Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19571bee-b51f-4228-bb30-7c0ad1c4ce5f.roa
File: 19571bee-b51f-4228-bb30-7c0ad1c4ce5f.roa (raw, json)
Hash identifier: uPujD1+sErGcPQJ7/VZjoJDU9uCTkZc2NFOBRbiT86Q=
Subject key identifier: F1:B9:FA:C0:CF:03:F6:A2:9A:82:4A:4F:C0:54:9F:7D:57:1C:D8:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E3A6E0AFAE18B5CC1C38C28CBABCAF45B914FFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19571bee-b51f-4228-bb30-7c0ad1c4ce5f.roa
Signing time: Tue 14 Oct 2025 17:41:21 +0000
ROA not before: Tue 14 Oct 2025 17:41:21 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3a:6e:0a:fa:e1:8b:5c:c1:c3:8c:28:cb:ab:ca:f4:5b:91:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:41:21 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=93d5514cb82cb42788a8d751ddad9ec6071d82c715b2620e2af4c6d39592f7a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:a1:ea:50:3b:93:9e:a7:74:bf:40:77:cd:
c5:aa:c8:a6:90:ef:5c:74:97:8c:86:39:81:42:af:
a6:fc:32:e6:d9:29:c1:0a:ed:bb:58:0f:11:e6:c6:
30:f4:fa:22:fb:6d:d8:5b:f6:98:18:34:db:46:db:
4c:36:4e:f7:2d:2e:71:be:f8:20:0f:12:1f:8b:ee:
13:ef:87:92:b9:53:97:c7:2a:c1:e5:9d:9a:7e:a8:
c6:de:19:06:c8:eb:33:91:fe:9d:c7:71:1b:c6:04:
20:95:69:03:c3:b3:d8:75:6c:d3:87:99:e7:cf:e5:
46:13:15:e8:2e:40:48:2f:82:0a:e2:e5:5d:83:32:
db:ad:a3:44:27:b5:85:33:70:3d:ef:2c:c3:52:36:
a5:a3:45:31:32:82:13:a9:b1:e5:3d:6d:5b:dc:02:
33:0b:70:0b:86:0d:3c:95:12:ab:66:ed:d1:76:f1:
79:df:4b:a3:a8:d9:40:c3:f7:23:a8:c7:52:10:49:
78:c0:c2:8a:71:93:a7:ee:29:29:f5:e8:d4:7b:9b:
8c:42:aa:52:38:4c:36:98:ad:3e:61:1e:9a:8c:5d:
f6:85:96:cc:f0:38:ca:14:0d:ab:05:65:d2:b8:72:
49:42:dc:b5:9a:ff:d1:ab:fd:ef:dd:90:c5:e0:13:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:FA:C0:CF:03:F6:A2:9A:82:4A:4F:C0:54:9F:7D:57:1C:D8:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19571bee-b51f-4228-bb30-7c0ad1c4ce5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.17.0/24
Signature Algorithm: sha256WithRSAEncryption
50:41:87:1a:f8:f4:fe:a6:98:c8:30:c8:35:e9:b1:f0:bb:85:
27:be:af:28:41:0a:b6:ef:ae:db:82:df:3f:d1:d2:1a:64:f5:
4c:0e:a8:27:4b:1a:fc:4c:9c:fb:a5:17:80:1b:a8:35:4b:73:
db:fc:ee:6f:66:7e:d8:ed:6b:93:10:84:c0:08:0c:14:b2:62:
ff:db:d1:20:8e:88:30:a8:f2:b8:c6:44:14:86:c6:59:77:e4:
1f:70:2a:e7:f1:9e:29:e9:33:6a:99:f6:e5:b2:6b:1f:37:b2:
76:a0:b9:ef:1e:ed:67:35:d6:7e:b6:ad:df:36:81:91:f2:12:
b0:46:40:15:c9:e2:fc:07:6b:2e:c2:75:9d:a6:08:7a:e1:c6:
ed:29:44:44:d2:03:9c:8c:d3:17:ec:86:94:8b:b4:e7:8c:89:
de:c8:13:97:ec:ef:3f:7b:12:38:c4:bc:93:de:94:1f:f6:83:
ba:0c:31:27:a9:c7:7d:7a:53:44:c1:e3:37:86:1d:2b:63:73:
00:8e:51:d9:ad:34:51:c7:65:f4:d3:e5:b6:60:b5:4a:c0:b1:
9f:83:b2:14:00:87:09:16:eb:05:77:18:b6:29:9f:c2:71:3d:
f9:40:2b:71:28:02:be:80:1b:4f:97:1a:23:e3:20:36:d8:41:
66:36:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:47 2025 by rpki-client