Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json)
Hash identifier: wV5OxlQwjJYdsldIJ8THKkKUuZ7OZuRnsvVAG7FLGes=
Subject key identifier: 8B:AB:1A:7F:53:E5:78:A5:62:04:1C:AD:93:42:B6:06:1B:BD:C4:4A
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1D9ECF693CFF04B5E0EC1C86817BA7C4C8FD0B40
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
Signing time: Mon 31 Mar 2025 18:30:09 +0000
ROA not before: Mon 31 Mar 2025 18:30:09 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9e:cf:69:3c:ff:04:b5:e0:ec:1c:86:81:7b:a7:c4:c8:fd:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:30:09 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=8e1f2c3b3406a288434236cbb3d2bfe6cf8c276e9f6f8af355784d2a6074fc04, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:02:8e:d7:a4:d5:86:26:04:a6:a0:de:51:
9b:00:e3:60:79:b4:43:34:2b:ea:65:ac:62:89:4f:
3c:2f:95:4a:6a:88:93:6b:f3:39:5e:61:4d:bd:3b:
06:ab:d1:7a:b1:e5:50:fc:58:8f:f2:bb:6c:42:b9:
f8:56:62:a6:f3:1b:63:31:2a:c4:e8:7b:c6:91:2d:
94:40:35:1b:2e:33:2b:d5:d6:04:89:dd:77:a4:ac:
35:a5:2a:b0:80:3c:6b:b8:71:47:29:0a:4a:b9:2d:
51:3e:a1:ad:a1:39:9c:57:ae:27:6d:18:b9:9c:3a:
53:c7:ff:e1:82:13:e0:08:57:9f:01:6e:91:d2:14:
9b:d6:9f:db:47:b2:56:84:d1:0b:0b:ff:15:03:97:
06:ec:00:87:f7:8b:06:01:d9:f5:2c:fa:76:e6:d4:
7a:ff:ec:f4:cf:db:37:a6:51:80:63:d3:e6:af:fe:
71:5e:88:16:70:bd:fc:38:69:a2:38:9a:1b:17:1f:
7a:46:2b:47:af:67:24:b5:6d:0a:be:dc:8d:7c:bd:
b3:7a:6c:c7:fe:d5:e8:5f:60:cf:82:5e:9d:2f:07:
65:67:44:88:ee:f2:39:52:d9:e6:eb:72:d1:2c:2c:
c7:ff:67:d0:b5:31:1e:a4:66:a9:54:21:80:44:fc:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AB:1A:7F:53:E5:78:A5:62:04:1C:AD:93:42:B6:06:1B:BD:C4:4A
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.9.0/24
Signature Algorithm: sha256WithRSAEncryption
44:01:d2:e9:42:8f:dd:ac:8f:5d:3c:8f:07:4a:b4:c6:07:ec:
67:58:fa:0c:1d:8c:91:ba:7c:0b:f7:c0:c0:d1:3b:5c:9f:c9:
cd:2a:a2:f7:7b:21:83:da:14:51:24:bf:c2:85:cb:4e:08:35:
e0:a1:88:3a:ba:09:e1:84:1a:88:d5:60:12:57:f0:b9:ff:26:
ff:cd:2b:a3:3f:f8:39:4b:ac:99:83:0c:2f:fa:f5:2e:e7:8d:
c5:36:be:c6:34:32:46:87:c2:a4:cd:1d:bd:0e:69:72:60:3c:
7a:5f:f7:45:e8:77:d8:01:ce:d6:fb:27:0a:c6:8e:9e:a5:83:
b4:6c:73:bd:ec:33:5c:21:6a:47:c6:10:d7:5a:de:a0:1d:f4:
58:cf:54:df:ee:0e:f6:5f:93:ba:57:05:7b:2f:e1:d1:11:8d:
27:19:1f:9b:04:8b:a5:62:04:c8:e5:45:0c:dc:2c:16:4e:c4:
ea:c3:1e:8a:a2:e3:a4:d7:d9:23:ec:87:99:9e:fa:66:7e:e1:
34:18:cb:b0:48:26:68:e7:27:e0:a5:2d:b8:7c:e6:bf:02:f3:
d5:50:76:ca:64:c8:a8:a5:29:b7:ba:bc:20:cc:7a:8a:51:a1:
5b:c8:60:21:ec:53:14:e9:3c:7d:31:a8:cf:38:12:8c:0d:a9:
df:26:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net