Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa
File: a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa (raw, json)
Hash identifier: JHSZvIRD33cOtL5fxSX4AjrxMyBwj+Y6j1KCkTouBRI=
Subject key identifier: A5:2E:77:11:51:C1:84:F2:59:57:99:98:5F:CC:A1:14:DD:B7:F4:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5ABD6D24F0D0348BC0F752E995A12F44D03659C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa
Signing time: Fri 03 Oct 2025 00:42:10 +0000
ROA not before: Fri 03 Oct 2025 00:42:10 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 67.210.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:bd:6d:24:f0:d0:34:8b:c0:f7:52:e9:95:a1:2f:44:d0:36:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:42:10 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=82d4a0730b91295067a2aba9c873e325dbf977a0be1ee8d65567b7b43b5e3cb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:4f:b4:9c:68:20:f0:2d:a5:3c:13:0f:63:
fd:ca:86:32:4f:e2:19:31:d2:2d:a4:e5:29:f1:fd:
87:44:8b:fd:18:50:e0:99:7c:ba:88:8c:96:5c:9e:
0d:22:05:91:a1:fb:23:86:b1:29:96:9d:72:7a:71:
63:16:ba:73:49:5d:83:36:a4:03:a0:8b:82:d2:df:
1c:0f:76:c0:c5:42:86:57:e8:44:ea:79:4d:bb:6e:
98:c0:94:f4:00:a8:80:15:70:51:2a:4d:5c:4d:06:
5e:d1:af:80:79:98:a6:4b:55:8a:9c:87:18:6f:c5:
4f:47:95:5e:59:fc:4e:5d:77:05:d0:e4:54:d1:1a:
09:41:fc:a5:cd:0b:cd:4f:42:34:f0:ec:a5:28:eb:
9e:1b:2a:9c:c1:b3:5a:d5:b4:1e:92:00:6f:07:00:
ee:17:60:09:ce:2f:dd:e9:4c:6e:fa:7c:fb:94:3e:
d8:2e:60:53:3c:e6:cd:03:b8:0c:40:b4:aa:da:22:
4e:27:13:d2:3d:f6:4c:cf:8e:17:56:75:49:5b:07:
e4:bd:c7:11:a8:58:80:a3:aa:43:d7:78:68:dd:4c:
ab:b5:57:f6:bb:c1:0d:00:4a:0f:b3:a6:57:36:71:
72:d7:c8:42:aa:16:b8:0a:0e:8c:ea:1b:80:72:45:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2E:77:11:51:C1:84:F2:59:57:99:98:5F:CC:A1:14:DD:B7:F4:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.64.0/20
Signature Algorithm: sha256WithRSAEncryption
91:4c:5f:c8:5b:20:17:3c:4c:0d:67:f9:67:07:0e:ad:c0:92:
94:d3:1e:c0:90:27:33:bc:5e:13:29:a4:d8:52:49:e1:7a:9f:
ac:f4:9f:9e:19:55:16:4c:e6:67:65:29:8f:cb:3e:32:bd:a1:
9b:a9:92:af:a2:92:c1:38:2c:00:f6:28:cb:24:f2:69:05:26:
9b:98:e4:63:4e:11:b4:7c:29:1c:d4:e7:e8:d7:e1:9d:d8:5e:
6a:c3:bf:0e:d8:40:57:af:a5:a8:50:bf:7c:a2:18:43:03:3a:
1e:3f:ec:f9:d5:f0:66:79:33:26:cd:8a:62:bb:72:79:25:f9:
e4:92:f6:4f:2e:9f:03:5d:0c:03:ed:2b:13:6d:08:2f:7b:38:
45:cd:d2:4b:6c:42:62:ef:81:f4:c1:56:b2:ab:91:57:00:70:
46:aa:93:99:e9:90:f8:67:57:61:81:51:50:2f:41:00:65:d5:
76:2d:ea:d1:a6:c0:cb:02:14:fc:b3:2b:bf:9a:c8:84:39:50:
51:d8:9a:2d:ba:0d:9c:6a:84:28:56:35:34:bc:07:19:c6:34:
17:7a:f2:44:a3:b7:cd:85:73:84:d4:67:e7:b4:ed:8f:0a:bc:
ba:27:a4:6b:4f:16:6c:ea:55:01:bd:a3:0e:db:3a:ea:56:db:
1a:9f:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:39:58 2025 by rpki-client