Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cdad6230-93c1-41d7-8f3f-21a5e5eec94a.roa
File: cdad6230-93c1-41d7-8f3f-21a5e5eec94a.roa (raw, json)
Hash identifier: 7iurFbX5OpNEJ2YDhnnbo09ls5O7FxyYOZcsbBhd4KQ=
Subject key identifier: 5A:AC:8F:79:F8:1F:8A:AF:56:5F:1D:25:40:B5:4C:F2:DB:0D:7B:89
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 70A6231F7C43D1C88136EAD8CDF9183FF5484F7F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cdad6230-93c1-41d7-8f3f-21a5e5eec94a.roa
Signing time: Tue 04 Mar 2025 23:00:35 +0000
ROA not before: Tue 04 Mar 2025 23:00:35 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a6:23:1f:7c:43:d1:c8:81:36:ea:d8:cd:f9:18:3f:f5:48:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 4 23:00:35 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:37:0e:44:fc:71:ef:62:be:0a:4a:9d:6c:
d0:c7:93:7b:f1:ae:22:11:fd:92:f0:70:77:09:b9:
d1:d7:d9:e9:a7:ea:b3:af:8c:65:42:85:95:43:32:
ac:94:24:2b:76:81:f0:a0:09:de:c1:68:4c:8e:db:
24:42:a4:7b:7f:19:6f:a0:64:0d:5f:30:c5:13:17:
75:4c:bb:1c:50:c9:f7:82:d8:0d:2b:77:06:f3:f6:
71:f2:4c:c1:d6:f2:6b:28:7e:3f:7d:00:ff:81:c9:
6e:46:ca:6a:fd:f2:e0:b6:8d:4f:b2:b5:65:19:53:
d3:e0:31:0c:b6:5e:2d:9c:35:83:8f:29:8a:93:87:
83:3a:1c:36:76:90:e2:33:fc:5c:ab:23:67:0c:d4:
64:e8:22:c1:c1:a5:b8:4d:20:78:73:fc:c8:7e:d5:
cc:06:ac:56:08:65:b6:80:66:68:ea:ed:07:b3:8b:
63:57:af:0f:0d:6d:cf:97:41:86:be:89:26:c7:b1:
df:57:ac:32:85:8e:60:8a:e0:02:86:a7:3c:31:e8:
2f:f3:6f:cd:c7:5f:94:09:9e:be:f5:5b:ab:07:56:
2f:fc:69:a0:11:a2:5c:23:0a:8c:f4:09:6e:54:3a:
81:c4:8f:ce:6c:85:bf:1e:38:e7:db:31:ea:0d:10:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:8F:79:F8:1F:8A:AF:56:5F:1D:25:40:B5:4C:F2:DB:0D:7B:89
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cdad6230-93c1-41d7-8f3f-21a5e5eec94a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.96.0/22
Signature Algorithm: sha256WithRSAEncryption
83:2e:55:37:38:3a:49:08:6a:78:3b:3f:0d:ac:ff:2d:94:d3:
c8:0f:8a:3b:b7:f2:54:a3:9a:54:a5:fc:b0:6a:98:75:d7:ff:
45:95:3d:96:17:f1:09:e1:64:6f:4e:27:f1:3a:3b:70:61:39:
5a:8f:e6:f0:34:ce:ce:b2:2f:46:80:73:f7:7a:1f:22:4c:b9:
43:2f:7f:a6:6f:28:34:72:0a:f3:de:ef:96:e5:78:3f:fc:f1:
bf:66:61:54:34:67:09:81:87:2f:3a:08:00:ef:a3:77:9f:18:
f0:67:ab:68:b9:e3:f9:3a:69:f2:ea:da:8d:8e:a4:b7:e3:8a:
7c:63:fb:d9:b7:8f:82:07:f5:39:e1:9c:e2:c1:1b:4b:ae:46:
e2:94:46:ba:6f:56:ff:96:cc:df:12:89:61:35:13:54:ee:e8:
7b:92:ff:71:38:d2:49:b0:ce:fa:b7:66:85:71:97:ec:d3:ef:
aa:a2:e6:5d:6c:c4:3e:11:4e:13:e9:20:3f:e7:3f:64:f8:4c:
aa:9a:9b:0b:35:7c:e4:b8:ba:5e:e0:0b:e8:c2:3b:0d:c3:a0:
83:88:ca:4e:c8:e5:b5:f9:07:bc:b3:41:e2:40:46:0f:d0:6f:
a2:63:4b:c8:b3:68:6c:91:a3:a3:98:a0:6f:fc:af:c6:ac:a6:
27:47:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:45 2025 by rpki-client