Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/275ea10f-e9b4-4c65-ae45-6bb1238c8481.roa
File: 275ea10f-e9b4-4c65-ae45-6bb1238c8481.roa (raw, json)
Hash identifier: pfqSQJEFlrv3+bRGqN7q97sQIPKsy2ev1DB6WlqP1xA=
Subject key identifier: 1B:F2:F0:95:7A:F5:1A:16:1A:08:2C:45:4B:53:1D:8F:1C:58:DD:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6ED656E42F54A953C52E99D64220BD6F965F04E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/275ea10f-e9b4-4c65-ae45-6bb1238c8481.roa
Signing time: Tue 14 Oct 2025 16:39:01 +0000
ROA not before: Tue 14 Oct 2025 16:39:01 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d6:56:e4:2f:54:a9:53:c5:2e:99:d6:42:20:bd:6f:96:5f:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:39:01 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=84c8d708bdecf12875528e818fd504401edd97e444bc52705e085dcc1160a245, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:70:f7:3a:2e:bf:9f:63:a0:6b:3e:a4:03:
57:88:47:ca:59:28:cc:45:b5:16:30:c3:e7:98:18:
1b:7e:63:36:84:e4:2f:17:e9:8b:71:ea:c7:2d:c6:
ad:78:10:5e:2d:c2:54:e0:6e:62:48:6c:dc:76:bd:
54:7f:3f:0b:6d:89:12:ae:55:12:5a:92:e5:53:bb:
5d:61:fc:b9:56:27:9c:02:c6:43:96:86:45:48:f5:
5d:a4:31:b3:db:69:d5:16:93:9c:b6:be:86:c2:a4:
ab:97:65:a5:c9:95:cb:b1:3f:29:42:6d:67:6a:fc:
5e:65:5f:29:b2:1b:3d:fb:57:ab:3a:a2:5f:ab:18:
48:c7:69:fb:92:58:e1:ad:49:84:20:6d:ff:2a:54:
67:71:cd:db:32:0f:ff:bd:5a:f6:ba:fb:de:0a:d1:
94:07:2f:09:12:e2:7a:3c:cc:5c:c8:55:85:dc:d0:
cd:78:8c:2e:b3:bd:5a:dd:76:6e:44:55:83:45:85:
d9:cc:72:ea:2b:af:d9:09:a3:13:ab:1c:81:87:1a:
8f:1f:eb:91:f3:e9:97:a8:61:84:9e:14:7b:2a:9c:
0c:c0:58:fd:d0:2a:19:23:e2:81:f9:64:44:d4:d3:
d5:39:fd:5b:5e:28:87:a6:2e:a3:0d:7d:90:d0:2b:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:F0:95:7A:F5:1A:16:1A:08:2C:45:4B:53:1D:8F:1C:58:DD:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/275ea10f-e9b4-4c65-ae45-6bb1238c8481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.128.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8d:5e:0b:45:a6:a8:c0:ef:6d:9d:d1:52:8d:18:a9:37:11:
c1:d0:6d:dd:3b:45:7b:dc:da:e8:33:45:f2:1d:07:7e:52:e2:
23:98:9c:0d:9e:4a:f5:ac:58:58:1a:80:6a:b8:95:6f:01:70:
0c:15:5d:c0:ac:86:9d:e8:d4:5f:8f:b6:74:b6:84:19:69:e4:
d3:88:c5:39:99:c1:e3:28:cb:06:7f:98:2b:f1:f1:1b:92:6c:
24:eb:2d:44:6a:2c:b1:d4:53:59:d7:6f:ae:03:51:9b:c6:ba:
63:8b:f9:28:46:00:05:3c:ca:e8:f3:34:1e:a9:30:b9:db:b8:
8a:1f:1a:43:02:db:09:d3:96:82:2a:f3:a5:5d:e9:57:56:d9:
33:e1:a0:76:11:c2:fe:73:b9:63:47:9d:ff:c8:0c:4f:7b:fc:
c8:d5:14:b2:a1:6b:f0:be:0a:45:d6:f2:10:6b:6d:f2:40:fa:
bc:4b:7a:d8:20:d0:59:ca:5c:c2:81:25:0e:8c:9d:f4:d8:06:
69:a8:06:11:ad:e0:1c:89:24:57:c5:99:6d:43:7a:9c:2f:1a:
65:5a:98:11:c6:37:6c:34:6b:88:c5:da:8f:56:de:1a:5f:0e:
39:cf:38:cd:05:3d:52:b9:d3:e1:ac:60:b2:ea:9e:c5:dc:f3:
1d:c2:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:47 2025 by rpki-client