Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa
File: 10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa (raw, json)
Hash identifier: yEu0aDt32VO+qJbaWYmBD+oaszuIM5ROJRpI3p2aN+U=
Subject key identifier: BC:F5:12:98:2B:14:A7:62:8A:C6:76:D2:06:52:64:7A:7E:27:8D:F4
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0E1F4FB11FA2C47AF840D551EB4A55A6B101C5E9
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa
Signing time: Tue 15 Apr 2025 00:50:31 +0000
ROA not before: Tue 15 Apr 2025 00:50:31 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1f:4f:b1:1f:a2:c4:7a:f8:40:d5:51:eb:4a:55:a6:b1:01:c5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 15 00:50:31 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=dd103aec31e03968d9c34b787f0949ccf899b6e256f1f5a36a7c6574978287ae, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:85:82:25:02:d8:28:7a:56:b1:01:d5:f8:
7b:c8:82:b2:b5:f9:19:d8:d9:6d:b3:41:79:b1:d5:
ac:f8:14:aa:c1:06:fc:7b:c9:c4:ff:03:90:ff:c2:
97:99:fe:17:dd:7f:cc:2a:b7:c8:4e:ab:a3:7a:90:
9b:a0:89:77:c1:d7:24:2f:30:0c:32:05:87:01:29:
2c:90:29:d7:d9:4f:b6:63:40:3b:e2:07:b5:a2:2f:
29:f3:8b:0b:78:d7:e6:84:b1:c9:c2:03:15:c9:b1:
6d:67:14:a6:a2:05:99:29:7b:ed:b0:1e:8f:0f:ed:
95:ee:b0:fa:77:17:5f:66:f0:28:9f:6f:0c:60:c1:
62:3f:62:d0:58:ed:a1:80:8d:d6:e8:f6:75:d7:30:
89:6e:1f:1e:2b:dc:fc:52:41:20:30:66:01:18:0b:
02:df:58:5f:84:3e:9d:b3:87:11:7c:96:a7:9e:48:
1b:01:9b:cb:6c:90:78:0c:74:22:b3:0c:05:62:0e:
28:b3:3c:63:da:f3:c9:02:30:0f:c3:db:08:e8:a1:
c1:cb:64:db:4f:35:e1:b6:8c:d6:56:16:33:12:8d:
79:ce:eb:2d:55:4d:f3:b1:75:78:e3:5f:7f:da:22:
77:a0:cb:08:7a:ce:0a:d2:96:0e:44:0b:35:d9:26:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F5:12:98:2B:14:A7:62:8A:C6:76:D2:06:52:64:7A:7E:27:8D:F4
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:28:ca:b4:cb:d4:de:b5:81:1b:64:f7:3b:1f:9b:71:96:25:
f0:12:bb:98:e0:ae:83:fd:9a:f7:43:80:13:e1:c2:f4:f0:e1:
83:01:d0:93:a5:0e:9f:0a:13:f7:ff:c7:92:52:9e:4c:1b:e7:
b4:c6:28:5d:b7:9e:e8:b3:3b:cf:5b:6a:a4:dc:38:32:1e:3d:
69:3e:9a:f4:ea:b6:c2:ca:8e:64:f7:87:72:03:56:03:72:c3:
56:fc:36:2f:6a:de:50:dc:40:12:e5:c8:51:d2:c8:bc:03:e1:
79:98:c3:d7:fa:77:be:cc:53:2e:de:28:34:5d:32:1f:95:81:
6f:93:6d:e0:a6:06:d4:46:5e:33:05:78:f2:4f:c2:e3:44:62:
02:ab:32:b2:58:2f:b4:67:2c:a5:82:72:41:4b:ac:fc:84:88:
4e:00:dc:b5:38:70:32:ae:7b:75:74:ef:53:3f:f3:4d:68:96:
6a:b2:c0:3a:18:aa:49:7e:d5:46:47:df:bb:57:a9:38:5f:60:
e9:45:b9:1d:e2:68:68:ab:c0:04:31:71:c9:df:3e:24:d9:b7:
47:c4:59:65:3b:f9:42:86:b9:87:ac:b0:a8:3e:9a:67:64:a8:
02:ed:af:4a:ee:cc:83:a8:07:66:0f:65:31:e5:87:74:1d:eb:
4f:22:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net