Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa
File: 07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa (raw, json)
Hash identifier: fP008q962+aN8mv6Ul67DUgTYuXgs7TAKl9FW5LWETg=
Subject key identifier: BC:1A:A5:6D:22:AE:F1:AE:DE:7E:F7:02:79:9D:90:BD:98:BA:F1:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A24C85C74FE51255D9C6A1A9F83C167D9FF3D14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa
Signing time: Wed 01 Oct 2025 00:41:54 +0000
ROA not before: Wed 01 Oct 2025 00:41:54 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 64.252.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:c8:5c:74:fe:51:25:5d:9c:6a:1a:9f:83:c1:67:d9:ff:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:41:54 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=c474f6ca47487fb1a4d94e6802cdbc67198425e9b87e0db99a9c18fae0d21087, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:cc:b3:81:35:6f:e2:52:d2:fa:e0:08:4b:
80:70:52:10:5a:fa:0d:f7:45:4d:44:8e:02:0d:e9:
97:d7:ef:40:b9:4f:c9:92:5b:f4:15:59:28:b2:31:
4b:d6:49:e7:15:e1:5a:93:d6:20:a6:39:4f:4c:f6:
34:58:12:ff:9a:32:cf:be:87:74:c7:ad:73:b0:9d:
41:1d:af:6a:0c:8a:9e:37:b1:93:7a:3d:e9:dd:0d:
19:3b:4a:bc:09:2d:3b:8a:9c:a7:59:e5:1c:58:ca:
f0:f7:33:78:fe:0a:d2:89:cb:8b:aa:32:dd:32:ac:
76:1a:93:76:52:df:6f:c3:3c:80:43:b9:dc:75:d8:
16:7b:b0:a0:2f:10:fb:bf:f8:84:1e:c5:00:4b:a4:
84:8b:45:8d:d3:de:f5:21:11:b6:4b:a2:66:35:27:
03:c9:47:4a:b7:28:6a:14:0b:dd:78:dd:04:9a:12:
8d:28:76:6d:e8:2d:8a:b6:ee:36:19:58:64:7d:a9:
be:a7:f8:a9:3a:bc:81:cb:87:f3:fb:ab:7d:db:f8:
62:83:24:9b:3b:b8:07:0c:e1:e5:dc:e3:52:f7:89:
7d:dc:87:ab:4b:d6:2e:07:3e:0d:b4:8a:7f:59:8c:
65:6f:89:56:fa:8d:6a:08:a2:ce:df:ed:4d:34:2d:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:A5:6D:22:AE:F1:AE:DE:7E:F7:02:79:9D:90:BD:98:BA:F1:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.66.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4d:49:52:5f:98:18:22:7c:b4:3c:9a:83:9d:cd:80:0f:81:
ca:f6:6e:30:c2:e1:f3:6c:6e:0b:15:85:85:2e:04:30:a7:48:
8e:75:e3:ef:a8:20:8b:da:6e:58:3f:d7:1d:51:9a:5f:f3:3d:
d5:39:a7:4f:35:61:6c:81:ba:f4:a2:7f:f4:b5:56:bd:11:e7:
84:76:ea:38:86:8c:df:5f:a2:2c:6d:ec:bc:72:cb:0d:3d:5c:
5d:8e:e2:79:71:c0:b0:c7:19:2d:de:7b:dc:da:8d:f9:a0:9e:
f0:40:af:2d:9b:7d:b3:9f:4d:e2:33:c3:76:eb:8d:af:44:42:
0c:13:3f:90:39:e9:72:4b:7f:02:ce:d5:00:a3:ec:53:6e:d1:
bd:24:76:28:b7:c1:05:f0:7d:47:c1:6a:0a:b4:13:8e:a6:18:
a1:9b:52:0a:d4:c1:61:73:8b:15:c8:d4:1f:ca:2e:12:d3:62:
42:44:c1:20:8c:72:19:51:72:6f:bb:b8:27:99:68:ee:73:df:
d1:08:aa:5d:be:d4:5b:f9:40:1c:58:fd:43:ce:a8:5c:1a:cc:
ab:81:f1:12:2e:02:2b:b9:e6:ff:46:bc:44:fa:dd:8a:20:a0:
b1:f4:46:3a:e7:79:93:80:99:b2:4c:f4:51:d0:86:e3:86:75:
1a:28:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:49 2025 by rpki-client