Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa
File: 42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa (raw, json)
Hash identifier: 8xD7kcUbb2nHOZ4XeA6MxMqi5k+qv4zNkdVw3V25bkY=
Subject key identifier: 8F:B4:C9:49:65:5F:FD:92:77:25:93:99:17:AF:97:9E:EB:0B:A3:B3
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 04FC4385C8E938EB206477223DB6BCF81BC29C20
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa
Signing time: Mon 31 Mar 2025 18:30:20 +0000
ROA not before: Mon 31 Mar 2025 18:30:20 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fc:43:85:c8:e9:38:eb:20:64:77:22:3d:b6:bc:f8:1b:c2:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:30:20 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=deedcc47cfcfe4f9c90c3ff8b12ce13646ab837295ffad8ea3d6f76ec2c98189, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:be:fd:37:5f:47:30:18:bd:22:04:f6:e3:
d5:59:8f:6e:95:aa:cf:96:d8:84:ac:83:19:0a:53:
df:ac:26:b5:f2:e0:74:eb:e2:94:d6:6f:6a:64:b1:
5a:15:1e:40:a5:8b:78:9a:3e:23:88:3a:e7:85:4f:
aa:6f:69:80:26:3e:3f:d8:b0:d4:a7:57:25:5e:51:
cd:ee:70:1d:ec:66:bd:d2:21:41:2f:ca:c9:ff:37:
54:75:98:0a:c3:96:ea:a0:83:82:68:48:c9:e7:20:
e7:19:18:af:01:7f:44:80:ee:b1:2c:27:0c:df:ec:
ab:ca:6f:21:f8:a1:1b:16:6f:3a:15:be:83:de:43:
7a:0e:e1:33:65:b8:c9:1b:f8:53:10:cd:aa:51:b7:
28:9b:7c:06:da:35:0a:55:d0:f7:12:c0:19:89:04:
04:25:48:9e:31:25:59:66:80:07:da:82:63:8f:cb:
3b:c2:dc:45:04:85:fd:10:bf:f2:0c:c6:88:08:18:
7d:a8:c8:a3:0a:88:74:fa:ea:fd:ea:95:69:9d:67:
2e:61:17:0f:ba:0b:b9:d3:cf:61:20:31:cf:21:89:
f4:45:75:a3:36:9f:2e:27:66:0c:9c:fd:2f:4d:57:
24:8f:cb:85:51:ab:6a:a9:86:4a:88:ac:83:37:c7:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:C9:49:65:5F:FD:92:77:25:93:99:17:AF:97:9E:EB:0B:A3:B3
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/42d40d51-4cca-4b97-bb1c-a6e1af32adcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.48.0/22
Signature Algorithm: sha256WithRSAEncryption
83:a5:21:ba:a7:05:11:e0:fe:be:6d:2c:86:9c:68:1f:cb:5f:
99:f1:57:1c:9a:be:c1:e5:ae:02:98:f0:00:0c:b7:54:fd:5b:
9b:19:b3:5b:a6:81:97:c5:9a:60:e4:1b:cc:cd:bf:cc:a0:39:
ed:b5:c3:f7:f3:db:03:6e:1b:0e:f8:92:a2:5e:71:74:53:ba:
28:0a:a9:9c:a3:ed:93:ac:c6:32:22:46:ff:b9:47:17:9a:34:
a0:f1:de:bd:26:e4:c8:23:69:82:6d:30:e8:bd:de:27:4d:da:
53:7b:e5:ea:17:4b:cf:e0:8e:fd:fd:78:0d:3a:fa:0f:69:e9:
9e:8a:68:6d:aa:e2:b2:c2:61:d8:01:70:c2:ce:75:f7:c7:42:
bd:f3:46:30:1f:85:6d:a7:00:64:d7:67:f6:c8:9d:25:04:43:
96:23:9c:0e:7a:33:5e:c3:0e:92:a3:2c:15:fa:2b:df:61:61:
ab:fb:0c:7e:53:8d:15:f1:83:9d:14:cb:29:b0:3d:c8:42:5e:
f8:f0:af:51:df:b9:d6:7f:15:af:e9:0a:5d:23:6a:f0:0a:91:
ff:6d:1c:a4:93:d9:91:13:8c:55:54:94:9b:9a:dd:fd:2a:04:
c2:2f:2e:3b:1a:62:ff:b5:05:1f:2e:d7:b4:ba:47:3b:27:44:
3f:01:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net