Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ab93a760-7847-474c-be70-5bb33a070942.roa
File: ab93a760-7847-474c-be70-5bb33a070942.roa (raw, json)
Hash identifier: QLVFT4AUSX5yCrenNlR5EgH1G1RllDkRLHT7PbeEwSw=
Subject key identifier: 2B:7F:E6:74:73:7B:A7:17:08:B6:19:2D:51:57:52:A5:71:19:5A:1A
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0BCCF107DA593C147A123B525C5F2582238DCE5F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ab93a760-7847-474c-be70-5bb33a070942.roa
Signing time: Tue 04 Mar 2025 23:00:34 +0000
ROA not before: Tue 04 Mar 2025 23:00:34 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cc:f1:07:da:59:3c:14:7a:12:3b:52:5c:5f:25:82:23:8d:ce:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 4 23:00:34 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:0b:42:d9:5d:95:85:88:68:72:eb:ff:ed:
99:c8:2c:00:47:3e:47:d1:1a:b2:14:5b:5e:ea:12:
e6:52:71:32:6c:d4:42:63:5e:fc:20:5b:29:ab:05:
27:2a:1f:6e:c9:9e:ae:c5:04:cc:94:4c:6c:86:6a:
72:e0:c1:e6:43:6a:5f:14:ff:bc:4d:a5:ac:82:34:
2b:4c:0d:b8:81:76:a4:2f:22:65:be:2b:38:19:0a:
38:8e:a5:9f:c5:9f:ca:d0:3e:29:04:6e:56:c7:0e:
a1:0f:54:03:02:54:a0:e3:3d:f5:14:46:2b:57:4a:
0e:36:62:31:ad:f3:69:ff:2d:58:7d:86:ba:b6:40:
17:b0:d1:e1:c6:f3:11:0c:ac:6e:4a:34:68:ec:0a:
3c:8f:2e:55:1e:78:c3:7e:90:1b:11:94:2e:21:f4:
d2:de:f7:da:a8:89:9a:ef:7d:79:c1:7f:1f:e7:e3:
b3:ca:52:b0:0b:75:07:d5:45:67:66:2e:a0:fb:e7:
8b:01:70:17:4e:30:97:a7:16:c4:c7:74:3c:6c:79:
be:ba:c5:14:56:34:e4:c5:ee:73:a4:ab:09:ca:cf:
16:16:f3:9f:3d:71:2a:4b:75:f6:53:15:c4:6d:41:
5b:97:00:ed:35:62:19:7d:a8:11:df:6f:93:af:9f:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:E6:74:73:7B:A7:17:08:B6:19:2D:51:57:52:A5:71:19:5A:1A
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ab93a760-7847-474c-be70-5bb33a070942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.64.0/20
Signature Algorithm: sha256WithRSAEncryption
45:88:e7:f6:30:10:dd:3b:ce:a4:30:5b:d1:cc:7c:b9:b6:d8:
99:cf:64:16:72:c7:da:43:1d:c2:ae:09:18:1e:07:22:2c:c1:
40:66:7d:d3:ed:ac:cd:67:8a:ad:95:07:bf:7d:10:89:d5:9d:
15:10:79:db:fa:07:82:9f:90:66:b8:76:f7:8d:6c:c6:63:34:
04:53:48:52:6d:7b:a5:3a:b4:8e:c7:db:2a:ee:a6:c1:8f:38:
ed:94:47:08:7f:da:1c:23:30:f4:3b:32:75:6c:26:ad:3b:9a:
af:e9:fa:85:de:84:d2:22:75:51:05:14:7c:39:ef:90:4b:b8:
cd:9d:11:49:56:16:4d:77:89:f7:f5:e4:e5:95:44:ff:c2:8b:
2e:d5:d4:6a:a8:55:13:a7:82:3f:66:18:0f:e0:e1:28:bd:ea:
4c:25:2d:09:b6:40:22:f7:14:5a:d2:13:88:3d:09:04:38:cd:
30:f9:48:48:a7:12:5b:93:7d:03:4e:f5:0b:7f:50:8a:7b:ab:
b4:d0:15:a2:39:f8:90:81:b4:27:8b:2d:a8:76:c6:b0:24:42:
26:2f:ed:c9:ee:f6:41:1c:dd:9f:82:73:6a:7e:7a:26:f5:b6:
ea:62:b6:a2:09:18:93:1b:87:a4:fb:07:8e:7e:d7:12:00:b8:
9b:d6:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:54 2025 by rpki-client