Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d6b05e37-7003-4a52-bdba-55defc5294de.roa
File: d6b05e37-7003-4a52-bdba-55defc5294de.roa (raw, json)
Hash identifier: 97uW/eHic1rOosxmnBxsLPYGy0tB57/vHtkgdi+/hWA=
Subject key identifier: CD:A0:35:38:AD:3E:33:15:B9:94:A3:CD:74:90:38:7A:80:1C:41:42
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 23649BF505F5F071C9FB20BF8BDE10BC8E8FE4E4
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d6b05e37-7003-4a52-bdba-55defc5294de.roa
Signing time: Wed 19 Mar 2025 00:37:12 +0000
ROA not before: Wed 19 Mar 2025 00:37:12 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:64:9b:f5:05:f5:f0:71:c9:fb:20:bf:8b:de:10:bc:8e:8f:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 19 00:37:12 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:d6:45:f7:8e:23:0f:b0:0d:23:ef:a1:a9:
5d:81:8d:d1:8f:47:9b:f8:34:90:bd:af:35:a5:96:
c3:47:1f:31:f6:ee:df:96:6d:0c:cd:40:ed:32:ff:
e6:09:c0:06:bd:c0:3f:89:27:ad:fa:bb:d4:89:95:
b8:2a:c1:9d:6f:2a:2b:72:89:ee:ba:5d:f1:1f:d8:
cc:ec:e0:11:24:f8:fb:5b:54:f2:44:24:6c:97:5a:
02:f7:5e:d5:9f:ce:5b:43:af:36:ef:dc:6c:99:79:
d1:2a:ce:4e:6b:d0:ee:46:58:3d:b8:48:4c:57:8d:
ea:17:ff:47:9a:09:78:68:cf:54:f6:90:98:f6:c7:
41:05:26:8e:f6:b5:bf:24:32:3b:19:4d:4e:a7:73:
a0:ce:c4:01:c5:cd:cb:fd:ed:c2:35:4a:c2:ca:fb:
c7:14:b2:d5:12:e1:22:88:5e:ac:9c:70:04:04:2d:
7e:68:4c:eb:ed:01:99:d8:76:d0:cb:45:04:cd:ba:
dd:17:51:32:22:08:a8:0a:64:fd:17:bf:aa:db:a5:
0b:59:07:a0:58:b0:f4:27:5a:2e:80:ad:f3:7e:89:
fa:9e:08:f7:89:c9:fe:81:9b:f2:a1:34:c5:e4:0e:
d9:02:da:8f:df:65:64:17:4a:b1:1c:11:6f:cc:d8:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:35:38:AD:3E:33:15:B9:94:A3:CD:74:90:38:7A:80:1C:41:42
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d6b05e37-7003-4a52-bdba-55defc5294de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.249.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7e:24:89:35:18:53:aa:ff:0d:13:fd:8e:da:0e:4b:6c:87:
c5:a2:6d:09:3a:7c:96:2c:f9:ad:73:4c:1b:a2:5a:87:99:a6:
99:9e:aa:e6:bb:a1:1e:88:85:32:47:b7:f8:d3:26:0c:b4:ed:
be:20:40:70:91:97:95:c1:36:c3:ba:2e:76:9a:50:c8:86:d8:
a7:17:b2:74:49:3a:09:0c:ba:d8:dc:98:cf:78:d0:84:5c:57:
d0:d4:f3:22:9c:3f:6f:d7:e8:65:1b:67:2b:0c:85:bd:c0:c1:
f1:70:18:40:20:97:b5:0d:2d:f2:95:10:b8:a9:d7:44:bd:8c:
16:34:b3:10:79:a1:7d:bd:2e:31:c9:22:01:d8:e5:7b:f1:d2:
6a:28:ad:92:f5:59:66:94:20:12:b6:2b:6d:98:1d:51:49:b6:
87:e1:1e:e4:52:6e:75:d1:b9:7a:ab:34:1d:cd:e4:11:da:00:
b2:bc:df:46:c2:75:1e:bc:f1:f5:7c:cd:0f:11:b9:5a:b7:fa:
32:97:85:b4:7d:fb:ef:46:28:a0:ec:cd:04:e1:5f:16:b4:7b:
8c:46:96:4a:cd:1d:e6:9e:48:55:b9:03:91:bb:f9:c3:0e:cd:
e7:50:25:ad:f9:cd:c8:9c:dd:b0:df:39:38:f3:0a:4c:f0:f2:
da:59:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:16 2025 by rpki-client