Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa
File: c5687b2f-b054-4005-abd5-90394ab21e74.roa (raw, json)
Hash identifier: R0b50MBp5pU1CakcAsfaGs+H4uLvZOSP1hHjrk88ET8=
Subject key identifier: C4:A5:A5:8C:B0:3C:17:A3:74:7E:DD:CC:7A:76:B0:97:8A:C5:77:B9
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0746354C22E8A83BD8F3C250801F8C0085211278
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa
Signing time: Mon 31 Mar 2025 18:40:04 +0000
ROA not before: Mon 31 Mar 2025 18:40:04 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:46:35:4c:22:e8:a8:3b:d8:f3:c2:50:80:1f:8c:00:85:21:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:40:04 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=e8e6d80a6cb2a3a0a66c178a31782f3f6abe1c1eb298ad98ff702777a494477b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:d4:b9:8c:6c:d9:75:00:3c:e0:c1:57:cd:
b7:c3:8d:e5:16:d7:fb:2a:57:fc:58:3a:5e:f5:54:
e0:fc:3b:39:4b:2e:6c:3d:b5:de:4f:2d:63:89:f3:
4d:54:37:1d:5f:93:17:e6:83:62:3d:72:36:bd:68:
61:35:c5:f7:85:1a:03:a7:f5:22:99:ac:a5:bc:25:
d3:57:3d:73:18:22:21:ce:b4:2a:a4:d1:f9:58:0f:
7b:a2:7e:98:5e:31:b2:18:ba:86:53:94:c6:ab:55:
71:b9:38:e2:47:42:73:55:56:5e:bf:79:1b:39:f5:
40:2e:16:c1:7f:c2:fe:2d:37:be:23:f7:b3:ea:3e:
7e:67:ef:c7:25:70:3b:35:e0:5f:6a:38:c4:be:f6:
9f:6d:95:a1:b4:11:98:a2:c8:0e:76:8e:41:a3:77:
c4:c0:8c:f4:da:f3:2c:7f:bb:7e:a8:a7:a5:e7:63:
27:f2:32:d4:cd:7c:af:95:6b:c9:42:3f:2d:18:40:
f6:4e:16:18:ad:fa:ec:65:e1:30:e1:79:eb:ac:5a:
ed:d5:28:45:d9:57:fd:e0:7f:8d:b1:bf:a0:d6:a7:
f0:95:14:ed:e3:6c:33:12:5e:76:54:e6:9d:b3:d6:
e0:5f:49:22:47:2e:4c:ff:93:a4:5a:e4:df:df:30:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:A5:8C:B0:3C:17:A3:74:7E:DD:CC:7A:76:B0:97:8A:C5:77:B9
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:d8:65:fb:79:01:77:be:5b:64:e5:7b:dd:e5:5e:eb:26:85:
72:10:df:8a:0d:f5:ae:e9:55:b8:14:9e:63:a5:8a:2f:08:63:
ca:b4:ed:89:7e:43:7a:83:a7:5a:b6:b3:8b:5d:a8:bd:f2:d3:
58:fb:16:cb:f2:fa:18:c2:59:53:cc:4c:c6:15:60:1c:6b:c5:
f8:e2:0e:22:33:4c:93:40:9c:6f:f6:6f:d5:0d:7a:af:a3:17:
df:7b:6f:5a:10:00:1b:b3:de:20:51:c4:40:1e:e3:af:1a:6c:
50:7b:c1:85:59:c2:bb:bc:9c:71:e8:15:44:d9:4a:32:46:3a:
1f:93:6b:b5:fe:73:fd:36:49:ec:2c:59:94:ec:c1:c0:fd:59:
d4:d4:73:2b:a4:b6:c7:da:43:a3:b8:f9:1d:84:86:6b:0c:7d:
7b:9d:a7:bb:26:f3:c2:88:54:1a:f1:9c:cc:b9:98:56:17:db:
dd:ef:12:37:ef:77:09:ba:6e:99:65:7b:2e:9f:48:57:ca:1f:
e0:63:ff:51:a4:f2:6b:97:3e:28:7a:e1:9d:55:06:2a:04:cd:
e6:32:2d:f3:a4:3d:9b:b8:92:56:cb:2c:53:14:04:37:18:85:
11:4e:9a:19:b8:79:9f:ec:9f:eb:02:29:72:08:e8:e7:f9:ad:
12:d2:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net