Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa
File: 26530834-4a85-45f4-8600-310dadf4036d.roa (raw, json)
Hash identifier: 7qQNmpaUQg+iP17DNWbYkXr5cQs/DviBFAyyxbN9TAQ=
Subject key identifier: DB:A8:83:DA:25:BB:D8:1B:7C:6D:76:41:C4:42:1F:09:9C:FE:06:B9
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1ACED14F8F566F18F33D23639EBE79C5EC50ABF0
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa
Signing time: Tue 15 Apr 2025 00:50:32 +0000
ROA not before: Tue 15 Apr 2025 00:50:32 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ce:d1:4f:8f:56:6f:18:f3:3d:23:63:9e:be:79:c5:ec:50:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 15 00:50:32 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=ebb97d04367b6cdeac0a1b9a12b3b8ab22f5e4121ab1306066f21d1f44d59385, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:df:77:44:8b:53:a5:db:fc:d9:29:20:ce:
8a:e1:3b:59:c3:5a:b0:92:55:ed:e3:be:6a:ad:9a:
07:b2:90:86:67:4d:d2:26:73:f3:e6:0f:e5:93:d2:
f7:e8:f7:56:2d:21:4b:a4:50:c8:3a:bd:2e:62:c7:
f0:b3:39:06:d0:3f:6e:05:f4:36:68:ea:59:17:a4:
1f:ab:e5:bd:70:81:a5:d8:e2:2e:e1:31:d1:31:7a:
16:28:7b:54:43:3f:5e:fb:e3:e7:58:82:34:e5:5a:
88:a8:e8:9b:d1:fa:42:80:80:d2:ba:61:70:1e:da:
e8:a0:c0:0a:45:55:50:4d:fd:6b:db:e7:ff:d8:05:
4b:00:ef:0e:41:41:07:4f:ff:ab:c3:5a:0f:5f:5c:
7b:f8:5e:5a:6c:1e:4e:dd:90:3f:69:47:53:1d:f1:
10:a8:29:43:46:70:e7:c5:f8:92:22:c4:62:2f:c4:
1c:00:17:43:79:da:2e:e1:3a:c5:87:0f:fd:d1:f4:
5f:52:82:c0:a4:c2:c9:d6:08:e5:c2:15:b6:12:24:
43:d4:d1:f4:0c:e8:48:78:e1:1f:9a:cd:00:77:9f:
a7:c0:e9:37:5e:81:67:b6:70:52:6c:9b:00:79:94:
d2:c3:e4:7b:8f:b4:c4:a7:be:b9:e2:72:f1:eb:26:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:83:DA:25:BB:D8:1B:7C:6D:76:41:C4:42:1F:09:9C:FE:06:B9
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.240.0/20
Signature Algorithm: sha256WithRSAEncryption
96:27:1e:4f:f5:a3:cd:e6:6c:33:f1:a6:54:4f:1d:0f:6f:1b:
6d:40:de:ea:a1:a7:eb:3e:0a:9d:06:3b:4b:0b:0e:b2:79:6a:
f7:f7:75:06:1b:d5:fb:4c:a8:58:b9:b7:0c:df:2c:9a:c6:1e:
6f:d3:45:e4:cd:57:5c:47:38:d1:f4:62:71:c5:78:bb:8c:d4:
91:2e:ee:d0:db:d4:8d:e0:91:58:31:0f:03:cb:8d:18:54:a3:
46:f9:39:c2:15:1a:16:6c:ed:64:5a:6b:8a:0d:df:a5:72:e5:
14:75:b4:2d:81:3c:21:dc:02:d9:03:eb:97:34:f9:74:b0:d1:
63:83:0f:e9:16:5c:97:48:76:a4:90:6b:d0:83:98:a6:2a:b5:
55:66:e4:fb:dd:d5:ac:5b:81:35:92:5b:26:c3:d1:78:c4:bb:
53:7e:26:e6:aa:64:1e:b4:52:04:93:66:64:77:62:05:b1:78:
f9:be:a1:7d:88:8b:ec:e8:a5:df:00:ab:cf:a6:22:28:c2:d4:
79:41:f1:69:e2:36:c9:ab:d1:7b:5a:31:09:84:2a:80:c5:8f:
e9:22:45:10:cc:e3:33:f6:5e:33:63:c5:69:62:82:3a:a6:0b:
da:b3:eb:00:50:16:af:16:d9:dc:d9:e0:c2:3f:1b:77:4a:41:
b2:ea:77:a2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGs7RT49WbxjzPSNjnr55xexQq/AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDE1MDA1MDMyWhcNMjUwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmI5N2QwNDM2N2I2Y2RlYWMwYTFiOWExMmIzYjhhYjIy
ZjVlNDEyMWFiMTMwNjA2NmYyMWQxZjQ0ZDU5Mzg1MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWmd93RItTpdv82SkgzorhO1nDWrCSVe3jvmqtmgeykIZn
TdImc/PmD+WT0vfo91YtIUukUMg6vS5ix/CzOQbQP24F9DZo6lkXpB+r5b1wgaXY
4i7hMdExehYoe1RDP1774+dYgjTlWoio6JvR+kKAgNK6YXAe2uigwApFVVBN/Wvb
5//YBUsA7w5BQQdP/6vDWg9fXHv4XlpsHk7dkD9pR1Md8RCoKUNGcOfF+JIixGIv
xBwAF0N52i7hOsWHD/3R9F9SgsCkwsnWCOXCFbYSJEPU0fQM6Eh44R+azQB3n6fA
6TdegWe2cFJsmwB5lNLD5HuPtMSnvrnicvHrJvpxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU26iD2iW72Bt8bXZBxEIfCZz+BrkwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzI2NTMwODM0LTRhODUtNDVmNC04NjAwLTMxMGRhZGY0MDM2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQjYPAwDQYJKoZIhvcNAQELBQADggEBAJYnHk/1o83mbDPxplRPHQ9vG21A
3uqhp+s+Cp0GO0sLDrJ5avf3dQYb1ftMqFi5twzfLJrGHm/TReTNV1xHONH0YnHF
eLuM1JEu7tDb1I3gkVgxDwPLjRhUo0b5OcIVGhZs7WRaa4oN36Vy5RR1tC2BPCHc
AtkD65c0+XSw0WODD+kWXJdIdqSQa9CDmKYqtVVm5Pvd1axbgTWSWybD0XjEu1N+
JuaqZB60UgSTZmR3YgWxePm+oX2Ii+zopd8Aq8+mIijC1HlB8WniNsmr0XtaMQmE
KoDFj+kiRRDM4zP2XjNjxWligjqmC9qz6wBQFq8W2dzZ4MI/G3dKQbLqd6I=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net