Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09cf58d5-c1a2-4df3-aae3-863cba961f55.roa
File: 09cf58d5-c1a2-4df3-aae3-863cba961f55.roa (raw, json)
Hash identifier: hCUcnP/vc9KZsK6bs5sf0y3GzRAyd0USqeylL0QuYAE=
Subject key identifier: 86:FC:5E:FE:8F:60:4A:E2:B2:5A:91:10:4C:0A:8D:EB:3D:00:0F:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 9616554AA9B720339DECBFD9B2555B22F1A4F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09cf58d5-c1a2-4df3-aae3-863cba961f55.roa
Signing time: Tue 14 Oct 2025 17:02:57 +0000
ROA not before: Tue 14 Oct 2025 17:02:57 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
96:16:55:4a:a9:b7:20:33:9d:ec:bf:d9:b2:55:5b:22:f1:a4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:02:57 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=8700cbe0935e97f39b7008c03796d9def2ea3a4b8d74754e0c816bf9b9bbbc32, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:1d:3b:e6:f8:df:2f:69:72:f8:f0:35:4b:
b1:56:06:21:94:f7:8d:69:4e:dc:9e:32:35:c1:cf:
2f:66:df:91:91:f6:b3:70:ac:ff:73:98:8d:bc:dd:
d0:55:ac:27:d9:53:41:e6:36:17:4c:52:f0:71:e6:
c5:6f:ed:4c:82:1b:1b:29:d5:7b:ce:1e:7c:e3:7d:
27:c8:76:cb:09:6b:c8:7a:05:1b:b7:a6:6a:dd:2a:
ac:76:2c:21:3f:ff:8b:cc:d1:cb:3e:c3:6d:6c:6c:
ba:01:df:af:2b:c7:35:8b:19:89:f8:3d:b4:7f:b8:
2b:ac:82:fc:3d:24:2d:d8:10:ba:d1:c0:2a:c0:c6:
ed:62:71:52:27:d0:44:35:a0:58:53:89:f0:5c:d0:
fb:bd:99:53:02:ee:4f:bf:e3:4e:c1:91:0c:ec:91:
90:19:49:fc:12:76:8c:08:fd:86:d3:73:b6:ee:1f:
f3:83:6b:98:21:fa:88:5f:76:67:5c:8f:d1:86:2d:
62:4f:55:78:75:ec:6a:b9:65:ce:d8:73:2d:27:00:
10:f8:d0:f4:a9:24:9d:d3:32:dc:8f:e4:19:47:c9:
31:9f:c7:c0:06:d1:7a:58:81:ea:ec:e0:bd:6d:af:
54:22:c1:00:4b:c1:03:b3:cd:1b:0f:d3:d2:64:ff:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:5E:FE:8F:60:4A:E2:B2:5A:91:10:4C:0A:8D:EB:3D:00:0F:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09cf58d5-c1a2-4df3-aae3-863cba961f55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.39.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e1:4f:c1:19:e9:99:ce:c0:22:fc:45:f4:5e:9c:29:ee:25:
0e:3e:f3:ef:3d:ef:c7:0b:b3:b5:ac:16:8f:82:c9:7a:55:23:
09:4b:f2:e5:2a:bc:48:b2:e7:ad:63:bb:2d:98:af:ee:b3:8a:
f4:a9:52:37:88:3c:6e:5f:22:8d:2d:dc:24:36:f8:30:64:48:
6b:84:c7:99:e3:76:1d:52:c4:de:39:b2:c0:52:27:4c:77:26:
a3:9d:71:9b:6a:d8:b3:20:37:27:e7:27:fc:6b:b1:e2:09:73:
dc:31:75:5b:a8:b2:c8:0c:92:0c:4a:0f:bc:fe:43:1d:37:85:
6d:8a:4e:ae:dc:db:43:b9:7f:88:36:85:9f:c6:d8:95:a7:fd:
7d:15:c3:4f:1b:3e:db:e1:e7:98:d0:dc:d7:c1:11:74:75:3e:
61:26:bb:ae:9b:97:b7:34:f0:b6:b2:cb:ef:79:d2:e0:d1:b3:
3e:66:c4:5d:c6:4c:0b:ae:54:e9:ac:a8:e2:ca:8d:cc:0e:ad:
b7:f1:8b:6a:e5:a2:4f:30:f6:74:79:e8:72:ca:93:0f:24:3d:
f4:c8:c6:38:08:32:14:3c:eb:8d:5c:b8:87:81:c3:bc:80:c9:
47:09:84:71:57:43:05:03:cd:7d:44:c0:91:7a:08:a4:e2:57:
c0:2e:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:36 2025 by rpki-client