Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa263b29-04bf-4248-9100-8a58567a24ba.roa
File: aa263b29-04bf-4248-9100-8a58567a24ba.roa (raw, json)
Hash identifier: 6fVbYDbiBGDi+7rFj37TvCpMu+Pn+7VqHySD+qv2A+Q=
Subject key identifier: 67:BF:A7:3C:4E:58:C9:3A:80:2D:D0:EC:24:2C:9F:CA:00:E1:08:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DB6AC82AB20850BB756F523426994F4678554DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa263b29-04bf-4248-9100-8a58567a24ba.roa
Signing time: Sun 19 Oct 2025 00:00:47 +0000
ROA not before: Sun 19 Oct 2025 00:00:47 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.226.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b6:ac:82:ab:20:85:0b:b7:56:f5:23:42:69:94:f4:67:85:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:00:47 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=dc9e893495d07d5e050a03b30c6c3f701c5fecef744953271bc69977396bbb0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:11:52:15:55:fe:7d:37:b3:fd:61:1b:71:
90:d6:5e:71:fb:14:d1:cf:86:7f:44:ff:54:e5:49:
34:9e:0f:46:d3:15:2b:20:96:dd:da:69:c1:7a:bd:
79:67:1d:b9:c6:b5:d9:f9:16:94:b2:84:f2:29:08:
18:42:01:8b:81:01:ac:d6:ee:51:40:59:18:30:35:
5d:2d:1c:bb:4f:1d:46:ab:b4:ce:46:6f:07:60:03:
22:84:43:47:69:b8:d3:e0:1e:68:dd:c3:1c:a4:00:
15:5d:2b:47:d4:84:64:60:9e:96:91:f2:7b:86:ed:
9a:3b:83:e7:9b:be:44:92:af:0a:7f:a4:ab:8a:e5:
7d:97:6b:fb:c6:98:84:b6:d8:7f:b2:70:bd:10:a2:
c8:00:db:11:93:9f:a2:d9:33:5d:3b:db:58:7f:db:
a5:7a:0a:e0:58:c4:fa:d1:2e:73:2b:88:71:fb:bd:
64:76:00:47:1c:95:fa:69:d5:de:ee:02:16:fe:30:
8c:4a:1e:00:fc:6a:a1:b7:f1:c3:f2:12:0c:3b:79:
76:50:b6:ec:85:87:2e:23:ed:61:5f:49:63:09:20:
f5:c4:5b:2d:8c:2d:92:76:19:95:d8:63:4a:cd:6f:
94:94:a8:c8:b7:ce:42:b7:da:a2:df:08:e8:c2:80:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:A7:3C:4E:58:C9:3A:80:2D:D0:EC:24:2C:9F:CA:00:E1:08:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa263b29-04bf-4248-9100-8a58567a24ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.255.0/24
Signature Algorithm: sha256WithRSAEncryption
00:38:a7:d9:63:e2:bf:38:d1:e6:1f:b4:41:4b:74:c7:da:8a:
af:0e:27:7c:0c:40:16:d2:19:70:e1:b0:d1:a9:98:e1:30:98:
27:15:72:c8:d3:47:44:da:38:d8:bc:a7:d5:e1:e9:17:88:0b:
39:6c:a3:2c:c1:d2:b8:b8:79:12:3d:d6:7a:f8:23:69:d7:df:
2f:04:46:c3:1d:7d:79:f6:2d:9c:62:ec:d7:36:97:86:ae:32:
dd:79:c1:7c:46:b5:ee:a6:72:04:09:05:2c:1a:fa:32:44:52:
cf:e3:05:d7:47:14:04:67:5b:1f:7d:d7:21:28:a1:9e:82:12:
57:0a:0d:b9:ea:20:65:c4:82:c9:65:b8:8c:13:81:a4:94:3e:
66:8e:a8:fc:d0:90:81:49:0b:29:f1:28:86:82:b0:5b:8b:12:
f8:81:1a:25:5d:c4:46:3f:2b:92:0f:29:44:f1:dc:6b:d2:34:
ae:14:0c:64:10:e8:94:4f:74:16:ab:31:68:69:af:bb:cf:fd:
93:33:a9:52:32:08:e5:1c:10:0a:f0:9e:53:91:25:0c:d0:63:
97:a5:be:a0:6b:fa:e5:bd:83:67:6d:74:25:51:23:88:dd:e9:
4c:c8:0a:4d:10:73:4e:a8:61:7b:64:f2:a8:17:82:52:70:a8:
b1:2a:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:01 2025 by rpki-client