Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3358e5d4-424a-4b50-a5a7-b28e80102190.roa
File: 3358e5d4-424a-4b50-a5a7-b28e80102190.roa (raw, json)
Hash identifier: Mai+F9JH9Xsp+/rwzOeweRcbiE2z8pTjJCpi0OwkD5s=
Subject key identifier: 7A:63:55:13:FA:85:52:C7:E0:68:10:85:2D:A9:49:3A:4F:7D:15:23
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 378A527095660564B575CC9A462CEDE9529A5FE7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3358e5d4-424a-4b50-a5a7-b28e80102190.roa
Signing time: Mon 31 Mar 2025 18:40:12 +0000
ROA not before: Mon 31 Mar 2025 18:40:12 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8a:52:70:95:66:05:64:b5:75:cc:9a:46:2c:ed:e9:52:9a:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:40:12 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=6eb53ba4979f56d8a03342f32902996a7c8195bf784a7847e341fbc325daad60, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:2b:ed:56:99:98:00:9b:3a:95:b2:1a:e9:
c2:61:2c:02:30:71:d6:a2:ca:22:25:b1:36:fc:d2:
fb:fa:f2:9e:0d:4a:c7:c2:57:bb:86:ff:39:49:33:
e5:32:38:ad:79:36:69:b0:7f:e2:5a:ca:7d:4e:2a:
51:07:05:49:7c:07:ca:9f:71:50:2c:97:54:63:ce:
75:49:d1:0c:12:a4:f0:0e:86:ba:09:85:9a:0c:47:
06:5c:6f:a2:91:e8:2e:7d:5e:26:1c:61:9e:db:e3:
42:b4:67:95:dd:b2:40:eb:fb:10:30:49:c1:44:ff:
e4:17:3d:f9:e9:aa:a7:a9:d3:5c:d5:f7:b5:ac:c3:
2c:e4:93:57:84:dd:24:e1:08:39:ee:3c:90:ec:a9:
82:1c:e2:ba:67:d6:a1:0c:2e:2b:ae:03:c8:53:a7:
cd:f6:d6:c2:51:21:c6:9b:b2:c1:39:5a:03:36:70:
94:3d:34:6a:d9:d0:76:5d:42:2e:fe:b6:08:29:81:
94:a6:0d:68:fb:98:b9:c7:d5:9d:eb:07:51:c6:de:
f7:c9:91:05:d1:8b:a3:c8:00:ab:cf:a5:c1:65:e9:
c7:2f:ba:5b:5e:ec:dd:01:7c:65:4a:78:cd:7a:8a:
43:0e:49:80:d3:d7:65:30:b9:39:99:75:b2:cf:62:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:55:13:FA:85:52:C7:E0:68:10:85:2D:A9:49:3A:4F:7D:15:23
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3358e5d4-424a-4b50-a5a7-b28e80102190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.128.0/22
Signature Algorithm: sha256WithRSAEncryption
93:bf:95:1c:d8:20:e5:4c:c7:ed:c7:08:58:e6:db:b7:7b:40:
11:b0:12:4c:40:44:b3:55:2c:1c:c7:fc:93:95:12:99:96:32:
bb:d7:e1:91:32:48:9b:ca:69:6c:e9:66:0f:10:39:87:1c:fc:
05:a0:c0:2d:67:6a:ea:d5:10:81:c6:c9:75:a3:fb:00:53:7e:
18:c4:17:f4:f2:8b:76:88:78:84:7d:68:49:23:96:3a:1f:c7:
a1:34:54:30:28:45:1f:cd:b0:8f:d2:68:f3:eb:61:0e:c2:fb:
e6:48:92:b0:c3:87:28:50:c6:af:b7:75:8a:60:4d:39:54:b5:
56:3b:f2:1e:9b:2e:c9:23:95:15:87:1d:78:4f:c3:bf:f4:99:
e2:4c:22:2b:c6:56:f9:f3:51:3c:f3:21:6f:85:72:f7:a1:76:
f2:ab:51:f5:db:b8:ba:c2:e6:fa:15:a5:0a:c7:bf:7b:b3:ca:
32:9e:f4:38:69:94:10:5d:7f:02:f5:d0:3e:05:58:bf:76:71:
b6:5f:70:83:e6:14:3c:73:b3:cb:46:f0:2c:ee:a0:75:74:f4:
e6:ee:c8:94:1a:34:18:b4:2e:96:21:b3:0b:46:e6:d7:36:8d:
23:b4:d5:3f:b5:fc:f8:c9:13:00:a3:65:e4:c4:bd:e4:8e:74:
02:70:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net