Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa
File: 2309db7a-9533-458b-bc2b-77dd1708ae8a.roa (raw, json)
Hash identifier: BEl1B9yHGofFSBEfjcO8JNkoda8d06W5ptvkomcZVc4=
Subject key identifier: 92:15:D0:37:11:68:00:5D:BC:4C:08:C5:76:2E:FE:80:A8:33:02:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5541469AF7C6A1D30F8899E34DF03C7494C47772
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa
Signing time: Wed 01 Oct 2025 00:41:18 +0000
ROA not before: Wed 01 Oct 2025 00:41:18 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:41:46:9a:f7:c6:a1:d3:0f:88:99:e3:4d:f0:3c:74:94:c4:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:41:18 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=d24d40863c0a55a0c63193e17dfc353ce6fc65a26533e839027c338511317698, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:4e:98:e2:67:a0:23:f2:a0:70:38:80:76:
c9:7a:6a:a8:41:c0:f7:2d:fe:9a:9c:5d:b0:7f:16:
aa:23:9f:77:c0:86:47:6a:a9:87:b1:53:35:68:58:
75:0c:fd:57:cc:66:74:1f:51:a9:7e:ad:b3:45:cf:
79:86:6e:eb:81:ab:30:ec:42:cc:c6:36:f2:39:ff:
a1:d6:63:fc:cb:83:39:6a:ea:c6:a1:bd:32:9c:29:
2c:e9:4c:fe:c2:ba:24:f5:12:8e:8c:1a:c2:e6:9a:
ac:87:b3:57:9b:5b:a5:36:77:52:61:5b:d1:8c:40:
96:1f:57:49:c7:61:0a:bf:89:89:04:0e:d8:7b:c1:
89:ff:f3:35:ac:28:8c:ff:72:2e:32:e4:d7:e2:7d:
a0:f3:85:7c:93:72:d4:30:c4:63:1a:e3:8d:07:ec:
64:99:8b:3a:72:cb:6b:a4:4e:51:0b:af:71:84:3c:
74:71:f1:7c:ad:1d:12:7a:cf:52:11:c3:11:b3:dc:
85:1c:f4:ac:79:b4:30:f5:af:0e:2d:c3:d3:6f:bd:
6c:2c:f8:2f:eb:04:53:7f:80:84:03:1a:f1:76:95:
5b:43:90:a4:24:dd:18:47:3a:79:fd:c9:a3:0d:6b:
a4:b8:37:8a:0a:89:58:b2:49:1f:de:03:ac:ea:72:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:D0:37:11:68:00:5D:BC:4C:08:C5:76:2E:FE:80:A8:33:02:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:82:c3:b9:34:28:a9:f4:74:81:2a:93:03:60:62:83:f9:f4:
33:36:fd:50:06:ac:75:48:08:82:0d:69:13:79:00:66:f8:6e:
36:16:3e:0c:95:d0:37:2c:d7:f3:bf:46:cd:eb:9c:06:f8:06:
93:04:99:71:fe:23:50:01:95:58:17:10:ec:ab:f2:ae:3a:df:
e2:ce:2c:58:b0:e9:83:20:f9:5f:6f:ab:87:25:ee:ac:e1:93:
9d:c3:1d:47:93:f9:cb:63:fa:89:55:97:ff:79:b6:b4:93:56:
71:d0:16:5f:64:ea:a7:97:ae:22:4a:d6:06:2e:72:44:79:0c:
da:ec:34:dc:f3:65:60:b6:cd:b0:b1:fc:80:82:95:78:33:fd:
11:bf:99:2c:2e:7e:18:cf:f3:e6:12:3a:3d:9d:cd:92:f9:09:
b1:e4:2c:b0:06:37:bf:97:81:14:3a:3f:16:ab:a1:e3:37:a4:
85:22:e0:e6:d6:b3:e1:98:85:45:dc:e7:e1:99:74:cc:f5:fa:
22:31:4f:26:fd:5d:2f:bf:df:e7:ab:36:ec:d0:ab:64:7f:00:
a6:e2:bf:7a:f4:a0:d5:b9:3e:e7:00:06:c0:fa:ae:51:c6:11:
c9:1e:3d:b8:aa:95:45:cd:53:7e:a0:53:0e:e4:7c:6f:28:aa:
54:49:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:47 2025 by rpki-client