Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26735de6-5d04-4b7b-9451-be9b4570880b.roa
File: 26735de6-5d04-4b7b-9451-be9b4570880b.roa (raw, json)
Hash identifier: hXPUhKH4MT0HgeSR+bVTBu2ND75aSLSIggzgd58fcSE=
Subject key identifier: 30:D4:09:2D:CB:53:D3:CE:F4:00:57:AC:42:E9:88:56:2E:22:07:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7127F3C709461914D4B265B22D2C7F93784462B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26735de6-5d04-4b7b-9451-be9b4570880b.roa
Signing time: Sat 27 Sep 2025 00:23:33 +0000
ROA not before: Sat 27 Sep 2025 00:23:33 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:27:f3:c7:09:46:19:14:d4:b2:65:b2:2d:2c:7f:93:78:44:62:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:23:33 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=77efd8cc24d31a4be9e0d2b5d4e30169ac042c8e03f95f22f4b2f1138e20c28c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:d2:17:cc:1d:b9:e1:df:e1:85:9f:1e:7b:
cb:7f:78:5f:f2:fb:f4:5c:ea:45:2f:fb:6f:43:3e:
9c:a1:55:73:df:57:1b:59:ed:6b:e6:82:b1:ba:c4:
c2:6e:75:13:d6:0b:e5:75:0d:0e:1a:42:98:c8:e4:
a0:06:b3:10:5d:c3:6b:89:fb:31:49:7d:dd:ab:f4:
0a:ee:5a:38:2f:7d:c8:bb:d6:96:c4:31:52:68:bf:
0b:02:1b:2e:04:a9:22:19:4c:eb:81:85:3b:04:12:
20:17:47:b2:de:a4:7a:4d:e0:9d:44:64:c7:5b:f5:
92:0f:e9:4a:6b:4c:ed:f0:50:2a:23:54:0b:18:70:
b4:54:b6:5b:36:48:e5:b3:22:06:0a:f2:05:40:f8:
a7:ae:37:d9:e9:2b:26:d1:b7:63:f0:1c:d3:a0:1d:
32:d1:5f:76:e5:fc:ef:ff:e0:66:63:69:72:e7:f4:
69:5c:8b:e0:f2:97:3f:82:79:a4:51:dd:4a:a7:d3:
d3:68:82:7f:9d:57:90:f0:cc:e2:9f:0a:ed:34:a3:
87:cd:e5:09:15:9b:e1:ff:46:14:83:ed:22:67:80:
75:d9:45:67:fd:79:29:16:64:54:0d:65:8e:d5:87:
88:77:dc:64:e9:bc:27:d2:9b:56:be:3b:52:65:ea:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:09:2D:CB:53:D3:CE:F4:00:57:AC:42:E9:88:56:2E:22:07:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26735de6-5d04-4b7b-9451-be9b4570880b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e0:1f:75:94:56:2b:ff:43:d5:3f:64:6a:eb:30:28:a7:99:
fa:03:4d:f3:28:a2:65:eb:1d:be:1f:3f:a4:95:9e:e7:27:1f:
3a:cc:ef:96:5e:b6:04:f9:36:98:fb:7f:dc:11:dc:54:4a:ae:
e0:16:1c:f1:30:2f:03:9c:75:6f:c2:50:55:29:2a:95:90:7c:
5e:db:7f:a1:64:5e:48:da:f0:0e:7a:21:27:b0:09:5d:78:56:
20:78:37:99:69:30:4a:7e:b8:78:76:20:73:71:27:27:c2:be:
c8:05:7c:df:6e:82:92:a2:c3:64:bb:58:81:49:9f:5a:2d:b8:
b0:4e:76:22:b9:21:f9:31:b0:5e:18:62:bc:9a:ea:13:94:b4:
df:65:d7:b5:9e:00:3b:74:92:82:fe:89:26:18:7c:0c:a0:ef:
42:30:10:82:c7:94:39:b5:15:db:19:3e:24:40:ee:6e:da:99:
f4:3c:a3:4a:5f:dd:97:2a:a3:44:f4:a3:3a:6b:69:e6:8f:e4:
82:4e:bd:26:46:04:95:38:a8:37:75:09:24:5f:06:b0:72:c6:
fe:72:5a:1b:22:a4:8d:25:99:19:a8:59:10:74:6a:de:38:05:
a9:44:61:8f:1d:e8:0a:0e:b1:ab:b2:a8:4e:5f:f4:9d:e8:54:
09:33:0e:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcSfzxwlGGRTUsmWyLSx/k3hEYrcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI3MDAyMzMzWhcNMjUxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A3N2VmZDhjYzI0ZDMxYTRiZTllMGQyYjVkNGUzMDE2OWFj
MDQyYzhlMDNmOTVmMjJmNGIyZjExMzhlMjBjMjhjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCp4NIXzB254d/hhZ8ee8t/eF/y+/Rc6kUv+29DPpyhVXPf
VxtZ7WvmgrG6xMJudRPWC+V1DQ4aQpjI5KAGsxBdw2uJ+zFJfd2r9AruWjgvfci7
1pbEMVJovwsCGy4EqSIZTOuBhTsEEiAXR7LepHpN4J1EZMdb9ZIP6UprTO3wUCoj
VAsYcLRUtls2SOWzIgYK8gVA+KeuN9npKybRt2PwHNOgHTLRX3bl/O//4GZjaXLn
9Glci+Dylz+CeaRR3Uqn09Nogn+dV5DwzOKfCu00o4fN5QkVm+H/RhSD7SJngHXZ
RWf9eSkWZFQNZY7Vh4h33GTpvCfSm1a+O1Jl6pZdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMNQJLctT0870AFesQumIVi4iBxwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2NzM1ZGU2LTVkMDQtNGI3Yi05NDUxLWJlOWI0NTcwODgwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjgwDQYJKoZIhvcNAQELBQADggEBALjgH3WUViv/Q9U/ZGrrMCinmfoD
TfMoomXrHb4fP6SVnucnHzrM75ZetgT5Npj7f9wR3FRKruAWHPEwLwOcdW/CUFUp
KpWQfF7bf6FkXkja8A56ISewCV14ViB4N5lpMEp+uHh2IHNxJyfCvsgFfN9ugpKi
w2S7WIFJn1otuLBOdiK5IfkxsF4YYrya6hOUtN9l17WeADt0koL+iSYYfAyg70Iw
EILHlDm1FdsZPiRA7m7amfQ8o0pf3Zcqo0T0ozpraeaP5IJOvSZGBJU4qDd1CSRf
BrByxv5yWhsipI0lmRmoWRB0at44BalEYY8d6AoOsauyqE5f9J3oVAkzDtw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:26 2025 by rpki-client