Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa
File: 7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa (raw, json)
Hash identifier: hB2x8P0DazrR3HgTV7rb41YurQKjpG1zA13BnFFfY/A=
Subject key identifier: 62:0F:64:A2:9E:6B:A1:49:97:EB:EA:AC:AA:B0:BE:A3:61:81:3D:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69A17FE33E141490603B521E8C588AC48FDC7E61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa
Signing time: Sat 27 Sep 2025 00:12:02 +0000
ROA not before: Sat 27 Sep 2025 00:12:02 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.240.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a1:7f:e3:3e:14:14:90:60:3b:52:1e:8c:58:8a:c4:8f:dc:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:12:02 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=628e5b17fa96ecd9589621ae88b17ebc54083ac0b7dcf96a8c6a3c0e17d5e421, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:08:03:30:10:1e:87:03:22:a6:af:37:4c:
23:60:70:29:d3:bc:e3:91:09:c4:a8:62:7e:53:b4:
2a:27:ab:4d:d1:e9:a3:07:2a:56:97:a7:82:57:84:
b3:01:d1:62:a0:04:af:97:fc:a5:24:15:6a:cb:76:
19:2a:5e:4e:77:f2:b4:b2:f8:36:e2:37:00:08:41:
b3:0e:ae:0b:89:b4:58:61:29:cf:1b:96:43:01:2b:
48:0b:02:4a:4a:e8:ab:6d:eb:df:d5:16:9a:b7:e1:
69:f7:53:f6:a9:02:03:b1:5f:e2:f5:f6:55:86:11:
85:62:5c:a2:16:45:9a:8c:3c:ec:5a:58:57:b8:66:
59:b1:a0:e3:6d:43:7c:1c:0d:d3:d9:3f:7c:f3:ed:
43:1a:27:c4:7b:2c:5c:3d:83:d5:55:eb:4c:c3:be:
53:2e:92:e8:a3:5d:25:bf:65:0c:35:1d:49:ce:d6:
69:16:36:1b:7f:4e:c3:e3:85:80:bc:c8:fb:99:d7:
aa:39:9d:2c:c3:a2:7e:73:2e:09:77:f8:c2:ed:ac:
c2:af:18:b3:42:1f:be:12:05:36:85:ac:32:c7:42:
df:f3:d2:74:37:24:d8:7a:aa:1a:9f:30:21:af:df:
bf:7c:6f:d8:5d:65:b1:18:1f:88:14:4f:d7:f6:ff:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0F:64:A2:9E:6B:A1:49:97:EB:EA:AC:AA:B0:BE:A3:61:81:3D:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.240.128.0/19
Signature Algorithm: sha256WithRSAEncryption
62:cf:56:8b:90:40:f9:f8:cc:af:94:75:5c:d7:c0:52:e5:f0:
b8:10:da:84:8a:25:0e:03:4d:00:26:71:f3:e6:b2:20:3e:f5:
76:d2:26:fc:f5:4e:3e:38:3d:68:c8:7f:f6:65:fb:f2:07:70:
aa:59:63:32:46:84:68:48:a2:06:04:7b:1c:02:dd:24:c8:c6:
44:fc:ba:b1:6d:de:d3:ae:94:58:a9:e4:f3:55:32:7f:01:99:
69:73:02:46:5e:38:9c:73:63:e8:fb:36:37:a1:8b:26:6d:f4:
bc:30:c8:e0:72:bc:bf:37:7c:2e:8b:fe:22:43:e6:e2:d7:9f:
33:48:89:2c:44:36:19:9e:db:d8:ab:3e:51:01:7b:b7:7d:dc:
d7:0e:47:ce:4c:39:be:2a:18:34:d3:68:ad:e6:7d:81:e6:b0:
3a:62:73:b1:59:bd:24:85:3f:bd:c5:5b:66:07:55:30:fa:bc:
e1:40:a6:e4:c7:77:56:8b:65:54:ef:48:b3:64:0b:89:b9:90:
13:47:07:5c:57:3f:c7:cd:d6:b7:66:fd:90:65:5e:5b:86:30:
e8:03:0f:4d:46:62:e2:f3:cd:37:5c:ba:9f:19:5d:42:3d:62:
9a:f5:87:63:f2:98:60:74:7b:76:3d:a6:05:3f:23:21:fc:d0:
76:a2:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:59 2025 by rpki-client