Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
File: d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa (raw, json)
Hash identifier: K+J6KREY3yKQJS5u6ffZp3Gdxe7S0puIeAk4q2qgCtQ=
Subject key identifier: A6:EB:D0:70:FE:02:29:A6:E0:B4:19:4B:9A:2D:53:39:C2:49:1C:79
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 248ED5F575E2F2F2AA5F3C7BF98E2542C1AEF486
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
Signing time: Mon 31 Mar 2025 18:40:10 +0000
ROA not before: Mon 31 Mar 2025 18:40:10 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8e:d5:f5:75:e2:f2:f2:aa:5f:3c:7b:f9:8e:25:42:c1:ae:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:40:10 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=30f03759ce13ea5b38d60604d1d4df7a8c5b0cde652b4720bc1f0f951d853844, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:70:8e:a0:4f:e3:82:c8:01:e5:6c:48:25:
c1:bd:ed:83:56:40:13:f2:55:6b:1c:8a:6b:fc:8d:
f3:c0:54:e5:d0:fe:e4:79:b8:69:4f:56:a4:7b:2c:
31:24:23:74:eb:1a:89:1f:bf:8d:3b:7d:4e:52:ba:
48:37:c3:f3:ea:e4:04:e9:e7:b9:79:19:e2:08:7f:
da:b0:78:08:1b:74:1f:e9:97:1b:a0:6b:09:ef:1e:
9d:e3:e7:95:5d:aa:66:a6:3c:ec:78:ba:2e:21:ec:
29:df:52:95:92:f6:1f:db:cc:09:0e:b9:d4:dd:9d:
d7:30:09:13:4d:41:77:1b:64:50:7c:44:6d:d4:47:
0f:69:f0:02:04:e0:a0:b5:bb:ca:fe:4d:07:b4:2a:
eb:cf:36:87:99:73:82:8f:cc:b6:92:58:99:bb:f5:
18:89:57:bc:d3:65:9c:99:54:ba:f6:13:a6:6d:8e:
b5:7b:91:9b:c6:5e:6b:45:bd:2b:c1:a9:51:72:50:
c6:22:83:0d:48:31:52:dc:a4:46:b5:e0:1e:9d:43:
a0:6b:37:9a:a8:04:32:ea:40:ba:27:f7:8a:f2:e9:
94:5a:6c:73:2d:5c:89:25:72:b2:54:71:29:c8:26:
31:6d:59:2c:32:54:e3:89:2f:83:7d:7e:d6:90:04:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:D0:70:FE:02:29:A6:E0:B4:19:4B:9A:2D:53:39:C2:49:1C:79
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.52.0/22
Signature Algorithm: sha256WithRSAEncryption
95:d2:ef:0d:6e:82:9b:9c:ba:e8:c2:d4:9c:75:6e:ec:b5:30:
8a:cf:c5:86:cf:85:65:7b:e8:24:22:78:1d:4d:5b:6a:8b:da:
d3:4e:f8:d9:ba:9e:96:7b:63:76:07:06:6b:38:df:f8:b8:5d:
35:48:83:3a:a5:a0:95:98:ea:55:e8:6a:ca:44:34:55:7f:bc:
9b:63:34:42:1f:ae:ec:2e:75:78:36:a7:87:6c:e4:ac:26:27:
dd:ad:64:12:63:d0:74:fb:fe:3b:f6:83:22:ff:d1:15:50:30:
a2:d8:df:4e:70:bb:53:c9:f0:dc:81:24:a3:98:7e:59:97:7f:
dc:9a:e1:76:fa:1e:6e:35:56:d4:8a:92:de:eb:cb:0f:16:7a:
4b:41:09:9b:2a:c6:1e:ee:e8:0a:e1:ea:0e:d2:db:c7:72:0a:
be:d9:61:07:7e:e4:4a:63:5a:e0:ff:f2:9a:76:9c:3e:77:84:
1f:4d:21:07:6a:12:2a:eb:29:fd:b1:69:ac:ee:66:be:07:7b:
4b:87:de:09:93:e5:8b:79:49:27:0e:13:a6:2a:a4:03:5e:26:
02:d1:31:77:ea:38:82:5c:2a:3d:9a:35:c1:15:65:da:17:59:
3c:36:be:c9:99:75:31:53:c7:da:73:f0:e7:71:15:be:3d:0c:
f3:64:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net