Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
File: d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa (raw, json)
Hash identifier: rd39UbhQCMr7qVhjSdrHlIZe8BnQB70qXusKQja7VVI=
Subject key identifier: 1E:64:B9:E0:56:98:98:41:70:09:75:78:2D:E5:7F:69:A3:80:61:03
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 2BE7A10019441D63E7FAAF653E597258A4B29036
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
Signing time: Tue 04 Mar 2025 23:00:05 +0000
ROA not before: Tue 04 Mar 2025 23:00:05 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e7:a1:00:19:44:1d:63:e7:fa:af:65:3e:59:72:58:a4:b2:90:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 4 23:00:05 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:48:f2:75:66:2d:47:51:2e:a8:f3:4a:b1:
a3:8d:0c:06:8d:79:8f:3b:3e:b1:4a:f2:3d:da:dc:
3a:9a:04:13:e6:4a:26:ad:0f:a8:94:1a:5c:f7:0f:
d3:3d:ab:0c:b6:ad:b5:12:24:91:09:d2:b7:11:2b:
b2:d5:a1:0c:97:bc:67:e5:cf:8a:15:e4:e4:3c:14:
aa:94:e4:f4:be:7f:ee:e2:d2:40:ab:95:78:76:2c:
5d:37:13:ba:47:f9:ad:11:8d:8f:30:6c:e4:ff:46:
84:3e:7f:19:e3:c8:a9:dc:66:21:4d:74:e6:89:1e:
bd:29:9f:87:9e:48:a7:0c:9a:ca:72:ab:58:14:a8:
84:9f:62:54:df:77:91:32:f0:44:28:da:d6:6a:52:
f3:1b:50:fd:1b:2c:e0:da:ac:d9:d5:4f:82:a3:37:
bf:e5:9d:b2:2b:8b:76:03:05:a2:11:df:7b:06:15:
9e:35:e3:66:e0:c8:bd:ac:11:bb:e5:22:b6:ab:77:
7a:e4:64:21:15:d0:75:17:fe:46:89:8c:61:50:89:
fe:df:b2:aa:dc:87:31:39:f0:20:38:dd:26:03:8a:
3a:d2:4a:90:91:80:ab:9a:7c:d8:f8:fa:fc:c1:16:
df:7b:07:12:98:93:a9:3f:1a:ab:1b:4e:ed:9a:4c:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:B9:E0:56:98:98:41:70:09:75:78:2D:E5:7F:69:A3:80:61:03
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.52.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a5:50:2d:47:d0:d5:3e:bd:25:3a:31:6c:bf:d2:6c:e8:89:
70:fd:41:d0:e8:47:98:95:2a:90:ac:8a:f2:9a:fc:33:b6:28:
9a:db:ac:73:5e:e3:ba:24:59:dc:ea:77:42:b2:11:02:0e:dd:
ad:85:6e:1c:5e:af:a0:4c:ec:28:4b:8b:54:8e:cf:48:10:e0:
8f:27:42:9d:78:9c:34:4a:96:a9:b6:14:c9:05:22:f4:11:d4:
50:fc:03:05:52:80:7a:d0:5f:95:02:d1:c6:7e:1f:10:3b:a4:
72:9a:9f:87:24:7c:a4:05:61:c0:8e:0a:7e:72:7d:a7:45:7b:
04:b9:30:9c:8c:2e:5d:56:1e:88:40:bc:bb:bd:da:93:68:d6:
1d:a8:18:57:81:18:39:5e:e3:9f:a7:94:2d:fb:9f:23:9f:be:
47:8c:45:88:f3:63:d7:47:71:15:90:d9:4c:a9:99:06:c5:93:
53:1c:3e:53:55:d5:21:22:5e:61:03:e3:0b:80:71:41:e6:72:
44:bf:36:35:e1:48:7e:f5:7f:40:b3:6b:13:b5:0e:48:cf:91:
6a:cf:af:d1:1c:27:a7:2e:c3:01:b5:1f:a4:08:82:bd:08:07:
e2:d7:62:dd:29:7e:bd:9a:20:e1:05:93:e0:8b:80:99:f4:c3:
09:7f:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:47 2025 by rpki-client