Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18bd015b-a085-45f5-ad0d-937d408c061f.roa
File: 18bd015b-a085-45f5-ad0d-937d408c061f.roa (raw, json)
Hash identifier: QP9aWy2N3lJWPFMzKNmCZ+gAQKk5nEvuXUCpYbS/neM=
Subject key identifier: E7:12:16:95:45:8D:45:B1:6B:9D:7F:76:BB:71:55:72:94:FC:B5:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 68C453B49B95630DE4A5026405EDA433840D33A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18bd015b-a085-45f5-ad0d-937d408c061f.roa
Signing time: Tue 14 Oct 2025 17:12:11 +0000
ROA not before: Tue 14 Oct 2025 17:12:11 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c4:53:b4:9b:95:63:0d:e4:a5:02:64:05:ed:a4:33:84:0d:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:12:11 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e0dc0279bd23d58619c20741237e4827807b2a5e391535ad500ffeae084a3b6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:4b:db:24:6f:c3:4f:71:4a:7a:7e:d6:6d:
b0:10:02:ad:99:79:c2:94:ed:95:40:d0:26:40:6b:
59:c4:5e:49:c9:28:15:73:8e:58:d6:73:19:17:47:
6d:9e:49:0e:09:a1:d6:d8:47:a6:77:45:47:ca:f3:
42:4d:95:d0:a2:60:bf:36:31:f1:8a:cd:57:f4:89:
06:ce:71:8c:71:5c:b2:00:e4:85:60:99:b2:63:0f:
c8:37:48:fa:5d:1c:9b:80:db:84:e6:f7:3d:67:b6:
a1:59:fa:78:0b:dd:44:8f:ce:8d:24:42:81:e5:94:
de:9e:aa:f3:90:5d:9a:da:70:41:fd:b0:13:48:d0:
ac:6d:76:9e:e9:c3:1f:52:b1:4e:75:0f:c0:6e:41:
a1:9a:f2:e7:cf:79:76:3f:29:1d:c8:23:24:ca:84:
76:45:a8:bf:5f:35:fa:80:87:24:1c:b5:db:32:4c:
07:22:c4:be:66:fd:22:d1:1a:44:7e:ba:89:cc:2f:
33:b5:40:13:9e:8b:9f:1a:e7:9e:55:2e:47:f5:60:
33:cc:1e:48:ea:01:43:60:0d:db:8b:65:cc:4a:93:
b3:a7:54:13:41:60:3e:2c:b5:4d:d8:7a:8a:25:59:
87:d9:41:3b:4f:91:1d:c6:75:04:36:07:75:5d:9d:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:16:95:45:8D:45:B1:6B:9D:7F:76:BB:71:55:72:94:FC:B5:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18bd015b-a085-45f5-ad0d-937d408c061f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:cf:1f:8b:21:fe:64:d8:a9:c1:a9:9a:0b:27:8e:bd:47:13:
5f:77:7c:26:86:6e:8e:13:0c:4b:78:50:81:a1:ef:6f:11:84:
af:9a:16:b7:f5:e6:e9:5f:d7:ea:12:00:d5:d3:3a:a7:b1:83:
4c:4d:e2:ea:f8:77:5e:d8:27:d1:1b:f2:ba:48:05:37:98:b0:
96:3d:48:95:ec:e5:3c:e6:1a:ca:fc:77:47:fe:69:bc:05:b9:
66:75:fb:ca:a8:d4:af:12:d1:7b:ff:1d:8a:04:70:42:2d:d5:
97:52:f3:58:78:45:d8:cd:cc:30:ef:8c:29:8d:7b:2e:e4:1a:
ab:e1:d8:74:6a:01:18:1c:8b:23:8c:b6:83:34:79:d3:39:3d:
43:09:73:5d:10:8b:ce:68:6a:e4:fb:c5:9b:d9:9c:96:06:ed:
c7:62:40:57:75:dc:5f:82:c5:fd:8f:8e:78:0d:f5:41:0e:fb:
57:8e:d8:98:e8:20:19:fe:7f:c5:a6:30:bb:c1:cd:bf:28:7d:
9b:d8:0a:89:3e:41:d4:5d:0d:f9:d2:fc:17:0d:95:d9:de:dd:
ce:50:57:ec:f3:e2:1c:7b:03:05:b0:fb:63:f0:bc:e8:43:4f:
11:2b:1b:d4:29:a4:4c:17:e8:b0:ed:24:07:ac:36:ea:ef:79:
f5:b1:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:13 2025 by rpki-client