Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b5bf93b-0a86-4e25-a20a-4c9828e1f847.roa
File: 6b5bf93b-0a86-4e25-a20a-4c9828e1f847.roa (raw, json)
Hash identifier: kn/QHGLJoAslzVhy7zhz51YxGuWY0ilAN8AgJWXfNmQ=
Subject key identifier: F0:CA:B0:A3:F5:E3:95:06:36:C9:2C:74:E0:DB:6D:08:0E:42:B9:19
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 3BA5509ABC1DADF38C7734FE0106C48DFACB7607
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b5bf93b-0a86-4e25-a20a-4c9828e1f847.roa
Signing time: Mon 31 Mar 2025 18:30:18 +0000
ROA not before: Mon 31 Mar 2025 18:30:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a5:50:9a:bc:1d:ad:f3:8c:77:34:fe:01:06:c4:8d:fa:cb:76:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:30:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=570e88225d65fe76b12444e8c91a955166a4ff980842874f04632dbbda87e57f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:c6:4a:37:c4:b6:57:25:13:b8:0f:ec:0d:
f1:da:be:a4:df:05:02:8f:0c:66:1a:11:07:a1:41:
c9:ed:45:f1:45:45:3d:2a:27:25:fa:93:f7:ed:e0:
a5:d5:9b:97:f9:e2:d6:b6:c8:91:d5:77:03:a7:bc:
25:cb:bb:99:22:19:00:86:f9:72:29:44:a6:d0:86:
53:cd:76:9a:31:7a:a7:3e:95:db:4e:43:e1:90:1d:
92:f1:b7:17:4d:8b:de:bc:d9:85:d7:01:fc:18:47:
fa:c9:ca:f5:3b:be:38:6d:24:ac:3c:5f:b5:c0:9e:
db:3a:ec:29:6b:a1:be:bc:4c:2e:d6:d1:f5:bc:44:
b1:c5:ed:f2:27:74:2f:e5:84:42:64:b8:3d:35:08:
d1:5f:ce:16:ce:f1:f9:9f:8f:ed:6d:c6:65:40:29:
45:b8:42:1a:07:1f:51:84:5c:12:1c:11:48:2b:fe:
aa:47:b1:5e:26:11:4d:e1:8b:be:8a:b0:55:34:ad:
3f:df:fc:f4:ee:b1:f4:1c:6a:d2:ff:dd:39:3c:b3:
87:f3:d3:4b:d8:fb:bb:df:ea:79:b4:95:37:44:07:
f5:ef:a5:73:fd:45:81:27:9e:f6:cc:5e:06:55:60:
51:94:eb:3f:e9:0d:da:db:1b:f7:bd:05:55:47:91:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:B0:A3:F5:E3:95:06:36:C9:2C:74:E0:DB:6D:08:0E:42:B9:19
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b5bf93b-0a86-4e25-a20a-4c9828e1f847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.144.0/22
Signature Algorithm: sha256WithRSAEncryption
36:1f:fa:69:b1:c4:29:11:86:50:3b:bf:be:6c:ec:45:1e:e9:
18:a6:3b:2d:70:8a:4a:c7:11:26:f5:d0:e8:11:d5:a1:34:65:
83:88:3b:9d:25:04:a5:d5:7d:6e:01:84:82:f7:51:92:27:f2:
27:c4:6d:26:6e:b6:98:79:82:fb:65:0a:75:67:3d:f3:22:2c:
ab:76:d2:90:11:d2:86:4d:17:50:23:73:f5:c5:52:b4:ee:d1:
9e:ff:ad:86:e1:18:85:58:ed:ef:a0:f9:58:bf:e2:55:5e:a6:
a0:a1:b3:3c:fd:4a:3e:66:7a:40:ed:4e:21:42:47:e8:82:bf:
23:3d:ea:e3:01:ab:86:59:b9:95:c7:03:2b:24:04:31:69:9d:
f7:9d:31:bf:09:59:b8:bb:b9:f6:c7:e7:1c:bb:11:f7:b5:bb:
aa:78:03:e5:5c:98:7b:62:db:6b:55:ca:21:5d:68:ef:25:bb:
3f:80:59:fb:81:94:98:62:b4:bc:e6:04:fb:96:20:05:81:2d:
47:7d:63:83:14:a9:b8:f9:25:5e:09:f2:c5:9a:b2:db:d8:47:
ac:27:88:3c:dd:11:2d:b3:8f:4d:b6:dc:ee:fb:70:a0:fb:44:
fe:e0:e8:99:94:e1:e5:a7:ae:22:85:aa:98:29:38:e2:80:88:
6a:45:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net