Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/704ca798-b9eb-42ba-8658-0b1776110a63.roa
File: 704ca798-b9eb-42ba-8658-0b1776110a63.roa (raw, json)
Hash identifier: q1jCMNpIqi+BT/fLywr8d/qfg+96a1uy0+dAtDG+sNQ=
Subject key identifier: FE:1D:DE:B9:C5:87:46:E5:FB:B7:5A:45:74:A4:00:CB:F5:EF:3B:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26FD82F1322A993E672B18E2E01D11A523AF0A3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/704ca798-b9eb-42ba-8658-0b1776110a63.roa
Signing time: Mon 06 Oct 2025 15:21:17 +0000
ROA not before: Mon 06 Oct 2025 15:21:17 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.128.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:fd:82:f1:32:2a:99:3e:67:2b:18:e2:e0:1d:11:a5:23:af:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 15:21:17 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=54e5f7fc0592a4a8b59c8a1c9ee96b0f6022cff125c5d2130d575ad0024e4352, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a1:e9:05:0c:7c:40:0a:01:ac:cc:07:89:3b:
38:f4:bd:d5:ca:f9:18:9a:57:89:cb:91:bb:d5:46:
ab:ff:f6:a3:9c:e2:2f:2a:10:0a:6c:4f:82:85:17:
a0:33:67:fc:11:6f:ea:25:78:bf:32:96:9d:67:65:
76:b1:a6:bf:dc:9b:32:a1:bc:80:ae:d1:53:bf:78:
cf:86:df:a0:bf:61:56:9c:0a:67:05:1e:37:88:ae:
d8:b7:7a:ad:c8:cf:00:e9:45:3c:b7:a6:3f:20:4a:
18:c4:96:cc:61:8a:77:1c:a9:48:85:0d:54:5a:b1:
16:a7:07:81:5f:88:f4:05:64:03:54:b3:00:77:8b:
7a:8d:29:ad:43:0d:b2:05:14:76:26:14:cf:8c:f8:
23:52:0b:88:39:2a:c4:66:b3:1e:a4:ad:85:6d:19:
5a:c9:97:56:0b:59:16:d3:b6:55:c9:71:20:bc:ac:
d9:1b:ad:c1:1e:db:88:38:7d:5d:f9:c5:e3:60:b3:
fd:81:87:75:cc:92:bb:bd:4e:3d:db:c1:bb:e8:69:
02:22:e5:d8:9f:4f:3f:eb:d7:3d:64:60:bc:84:31:
a7:77:c9:9d:47:36:8b:ad:a8:9b:be:89:cd:8f:19:
29:65:24:c8:c2:6c:0f:46:10:1c:27:83:b4:55:e4:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:DE:B9:C5:87:46:E5:FB:B7:5A:45:74:A4:00:CB:F5:EF:3B:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/704ca798-b9eb-42ba-8658-0b1776110a63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:75:3c:3d:40:12:ce:c4:1f:1f:70:a0:28:82:79:d2:f5:fa:
e8:6d:8c:d8:1c:18:a1:30:41:81:25:c5:7b:f4:81:dd:68:c0:
5d:8b:dd:16:70:10:29:68:24:fa:83:e1:e7:37:ce:7f:6f:75:
8f:07:33:40:37:e0:44:29:7f:b7:35:d9:50:ac:0a:3a:fc:38:
e2:c6:cb:9e:01:3a:9a:6b:b4:9e:6e:84:61:27:72:ff:4c:ef:
6f:48:93:57:31:ee:91:37:42:c5:62:f3:e6:f2:8d:d5:15:82:
30:43:08:12:3c:47:ba:2c:39:65:45:2e:ff:6b:7a:fe:89:af:
44:3d:d7:60:19:d4:19:5f:53:81:2f:2b:f7:52:5d:9e:a9:22:
2c:8d:44:e1:9c:5c:b7:63:8a:21:47:f6:01:e9:09:b3:ec:6b:
0a:5b:13:64:5a:34:39:c7:76:66:a0:70:bc:20:19:8c:34:04:
6b:a9:1d:53:ae:10:a8:37:71:4e:d8:f5:bb:94:d4:1e:28:11:
93:49:94:42:ae:7b:2e:39:02:24:ce:fb:c2:8c:be:6e:93:f0:
65:32:2c:a4:24:32:58:7b:6e:cd:d6:f1:e4:f2:a2:f9:d4:a2:
1a:db:02:ec:0a:3d:1c:81:43:1e:d5:65:58:2b:1a:f3:73:63:
ef:83:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:50 2025 by rpki-client