Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
File: 0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json)
Hash identifier: Fkr3SsFXSUe6snqIUqtFm4ArC9xM1utQd4TZKimDbFQ=
Subject key identifier: 0F:C7:83:DD:94:95:3B:1D:01:F0:F2:1D:A3:50:DB:0E:25:E3:FC:B6
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 21F6FA003A3CAA8C717587B180EA55C6ED5DBB7C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
Signing time: Mon 31 Mar 2025 18:30:15 +0000
ROA not before: Mon 31 Mar 2025 18:30:15 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f6:fa:00:3a:3c:aa:8c:71:75:87:b1:80:ea:55:c6:ed:5d:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:30:15 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=eeabfc4585f315e3d7d402ebc70cf34181f92e22e9685c6dd2c573437a58a819, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:b6:74:42:98:3b:33:b9:d8:b6:ba:54:4c:
13:63:bc:27:c3:f2:cc:e2:e4:3f:a4:dd:d4:dc:22:
86:5f:5e:35:c5:24:2b:b7:6f:18:58:cb:0d:bf:7b:
be:e9:d6:11:d3:48:c0:70:ab:e8:10:fe:c7:ff:cb:
35:f2:55:0f:31:36:84:37:c8:fd:96:0b:db:88:fb:
7e:2f:32:d0:91:42:f0:0e:98:81:0e:62:74:0a:72:
f7:59:9a:6b:f1:d4:b0:61:67:d1:71:fe:e5:1e:db:
2d:55:26:70:7e:d6:c2:f6:3c:e1:bd:83:fe:3b:e0:
bd:5e:7e:d2:29:db:e2:d0:6a:ae:03:e6:06:81:f8:
29:31:a0:56:4a:9a:a6:50:79:5c:1c:72:e8:df:a4:
b4:89:f3:c8:62:f5:28:83:ea:4d:2d:5b:80:83:cb:
20:ef:4d:2f:f0:8e:a3:6c:1f:94:5b:14:33:40:55:
b7:fe:ec:02:05:2b:d7:f2:76:a6:2e:00:5e:9c:0f:
e7:f8:e3:6a:1d:c4:53:4b:cb:9d:53:87:85:e2:ba:
f2:32:3e:bc:a7:9f:e8:ab:a9:f8:05:5f:a8:b3:94:
7a:52:d0:3a:4e:62:96:35:ac:fa:a3:f3:85:be:ab:
99:fb:31:fe:92:2e:bb:37:61:88:2e:0f:08:ab:c8:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:83:DD:94:95:3B:1D:01:F0:F2:1D:A3:50:DB:0E:25:E3:FC:B6
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.2.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6c:74:d1:6d:fb:a7:d6:90:a6:6c:ba:e5:64:ac:65:85:14:
fb:8f:3e:92:b8:05:5e:7b:9c:ed:16:89:47:72:b9:e8:44:88:
74:a0:cd:58:9e:a7:95:2c:cd:9f:29:bb:1f:26:df:b9:16:22:
c4:bb:c6:7d:37:56:85:e7:74:83:2b:e6:4d:05:f1:ec:4e:98:
d0:bb:50:41:88:a3:a9:e3:61:9d:d4:e5:75:5b:05:cd:2c:3f:
56:f1:c5:a9:f1:a3:d9:64:64:0b:c4:fb:49:26:c4:13:6c:20:
0d:d4:91:48:ab:01:2f:1f:c8:fd:7a:d3:b7:08:6d:63:8d:b1:
7f:00:0f:77:9c:1d:13:73:8a:56:11:d5:2a:62:83:b8:da:a0:
2c:2c:b9:97:1f:bd:57:48:e8:e5:40:64:8c:d2:ce:70:22:54:
d6:7c:b4:49:f8:42:22:53:95:64:cb:11:60:30:71:59:cb:a9:
fe:9e:c5:fc:3b:45:08:48:ae:df:32:8c:d2:e3:ec:46:3c:88:
21:cf:9b:6a:e0:33:4e:ae:4a:d5:db:ce:43:f3:4e:ac:5a:25:
a7:9b:1d:df:5d:a8:01:e8:89:79:44:a1:0c:c1:bb:70:a7:53:
3d:4a:90:84:a1:a8:f0:4d:99:1a:3b:9e:a5:61:d5:5e:4a:69:
6e:5e:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net