Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47cdbbc-0606-4824-b468-103bd1f5711b.roa
File: b47cdbbc-0606-4824-b468-103bd1f5711b.roa (raw, json)
Hash identifier: 2fs13HhMt2lhmx3bypCS7uOJR3CNg5PVqp6c+Gm9jHM=
Subject key identifier: 9E:74:5C:60:B6:A9:2F:89:79:46:FC:D2:E1:6B:7E:37:89:B6:75:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18DD8076E8C9F2898ACDC72AFA839B505858FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47cdbbc-0606-4824-b468-103bd1f5711b.roa
Signing time: Sun 19 Oct 2025 03:01:28 +0000
ROA not before: Sun 19 Oct 2025 03:01:28 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:dd:80:76:e8:c9:f2:89:8a:cd:c7:2a:fa:83:9b:50:58:58:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:01:28 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=64966be6f56fee654fdc8cd204c69c620888101ebae19f24af67af818cc89fe0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:1e:4f:f2:b7:31:62:79:08:58:0f:8c:1d:
a3:63:15:73:42:f6:82:20:1a:c4:ac:30:77:43:8a:
6b:f6:7f:76:e6:65:f4:1d:69:2e:76:43:9b:db:cd:
51:59:5f:c5:9a:83:d5:7d:4c:eb:5a:7b:e5:16:e7:
93:ea:0d:f9:1f:c2:8d:8e:50:ef:bf:25:22:32:a7:
fa:04:95:7b:ae:71:39:51:d1:65:6e:fc:d0:a0:02:
ef:ed:ce:92:0d:b4:d3:59:df:86:50:92:67:b2:31:
7d:1e:03:56:7e:89:bd:3b:15:c8:83:13:4b:37:3c:
4a:03:dd:23:da:e5:91:4a:68:57:03:cd:2b:54:e9:
79:02:f9:57:28:c3:32:62:59:d8:a6:f8:5a:13:91:
6f:05:87:9c:ea:06:6c:79:4d:e1:c9:6e:f1:da:82:
05:f0:68:0d:ca:6f:82:c3:69:a3:8a:94:7b:79:4e:
ad:de:9d:2a:a0:3c:1f:75:ee:3b:94:35:1c:7a:a1:
04:7b:41:4b:25:37:27:cb:68:76:e3:d9:72:26:61:
c3:ed:75:99:63:28:3a:33:ce:88:1f:89:29:4c:32:
5a:14:3a:90:b5:76:60:a0:e3:c5:23:29:c9:2c:33:
62:7a:14:76:ef:4b:7d:10:49:11:54:e0:23:7d:a6:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:5C:60:B6:A9:2F:89:79:46:FC:D2:E1:6B:7E:37:89:B6:75:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b47cdbbc-0606-4824-b468-103bd1f5711b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.199.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ec:c5:8a:37:8e:30:2c:68:2f:d4:e0:fa:db:af:63:c7:23:
8c:7e:78:80:3b:a0:d3:5f:53:40:04:01:9f:af:15:e0:b6:e1:
66:5e:98:ac:87:df:cf:02:e6:fd:78:dc:34:d9:f7:ab:a9:91:
de:54:a2:fc:4c:07:91:0f:71:3e:2b:4e:9c:9c:ef:72:08:df:
db:81:db:39:d1:24:65:bd:66:52:3f:72:36:53:36:0f:f9:34:
81:cf:3c:91:5e:70:f0:19:39:fb:a0:05:fb:13:5d:0c:e2:c4:
1a:00:65:f7:b0:43:e0:ef:15:f6:ab:6f:6a:72:37:4e:d0:a2:
a3:1e:94:74:5e:bf:bf:fb:bd:4c:dd:fa:2f:31:34:16:9a:12:
db:ef:65:49:c7:88:9d:55:37:a2:6f:8d:dd:2f:6f:00:38:75:
58:f9:74:e5:2c:3d:e2:15:f7:5e:fb:28:37:32:81:22:d2:43:
c3:31:5c:b6:06:26:36:b6:10:e3:0a:52:fc:69:47:3e:1a:8f:
5d:17:48:21:1b:a0:4a:fe:59:db:cf:f4:e5:cf:83:aa:90:d8:
46:5d:71:d2:c8:c5:74:e4:8e:3e:c6:a3:46:e0:6c:f6:14:97:
7f:78:cd:50:95:4e:89:98:55:bf:6e:80:a1:53:33:88:e5:de:
a9:b5:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:24 2025 by rpki-client