Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa
File: 0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa (raw, json)
Hash identifier: 7KPOnKnUYXYiObv0kaNDNCzGSNs6VoJSHtHcuXZqVlQ=
Subject key identifier: A4:E5:1E:CC:87:67:26:E5:FC:A7:EB:5F:6F:E9:B5:31:83:CF:89:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26F8205C853F685900EE0862D2F802BCC5ABEF27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa
Signing time: Sat 11 Oct 2025 00:39:29 +0000
ROA not before: Sat 11 Oct 2025 00:39:29 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.21.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f8:20:5c:85:3f:68:59:00:ee:08:62:d2:f8:02:bc:c5:ab:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:39:29 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=80ba861aa172e03c25efb075a956e8c2a96777f137522446107a9bab1c449fe1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:71:c1:0f:b4:3c:c6:f0:0b:83:c6:53:ec:
6e:89:f9:c2:61:d4:05:ec:8c:62:48:55:da:ce:cc:
f8:2c:98:a5:5b:3b:0b:7c:86:c0:ff:d9:b0:1a:4c:
73:f6:53:b9:f8:9d:d1:d7:77:ba:0f:5d:bf:9a:96:
f6:1e:d0:79:d7:d7:22:d4:cf:e5:e9:16:0c:06:8f:
65:13:6e:d0:f7:71:9d:83:70:05:90:94:e9:3b:63:
b5:16:73:74:06:3e:64:d1:a2:69:79:30:6a:ac:11:
d2:75:58:26:b6:82:7b:46:cb:67:29:9c:bb:c4:29:
be:1c:80:b6:19:32:8f:c2:b9:32:49:84:7c:ff:e5:
21:09:04:c9:d5:48:6c:a0:e7:68:a0:b9:a7:ae:9a:
e5:80:38:01:14:6a:fc:2c:98:42:36:c8:0e:15:2a:
88:f2:c4:5e:b1:da:4c:f4:6f:fa:0a:53:fa:26:9f:
3b:d6:83:47:52:89:c7:db:9f:85:77:9b:4a:da:f3:
28:8c:87:57:78:5b:a9:61:78:a5:03:9b:fb:67:5d:
0f:1b:41:e3:7c:67:93:d0:97:4e:25:b7:4a:4e:d6:
12:32:1b:ad:87:6b:47:6b:a5:1f:71:57:81:08:9a:
a7:88:c8:47:90:40:d5:5e:30:0e:e7:5c:90:14:ca:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:1E:CC:87:67:26:E5:FC:A7:EB:5F:6F:E9:B5:31:83:CF:89:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.21.212.0/22
Signature Algorithm: sha256WithRSAEncryption
43:7b:48:cf:51:19:e0:01:0c:a0:63:44:2f:6c:77:71:58:8f:
44:c0:02:28:03:a4:14:37:07:59:54:02:dc:6e:5f:e0:08:e0:
e6:60:8d:59:d6:e3:a7:37:f3:3b:f2:fc:3c:60:81:f6:1c:03:
e4:7b:77:b3:09:b0:fc:80:6a:cf:b5:00:cc:25:25:23:cf:29:
2f:4d:b8:10:42:82:c7:8f:83:bc:d1:c8:49:29:71:b8:d2:a8:
4a:ca:e6:cb:95:15:7c:9d:74:ca:53:f5:1e:e0:20:eb:fc:53:
df:3e:76:f8:42:60:92:ee:91:64:19:c0:e7:99:6d:a5:c8:b7:
97:87:41:c6:d1:aa:2c:3d:1f:c0:0e:d7:49:ae:1f:56:0f:15:
49:e0:4d:b4:fe:e6:24:b9:62:7b:0a:08:cc:06:e0:4c:8d:1e:
8d:8a:56:92:9c:fe:4b:56:33:2b:e9:63:96:74:85:13:16:3c:
2c:95:39:89:b1:1e:d7:5a:e7:69:d3:3b:63:06:e1:51:f5:4f:
64:ed:56:f7:71:7a:34:51:ae:00:24:7c:46:41:f1:17:4e:17:
6c:45:be:d4:43:65:0a:1d:93:bd:d6:fe:3f:87:05:39:b0:4f:
f6:6e:ab:1b:1f:2c:94:19:81:3b:27:5b:d0:bb:27:e1:38:21:
3d:17:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:18 2025 by rpki-client