Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d1d929-2988-4e29-8b0a-cbcad5b8d4a8.roa
File: 53d1d929-2988-4e29-8b0a-cbcad5b8d4a8.roa (raw, json)
Hash identifier: P/18TFKE8AnJaA9HP46fYMal6p9OCxE1Lus/qPbkvzQ=
Subject key identifier: 4F:0A:B7:A3:C0:37:32:3D:FA:BA:E1:73:C4:DF:8E:B9:22:FE:A7:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AACBA7BFCF6C7F66C45D1454D761CC76B252CC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d1d929-2988-4e29-8b0a-cbcad5b8d4a8.roa
Signing time: Fri 03 Oct 2025 00:39:23 +0000
ROA not before: Fri 03 Oct 2025 00:39:23 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ac:ba:7b:fc:f6:c7:f6:6c:45:d1:45:4d:76:1c:c7:6b:25:2c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:39:23 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=ef691e8dccedaac57947b33a35bde76e2480810d0df6bebab205a592f52ecddc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:cd:7f:7f:46:85:a3:05:18:73:3e:0d:94:
e7:98:88:30:d4:fe:96:75:64:17:d4:1a:ef:e3:2f:
3d:ca:9a:47:f7:1f:06:85:b5:42:79:fc:c3:be:ab:
b5:9c:1d:99:87:41:f9:54:09:9e:c0:c6:a3:47:5b:
b9:65:90:b6:63:d3:e6:eb:62:cb:34:d6:9d:2d:4f:
a7:e8:93:13:97:d3:03:06:aa:7b:4f:41:83:94:1a:
b9:18:e5:ce:2f:fa:11:89:93:c7:11:6c:ed:a0:95:
af:3c:ad:79:dc:18:cd:21:a2:dd:25:0a:d4:94:0a:
92:70:8d:c9:92:ed:2c:d5:fc:c6:08:09:cd:98:57:
07:d7:b9:bf:30:1e:72:e5:0e:ca:9c:08:38:83:0a:
91:af:4e:bc:53:ba:4e:d2:8d:0c:5d:25:20:13:f4:
d4:1e:57:6c:67:36:ac:1e:53:4f:84:b8:65:d2:b3:
27:9e:ef:37:03:99:af:b0:c2:54:ae:2f:1e:e9:ae:
41:04:db:42:cd:26:02:a4:0d:f9:57:71:10:1e:5b:
a7:ce:f0:f3:09:7d:58:3e:f9:5d:52:9e:4d:c0:5b:
18:9e:6f:11:57:5a:82:e5:ec:8b:47:62:54:6e:e5:
1d:6b:50:d7:fe:8e:2c:0e:a1:10:c5:e9:63:6a:6a:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0A:B7:A3:C0:37:32:3D:FA:BA:E1:73:C4:DF:8E:B9:22:FE:A7:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d1d929-2988-4e29-8b0a-cbcad5b8d4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.89.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e8:08:a9:ab:92:77:6a:8c:03:09:d1:49:20:d0:6c:eb:14:
25:6c:17:06:07:b1:c0:c0:81:48:ce:f3:ef:80:43:a1:23:df:
67:6c:67:78:19:16:4e:31:5d:54:e0:9a:7d:af:ce:e9:5e:d7:
13:79:c4:e1:10:8b:16:be:95:2d:80:41:29:db:fc:b7:ea:c8:
0f:7e:45:fa:18:89:ad:e6:e6:34:00:99:62:d6:21:74:c0:f9:
d3:f2:ef:54:3a:97:37:7d:84:2a:b2:44:f8:36:62:c2:25:aa:
c2:b9:9e:68:58:63:a0:36:bf:bd:f2:e8:b4:86:a8:93:b6:01:
06:83:74:77:90:7d:bf:8d:90:f2:a2:ba:00:58:f2:c1:81:11:
42:62:0d:6b:eb:99:6e:26:e0:f4:23:d0:3f:bb:d4:e3:49:50:
74:b6:c2:1e:46:4c:b4:ae:71:0e:3e:e1:41:c1:2a:14:12:81:
46:e5:58:70:07:10:38:ed:f1:10:a7:6b:29:9a:1b:84:87:01:
43:03:78:7c:5f:04:35:0f:b0:48:35:0e:ea:26:94:80:bd:3a:
bb:97:d6:0c:c8:83:f9:30:bd:9a:b6:f7:ea:d3:97:62:b7:1d:
98:85:8a:99:cb:87:02:b2:9f:1f:56:28:3c:5f:f4:57:60:0b:
9e:53:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:39 2025 by rpki-client