Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e661058-0a7e-4ab8-b0b8-b3cbda7ec43d.roa
File: 2e661058-0a7e-4ab8-b0b8-b3cbda7ec43d.roa (raw, json)
Hash identifier: 8nLe8WzigXb76ocpO5P88b2BVni//IL3P+7n07V1LKI=
Subject key identifier: 0C:5E:62:22:81:CE:F9:01:DA:37:D2:8F:5F:36:7E:FD:A5:5D:99:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07046766875C22C22726D76B4B7B4B518BD55915
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e661058-0a7e-4ab8-b0b8-b3cbda7ec43d.roa
Signing time: Tue 14 Oct 2025 16:41:13 +0000
ROA not before: Tue 14 Oct 2025 16:41:13 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:04:67:66:87:5c:22:c2:27:26:d7:6b:4b:7b:4b:51:8b:d5:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:41:13 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=6a8a79fd325c3eb026cdad6ae0a03cb3aa7c84de20b9de504ca8ce4235237d12, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:fd:aa:0a:0b:2a:b7:e8:48:37:66:b6:c2:
a1:84:30:01:4a:76:bd:4b:8a:0e:cd:0b:50:b7:e9:
c6:47:c1:bc:6b:11:08:dc:0d:01:96:5f:ec:73:c3:
31:a9:85:7b:55:f0:47:83:ab:91:fb:cd:63:cd:f8:
eb:58:ff:c5:63:2e:e6:40:b5:7c:c2:f7:66:ca:10:
31:14:06:04:b9:5b:0b:86:58:51:1c:15:47:cb:91:
ee:3c:2b:fe:27:af:63:6f:b0:26:a6:9e:65:ef:4b:
a9:5b:d8:0f:08:4c:46:9a:a0:e5:79:6f:d3:5f:c0:
f0:6e:28:fe:6f:b6:6d:8e:3f:9a:dd:34:72:ad:59:
2d:a3:42:a9:ee:7d:77:5f:e0:bf:42:66:14:a8:33:
3f:b4:99:24:af:aa:62:8e:1e:e5:7f:b3:85:b7:2b:
4b:98:f9:03:35:06:6a:a1:ee:97:ef:a9:3d:0c:d2:
e6:ca:57:8d:92:38:dc:70:84:22:a1:9d:5b:47:fe:
2a:c7:7d:ef:26:11:f2:32:56:c2:32:91:d8:b4:c9:
fb:85:df:a6:93:73:bc:f1:52:ec:63:55:28:78:b2:
62:e3:7f:6f:53:36:1e:70:56:4a:05:0b:44:e0:10:
8f:ff:c4:be:0e:98:e1:c0:9e:b9:0f:f2:92:90:84:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:62:22:81:CE:F9:01:DA:37:D2:8F:5F:36:7E:FD:A5:5D:99:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e661058-0a7e-4ab8-b0b8-b3cbda7ec43d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.173.0/24
Signature Algorithm: sha256WithRSAEncryption
64:98:e3:16:c6:06:58:7e:7f:ad:ae:c4:e9:ae:e4:9e:85:09:
b6:3e:37:95:57:2e:fa:18:e4:49:b5:38:54:1c:f7:14:43:c3:
89:6f:48:91:96:37:68:70:a6:fc:be:a8:9f:aa:1e:f3:31:7a:
05:6f:24:21:f0:3c:99:bc:0f:2a:c5:b8:e8:bb:f8:cb:93:98:
bd:1e:08:cf:7c:39:1f:60:3e:14:f2:1c:08:95:68:55:3a:63:
30:00:7a:1a:91:a3:6b:2c:d9:0b:4c:c4:ee:e3:58:cf:07:df:
5a:3f:ce:d2:24:24:2c:fe:51:cc:4d:76:28:a5:fe:4b:db:b8:
cc:72:c9:4e:dc:fe:8c:b3:19:2b:64:24:1c:ab:be:ff:ca:fc:
9e:dc:d1:70:f1:2d:2f:c0:20:03:06:99:e2:2d:76:b6:09:61:
1a:cb:e7:fc:21:ab:d7:9c:14:95:34:8d:68:23:4c:5e:0f:96:
e7:c6:40:a7:34:14:5f:85:cb:65:3f:6c:2f:3f:97:49:e2:59:
d5:85:28:f7:80:df:d0:57:28:37:95:44:5c:c5:85:f2:8b:66:
83:7e:6b:eb:a6:87:a3:d4:65:c4:ae:a8:9e:8a:1e:2d:ff:db:
de:a4:7e:58:f5:d8:f0:90:f6:5e:bf:84:65:7a:58:5c:cb:4a:
86:14:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:42 2025 by rpki-client