Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa
File: dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa (raw, json)
Hash identifier: 9tz1Z+6ZvJhJ2XVMc923qPIUCmSR2+yHtkhFpA7kXFw=
Subject key identifier: BC:EC:AC:32:97:9B:31:8C:BA:9E:EE:88:E1:F2:27:B6:2C:97:14:C3
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1C793455A52F2186EA6A5A53CC716372F44DB95F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa
Signing time: Tue 18 Mar 2025 17:00:13 +0000
ROA not before: Tue 18 Mar 2025 17:00:13 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:79:34:55:a5:2f:21:86:ea:6a:5a:53:cc:71:63:72:f4:4d:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 18 17:00:13 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:d8:a0:2c:65:24:b2:fb:d5:00:2b:60:78:
26:02:05:f0:97:fd:b9:bf:d1:08:18:a1:92:dc:77:
6d:d5:7c:89:5c:84:af:95:db:ee:5b:f2:96:7f:19:
6e:e7:bc:6e:5e:6c:aa:91:08:8c:9e:30:e7:96:1a:
5f:c0:09:e8:7f:22:a8:67:69:cc:66:54:78:b5:f1:
6d:c5:0d:c1:a3:ea:6c:25:0f:a4:93:42:b6:af:e6:
b7:49:68:f9:d0:ee:fa:70:d5:e2:78:20:48:87:14:
00:45:ab:36:e2:43:de:dc:00:f9:7f:dd:77:29:c5:
60:35:c0:32:5a:a7:10:ff:34:a5:60:01:36:dc:b4:
e2:3f:cc:c6:cc:04:f7:ab:fe:c6:8f:2e:39:b8:f0:
0a:b7:4d:0c:c9:8c:94:b5:82:cf:ef:71:2b:d1:a0:
73:10:07:ae:5c:f4:47:e5:7e:c3:a2:94:bc:37:62:
61:d6:c5:70:54:1e:be:0f:06:70:67:2d:98:ad:dd:
e3:02:f0:f2:47:ff:7e:10:09:f6:21:91:a5:56:6e:
86:44:4a:83:6c:d5:0c:6b:51:c5:be:f5:cc:b4:35:
a6:11:1a:42:bc:d0:97:6a:3f:79:38:62:db:cd:04:
a7:1f:41:d7:8c:83:4c:a6:60:e4:ce:bf:19:d1:e0:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:AC:32:97:9B:31:8C:BA:9E:EE:88:E1:F2:27:B6:2C:97:14:C3
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.11.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:a5:b5:43:8e:0a:b1:ef:95:41:39:40:cb:c4:d3:8b:e1:
c1:04:21:ca:04:c6:2e:6d:32:6f:bd:ec:9e:8b:fc:da:19:53:
f5:a2:4e:bd:20:b9:d6:25:29:89:3b:56:62:da:1f:0d:3b:f7:
25:da:34:1b:39:5b:71:9e:49:7c:21:4d:28:97:57:a4:29:0d:
6e:83:14:1f:57:13:d5:fd:77:d4:f6:ed:2f:ce:04:8c:30:a2:
61:ff:ca:b9:f8:3b:49:06:6e:a1:6c:c6:85:c8:af:6a:f5:29:
73:b0:98:40:13:d3:6d:13:a8:af:45:51:11:f8:42:f7:71:99:
fb:1e:fd:33:b3:35:43:16:b4:6e:33:1c:b1:2c:3a:84:ba:fa:
4c:6b:b2:2b:cd:ac:b9:52:a2:f0:14:72:aa:d9:8a:dc:bd:ca:
2e:ca:d2:85:9b:02:e7:e4:1d:8e:71:21:93:ce:a4:d5:91:1e:
a9:bd:29:34:04:71:1f:4e:d1:5e:03:8a:55:ca:a5:0c:27:6a:
b6:c3:23:76:cb:3c:f3:9f:73:15:6c:28:54:12:e0:9a:8e:11:
0f:0f:f6:e2:8f:93:e5:d2:ef:f5:17:36:b9:e0:1d:c8:91:b5:
90:02:6c:b1:a7:a6:48:71:34:b4:24:94:eb:4e:76:e4:be:21:
6a:a2:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:18 2025 by rpki-client