09:AD:64:BD:F2:C0:D4:7E:8F:AA:5E:FA:F4:A5
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 4A6AB752849920E6D3E0FAA7DB96535133DFC6B7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa
Signing time: Mon 17 Mar 2025 15:40:07 +0000
ROA not before: Mon 17 Mar 2025 15:40:07 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6a:b7:52:84:99:20:e6:d3:e0:fa:a7:db:96:53:51:33:df:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 17 15:40:07 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:6f:18:b6:6a:08:de:50:73:97:a6:ca:94:
3e:86:f7:24:67:1e:87:65:52:e5:c1:c6:5b:cc:a9:
88:14:63:ed:c4:0a:37:f5:a1:87:d7:ba:f2:d6:cb:
9c:97:de:7d:1b:25:95:74:d8:5c:65:0c:b3:4e:22:
ec:5d:8b:e8:de:e0:a6:0b:9c:4d:4d:70:e7:f0:2a:
4c:90:0d:32:aa:04:cb:0e:06:f8:ca:4c:90:a9:0e:
e1:fc:43:57:12:63:0d:e1:81:b5:ad:97:eb:fe:1e:
1d:97:9d:9b:3a:06:e9:0a:d5:b0:aa:25:94:20:fc:
9e:05:ab:cc:59:a7:3e:f1:87:3c:19:b5:f9:98:d7:
1f:92:44:b3:81:24:16:19:75:eb:c4:ee:3c:42:25:
fb:a1:0c:2e:0d:2e:65:b6:21:5a:5b:47:bb:95:ae:
10:5f:0a:19:c5:ac:35:0b:25:bd:6b:eb:93:20:4c:
b9:b6:26:ba:0e:d3:4e:c2:d7:f1:78:67:6e:94:60:
0d:48:b3:08:b7:68:d3:5a:a4:1b:a6:64:99:e0:ee:
28:2d:cb:bb:f4:a8:f7:ea:08:46:28:5e:ef:92:09:
31:54:72:0e:71:32:57:b2:16:c4:b3:69:8d:8f:b4:
14:74:87:0e:a8:8c:6a:b6:bd:2d:e2:39:ce:b0:7c:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:E3:3A:80:C6:09:AD:64:BD:F2:C0:D4:7E:8F:AA:5E:FA:F4:A5
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.247.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2b:21:98:ac:f6:31:b2:ba:31:0f:ec:72:de:7f:5b:41:6f:
c2:43:66:07:16:a9:a1:a7:65:bf:67:35:ec:48:63:b9:f4:da:
06:07:b4:ef:6a:63:8e:cc:66:a5:23:0d:2a:70:e1:52:5e:39:
2f:a4:b1:e7:60:52:5d:0f:cc:8b:18:52:c5:e8:8a:9f:86:04:
cc:22:e4:f3:25:56:51:39:0a:55:3e:00:f5:c6:67:31:69:0c:
b8:db:b9:8b:89:3a:9b:63:56:85:e2:d1:e5:9f:01:00:cf:00:
1c:c1:1b:43:c5:f4:f7:08:d2:be:d4:99:92:f3:11:d8:03:c4:
04:97:40:3e:e7:11:47:34:ba:88:04:39:c9:a6:f1:de:a1:8e:
d9:c7:f3:64:37:c6:41:c2:63:e1:37:88:ea:3b:b3:f5:f3:13:
7c:86:74:5c:01:a8:7a:a8:06:7f:6d:8a:96:5e:41:6e:79:6d:
8a:c7:51:78:d0:eb:e1:d2:e7:ea:0e:df:7a:37:00:c6:71:33:
22:4a:2c:4a:20:4f:a5:ef:fe:f8:c4:7b:07:72:f7:61:ed:d5:
bb:58:6f:4d:fd:6d:7d:b6:9e:9f:a4:9b:22:bb:d6:81:14:4d:
5e:71:a7:a1:ed:ed:9d:ad:1a:69:84:8a:e1:be:5c:aa:8e:f4:
c8:41:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:09 2025 by rpki-client