Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa
File: 6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa (raw, json)
Hash identifier: M19pGB/+WHc2Hujpl35JGyvRsjmvYtpOIzejpLDBSFE=
Subject key identifier: 9A:45:F7:88:6D:73:9A:E5:93:7F:C3:DD:69:01:E6:71:2E:38:E8:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 701C990834A39121390A836EE0A7B9D86A5DA72B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa
Signing time: Wed 01 Oct 2025 00:41:54 +0000
ROA not before: Wed 01 Oct 2025 00:41:54 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1c:99:08:34:a3:91:21:39:0a:83:6e:e0:a7:b9:d8:6a:5d:a7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:41:54 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=353ecb0034ac4a5ae6c2b3baa820c33457e27361d8f116528aa7918957b0fb25, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:7d:fa:6e:e8:16:e9:d5:ba:8c:b1:20:d5:
d9:7c:b8:06:c9:47:ca:fd:7f:65:de:36:5a:0f:00:
84:5e:1d:dc:24:f2:6c:40:81:f3:e0:63:41:f5:24:
db:49:38:b8:7a:b0:41:a0:79:bd:33:83:fb:4b:2b:
05:18:10:0a:52:1f:a2:e6:2f:c9:0b:0f:5d:4a:da:
98:7a:7b:7d:b1:ab:9a:3d:04:66:88:22:8e:80:bc:
8d:60:74:8e:aa:90:8b:2f:a0:0f:e2:e6:e5:a0:0c:
59:77:22:1f:0c:ac:be:9f:f5:d9:fd:4d:cd:7a:99:
12:42:28:9c:46:b4:91:74:e9:61:21:ea:8a:f2:6b:
fd:1e:3e:6a:6e:41:7c:00:d1:81:ca:ae:e6:6f:96:
9e:18:26:fd:ed:70:05:3a:b9:82:b4:ea:80:61:db:
8c:33:6a:21:66:a9:73:19:25:3b:fd:65:bb:84:a1:
13:94:cd:b9:63:03:73:45:22:76:d0:f9:a6:5e:f3:
cc:f4:28:a9:47:bf:8b:cd:49:27:f0:eb:51:3a:30:
12:7a:63:db:97:c8:ec:aa:1c:6e:e7:84:fd:ca:e4:
05:ca:99:d2:44:21:81:f2:b1:89:09:e6:bd:ed:a3:
74:54:df:db:a4:f7:a2:43:fa:af:d5:3a:9e:a6:f5:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:45:F7:88:6D:73:9A:E5:93:7F:C3:DD:69:01:E6:71:2E:38:E8:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.74.0/24
Signature Algorithm: sha256WithRSAEncryption
99:77:20:1e:11:e0:56:cd:c7:cd:6b:85:9c:ae:e6:0b:1b:30:
c0:74:8d:99:4c:04:17:eb:80:64:1a:d1:22:0e:ae:8b:7c:b4:
53:81:75:13:96:fb:86:ea:c4:6a:37:fc:60:e9:23:30:f7:4f:
bd:46:9f:6a:3e:04:95:46:f1:8f:05:c7:b9:84:6f:01:9c:28:
4a:b2:b9:a5:16:99:13:e6:6b:81:16:c7:aa:c0:f3:af:4e:7f:
2f:e2:fe:70:c1:28:32:5a:ab:d4:8c:86:38:60:c0:09:ec:bb:
00:bf:7a:eb:82:a4:07:35:63:87:70:df:86:cf:2f:12:de:5a:
6c:61:e1:2d:43:c9:8a:2b:84:cf:61:2b:3a:59:fb:f5:a7:1d:
44:0e:c4:f9:83:51:1f:76:a4:a4:34:d5:a2:10:8b:a0:5d:52:
44:b6:31:5f:5b:85:99:79:42:1f:a6:94:d2:d6:86:64:51:f2:
69:55:3d:65:2d:fb:2d:0a:02:3f:d8:f8:67:85:9b:47:33:49:
f3:73:63:53:cc:aa:a9:7f:08:69:a2:73:72:74:ed:67:41:b2:
72:a2:89:58:01:fb:18:db:dc:80:c8:c8:4b:a0:c6:ab:4d:f4:
48:ad:03:2a:ba:57:21:15:28:04:93:b4:fa:8e:31:cc:39:ae:
9c:b4:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:47 2025 by rpki-client