Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa
File: 8467dcd7-366c-4080-b9a9-e85d9f84b167.roa (raw, json)
Hash identifier: Dzox25i/1fjgWAZe013kij1MRYx61aQ3V5AFauYedvw=
Subject key identifier: 58:E3:08:35:8D:2E:8D:86:30:5C:7D:53:56:04:80:AE:47:55:79:19
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 47A3C39F95F86BE2B84D912D95EDA080FA644104
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa
Signing time: Tue 15 Apr 2025 00:50:35 +0000
ROA not before: Tue 15 Apr 2025 00:50:35 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a3:c3:9f:95:f8:6b:e2:b8:4d:91:2d:95:ed:a0:80:fa:64:41:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 15 00:50:35 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=1828109253c5d7caf21d13f85e2758b2e13c4ab447d13a050c57d9484ad3310f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:5b:05:5e:24:20:04:20:be:bf:3e:02:43:
66:fe:78:11:99:bd:45:b0:fa:38:ba:33:66:06:3e:
47:8e:b1:ed:f6:85:5d:e4:20:26:c0:d8:7d:f0:53:
4d:66:be:b8:6e:8d:62:63:4d:fc:07:09:3c:5e:6c:
ed:08:04:05:f6:58:41:fe:5e:df:6f:f6:1d:ff:b1:
b9:f7:47:3c:ef:b3:73:65:bb:5a:ee:94:bd:a0:cd:
51:33:3b:dd:5a:9d:d4:b6:39:72:97:b7:d8:4c:38:
ab:8a:2d:de:1b:1b:31:99:d4:a2:0e:aa:ce:f5:bc:
c9:92:dd:55:f6:1b:0e:87:45:db:84:c6:08:b1:cd:
45:24:2c:42:e8:95:11:3b:2e:73:4a:91:d8:66:2b:
4c:c5:ac:d3:55:11:6b:ff:58:80:3a:34:0c:66:05:
71:50:07:0d:67:db:ab:25:48:bc:01:35:a6:81:eb:
7e:8f:9d:04:9c:f2:51:97:98:11:f8:f3:be:eb:bd:
2a:30:32:2c:c5:8b:93:3d:a2:e3:7e:13:c1:93:ae:
f0:fe:3a:5c:01:4b:4f:59:b0:0f:92:0e:6a:fc:0d:
03:38:6e:88:f4:3c:19:24:79:d0:63:e4:ea:6e:ea:
bd:e2:7a:f4:0a:1e:c3:c2:70:a3:56:ad:0f:c5:66:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:08:35:8D:2E:8D:86:30:5C:7D:53:56:04:80:AE:47:55:79:19
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/20
Signature Algorithm: sha256WithRSAEncryption
72:00:4e:58:b4:0d:0e:b4:f2:3e:ed:29:5c:29:14:fd:f7:ab:
a5:f1:88:68:38:13:c0:b4:32:5c:d2:a2:19:e4:34:78:fb:e4:
96:d8:ec:8a:f7:9c:4a:e1:bb:18:e7:98:3d:79:ba:fd:0c:b5:
b1:9d:4e:a2:8d:bd:38:44:bf:52:93:83:6b:cb:40:45:fe:55:
f3:8b:89:0a:cf:55:08:88:5b:d8:08:2c:71:14:51:da:e4:3f:
00:19:d9:bd:e6:bb:fe:b1:29:32:9a:51:51:10:89:57:a6:a4:
82:b2:a9:9d:f0:b1:97:7f:4a:56:4e:c4:49:04:eb:ac:13:ad:
af:8e:6f:83:71:f1:c8:d7:a3:46:9a:38:c9:9d:f6:36:e4:7b:
23:48:8d:be:0b:5f:73:51:18:54:b0:32:1e:96:bb:ef:ad:98:
d9:78:89:6c:50:53:e0:08:f3:3f:93:80:65:ff:ab:f1:70:ee:
92:aa:4c:b4:1d:ac:26:68:85:64:a8:c0:9b:71:20:84:47:38:
e8:2b:f9:99:94:e9:fd:4e:4f:6b:6a:27:f0:bc:b2:59:67:7e:
4d:a1:e2:c2:2b:92:cc:2c:7d:17:fa:af:ff:4a:56:ef:79:7f:
dd:78:49:60:32:03:10:9a:9c:d9:12:0a:81:11:46:b9:15:05:
fa:9f:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net