Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dbe079e-48ae-495d-80f4-d9ebbd01aaf7.roa
File: 8dbe079e-48ae-495d-80f4-d9ebbd01aaf7.roa (raw, json)
Hash identifier: 966BHc6HZz2FDjxg2kpASVwtiSW42t665UQOTAeKgnE=
Subject key identifier: 36:FD:5F:09:65:87:DA:1D:F2:76:70:F2:9F:18:62:DA:F4:F7:8D:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6774856F9D116C33A88207EEDB89EFAABBBE7047
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dbe079e-48ae-495d-80f4-d9ebbd01aaf7.roa
Signing time: Sat 27 Sep 2025 00:22:31 +0000
ROA not before: Sat 27 Sep 2025 00:22:31 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:74:85:6f:9d:11:6c:33:a8:82:07:ee:db:89:ef:aa:bb:be:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:22:31 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=424f135e82af6759192855bac8eb80f9f6a3b7223a9b6514029d4dea6d8c860a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:7a:5b:40:a1:94:1f:c2:3e:9c:93:c7:33:
7a:4e:fa:85:27:be:76:8c:72:8d:80:88:90:b7:53:
b1:ca:62:4e:62:5f:82:23:c5:f6:9d:7d:55:f9:04:
f4:8d:52:56:ea:d5:d1:ce:71:8b:e0:bd:f2:35:25:
4e:bb:ca:7f:12:a6:cd:eb:d5:e6:35:86:cc:63:f6:
b9:06:d2:48:76:fc:51:8f:ef:db:39:ed:70:2f:a2:
92:bf:a7:bd:6e:08:9b:a3:5d:99:72:cb:7c:b6:ff:
50:64:9c:d7:64:e8:a1:93:ec:b4:7d:ed:e1:e7:f3:
b9:44:d1:91:c3:7e:a1:5a:2f:cc:e5:ba:d4:8d:6d:
15:06:9d:83:2e:c3:9d:47:9f:d9:8e:0f:69:d5:98:
ca:cf:49:1d:ca:8f:6e:f6:e8:82:3f:4c:98:a3:ac:
3b:66:02:84:cf:54:7c:d4:4a:1e:87:57:24:9d:48:
4a:23:d9:90:92:8a:25:00:35:fa:2e:98:16:51:a5:
b9:d4:ba:98:d1:5f:5f:7e:bd:3e:b1:60:dd:77:92:
c5:07:ea:05:e3:7c:b4:96:47:5b:8e:2c:b2:74:09:
a3:2d:7a:b1:f3:85:ae:d5:2c:70:48:60:19:ef:75:
fe:13:b2:be:7c:a6:5d:e6:29:a0:ec:52:a6:73:92:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:5F:09:65:87:DA:1D:F2:76:70:F2:9F:18:62:DA:F4:F7:8D:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dbe079e-48ae-495d-80f4-d9ebbd01aaf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f6:d1:aa:64:57:45:32:a8:90:e9:be:f1:15:40:fc:b9:65:
71:f4:79:05:a3:0e:a1:69:a0:ef:c7:fb:68:bd:65:de:d5:4c:
c3:45:91:a0:46:d0:91:14:b4:d4:2c:49:23:6e:ef:3f:02:91:
f3:49:9d:d9:30:2a:a1:19:ce:f3:e5:96:96:dc:5d:c9:8d:88:
74:59:fd:8a:3e:ba:a5:85:bd:f7:a6:3c:72:7d:df:f9:52:4c:
d1:fe:b3:f2:22:9f:bd:94:72:34:fb:e1:c9:c9:6b:bf:b8:8a:
67:96:1c:64:50:57:50:a0:e8:6f:35:87:10:8d:43:49:ec:ef:
d0:c5:03:63:ab:c5:0b:70:b4:9e:cd:c8:3f:c9:55:fe:29:c6:
38:76:61:81:77:ad:99:0c:ee:b9:54:fd:2c:14:81:40:4c:79:
8a:46:a3:52:69:ca:ef:f2:3b:76:5b:1e:f2:7f:55:08:96:fd:
45:7d:eb:46:4a:27:2f:9c:e3:14:4f:d5:7b:3b:bd:d6:e8:9b:
3f:3d:88:06:dc:e6:6c:b8:72:ed:e0:8c:f5:c7:e1:48:a1:f6:
f5:22:97:66:7e:44:23:d1:9b:fc:d4:fa:4e:fa:8c:ee:44:e8:
bf:11:50:11:8e:44:31:5d:35:c2:b4:7a:3a:8f:fb:99:34:30:
ca:d1:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:56:02 2025 by rpki-client