Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa
File: 17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa (raw, json)
Hash identifier: Y21qs7ZJEl1oShHIw6j+1jOQ4hXcdpWfMlfaRUHH4sk=
Subject key identifier: 03:FA:71:83:FF:4C:2E:8F:C4:C7:D2:16:FA:E0:63:D9:EF:F8:76:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38C82583386EB0292C99475951CD83292A039F3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa
Signing time: Sat 27 Sep 2025 00:40:25 +0000
ROA not before: Sat 27 Sep 2025 00:40:25 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 66.152.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c8:25:83:38:6e:b0:29:2c:99:47:59:51:cd:83:29:2a:03:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:40:25 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=38643a6129dd1ab8025e330585143f0c1ee67b9caac1a2e36e1c76b550d38cce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:02:2c:64:75:73:af:50:58:15:be:91:73:
e5:c0:74:d8:a8:0c:1a:57:a4:71:19:17:7b:7d:e1:
1d:a8:33:11:c0:32:5c:e4:86:fb:56:fd:af:95:19:
f4:76:69:5c:df:84:e6:15:30:bb:5b:ed:bd:35:18:
9d:03:c7:91:bc:82:ce:d1:a0:4a:43:ca:bf:ad:28:
45:0b:63:9d:6d:1e:ad:76:0a:70:38:00:70:05:64:
53:f8:fd:e8:b3:57:39:1b:07:d5:59:25:a4:d7:dc:
10:ee:a3:65:8d:e9:12:45:79:a2:86:f2:e4:fe:bf:
c0:52:1d:a1:da:7f:2a:95:ec:ea:76:b8:4c:b1:c8:
3a:0d:04:e5:49:f0:49:06:1a:6a:b3:f3:00:38:ba:
5f:a8:d5:dd:22:6f:a7:2a:37:5f:8e:1d:5b:fd:71:
d7:2d:71:bc:c8:8a:e6:a4:fd:94:6e:c8:71:65:21:
02:f9:df:b7:52:ab:f9:cb:67:fc:36:2c:29:c5:0c:
87:5b:0b:30:2a:e2:1e:95:39:f9:87:3c:28:81:9c:
0b:1f:a9:eb:51:b6:df:86:dc:3f:96:83:d2:d5:9c:
31:ec:5e:3c:4a:6d:1e:75:05:11:4a:e3:99:cc:2d:
55:03:7c:99:a6:f3:6b:61:cd:b2:37:c1:3e:e0:56:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:71:83:FF:4C:2E:8F:C4:C7:D2:16:FA:E0:63:D9:EF:F8:76:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.152.160.0/19
Signature Algorithm: sha256WithRSAEncryption
43:dd:2d:e3:59:8b:31:92:6b:0f:59:ec:4f:a8:03:88:15:7b:
1c:b4:3f:5a:a9:b2:73:62:e1:fc:1d:05:1e:a2:05:e8:ff:d5:
1e:ac:cd:4a:06:2e:fd:cf:d2:3f:c7:b7:7a:55:ac:34:ba:0c:
02:e1:8b:7e:b9:a6:b7:53:04:8b:e4:f9:4b:61:50:72:b7:f6:
f3:d0:07:3a:80:27:fd:bc:f0:ce:4b:10:ac:53:4b:e9:da:30:
3f:4a:48:d0:84:4a:20:17:d8:87:ed:d6:cd:86:11:99:aa:7e:
e5:e3:00:a9:e9:4e:0a:c6:cc:db:77:44:f1:85:36:a8:62:89:
6b:1e:9c:a1:88:5c:6f:e8:36:30:52:22:d3:e5:0f:3d:99:2a:
f9:8d:6c:cc:59:7e:db:b6:26:e2:c9:8c:34:53:d5:67:96:cd:
67:10:79:26:8b:03:26:54:3f:e6:67:dc:79:e9:51:80:89:f1:
f4:bf:83:54:2b:7b:44:c9:d2:03:d8:c1:23:5d:71:ad:cd:bc:
89:dd:b4:73:a3:42:08:81:81:36:3a:00:bc:e1:34:42:87:af:
6c:24:0a:d5:a0:27:21:65:9b:24:f7:4b:26:70:bd:e8:a3:5e:
49:bd:24:a9:8e:d2:b1:a0:63:b3:0c:a2:39:02:b8:65:fa:66:
40:44:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:37 2025 by rpki-client