Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f42-2ffc-4217-9e32-f46cec71a85a.roa
File: 49d51f42-2ffc-4217-9e32-f46cec71a85a.roa (raw, json)
Hash identifier: PDZpl6IaSW2wLYSgH9xd8vel6at+86++nQG1kxnq1Nk=
Subject key identifier: 74:D6:E3:36:30:B6:FC:F2:D4:C9:38:91:BD:92:4D:67:42:D5:21:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45ECD2652ABD35FA5826ED4F8C7F2CA7A3264D46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f42-2ffc-4217-9e32-f46cec71a85a.roa
Signing time: Sat 27 Sep 2025 00:23:19 +0000
ROA not before: Sat 27 Sep 2025 00:23:19 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ec:d2:65:2a:bd:35:fa:58:26:ed:4f:8c:7f:2c:a7:a3:26:4d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:23:19 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=b143e68d4b3c5ac371981af649291870c15d53736e3a5e373b226bec24af1592, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:67:7e:4f:45:a0:dc:40:97:45:3e:6e:73:
6b:32:19:08:72:30:57:fc:7b:0e:ef:05:98:2b:67:
6e:7e:5a:8d:e1:57:ee:a7:89:62:79:81:e9:7f:65:
6a:d4:b0:1f:eb:94:c9:18:bb:d2:3a:37:5d:63:fa:
bc:d0:ef:10:37:b7:82:fa:e8:bd:b6:5f:bd:e0:43:
14:3f:82:ca:e7:f7:d4:2d:5b:a1:e1:09:cc:ba:6a:
c1:d2:01:df:22:cb:da:44:07:bc:28:18:70:85:e6:
3f:e7:ed:22:d7:d9:bf:93:89:39:a1:0d:d0:7f:42:
3e:18:00:a3:0a:57:bc:54:65:04:78:26:9d:88:d8:
b9:f1:48:7b:b8:e8:4f:58:6b:b2:5c:41:da:c0:f3:
0a:80:18:fe:d0:93:cf:31:11:82:2c:d4:52:76:1b:
29:a1:96:56:50:73:31:9b:28:ae:86:e1:b6:80:66:
c8:51:8f:41:32:66:25:53:a8:33:61:db:c2:bb:c7:
1d:1a:37:f9:b0:3f:f5:d1:c1:08:87:01:71:d0:5c:
cc:37:fd:6c:bc:33:ad:be:6c:c0:5e:e6:87:d7:b7:
63:cc:9b:90:98:36:1f:d0:88:a0:e7:6e:c9:62:55:
c4:59:a4:56:76:77:44:b3:55:bc:ae:0d:5c:f1:b4:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:E3:36:30:B6:FC:F2:D4:C9:38:91:BD:92:4D:67:42:D5:21:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f42-2ffc-4217-9e32-f46cec71a85a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:77:10:30:df:60:f1:22:95:fb:0a:72:a4:e7:fb:48:02:3f:
41:c9:82:4f:87:56:a1:3b:90:b4:45:38:ea:fe:60:06:ba:84:
51:b9:34:7c:dd:35:ae:7e:59:e9:66:e1:4c:a6:e1:3c:0a:ee:
59:f0:4b:ca:13:77:bb:27:db:e3:ac:4e:17:d3:31:2e:bc:c2:
f4:7a:49:b6:8a:bb:b6:94:d5:fd:0f:7d:bf:27:a7:a1:28:21:
d1:9b:e6:82:2b:91:9a:a1:d8:5e:29:32:e6:0e:68:f4:10:6f:
a4:20:ff:8a:4e:5b:c1:1b:8b:70:4b:e3:6e:75:0c:01:e2:0e:
ec:47:ec:8c:14:46:e8:17:ba:7c:68:19:9d:59:95:e8:36:22:
57:89:eb:b6:06:ed:cf:fb:bb:0c:9b:b4:db:9c:27:f6:4d:1e:
21:16:5a:8e:a9:af:57:41:e7:68:1c:0f:90:b7:ed:6e:e0:f8:
fd:05:55:2e:70:63:d9:72:d1:12:c7:fb:a1:d8:dd:6c:bc:fa:
af:38:34:3c:9c:3a:7d:12:8d:23:1a:58:33:06:a8:35:ab:8d:
bb:11:57:2e:be:2a:b9:da:5f:b3:cd:38:07:b6:7c:25:33:c2:
70:aa:e7:04:1f:3e:8a:d7:a0:f3:72:32:85:bf:84:49:c2:00:
9a:c3:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:39 2025 by rpki-client