Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa
File: bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa (raw, json)
Hash identifier: ec3b+YZLkVkmRQf2LYE1Bm7svfr/0VIwuwVV4bKRaig=
Subject key identifier: 4A:3E:E8:47:64:32:4B:4F:9D:C7:0A:EA:BC:B1:E8:2A:20:22:9E:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C01F7BCB4FB6BC0F8BF59A2AA84C655B3B15337
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa
Signing time: Tue 30 Sep 2025 00:21:13 +0000
ROA not before: Tue 30 Sep 2025 00:21:13 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 7224
IP address blocks: 173.83.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:01:f7:bc:b4:fb:6b:c0:f8:bf:59:a2:aa:84:c6:55:b3:b1:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:21:13 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=8ce3834360120cb7996cd7118ad43032823e00ed9ccb74b578a2bfbf01fd5c4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:e5:06:92:64:a6:67:47:f8:d8:0a:98:ca:
c4:53:78:21:cd:0e:9e:53:d2:01:8c:6b:7e:4f:71:
d6:a4:e1:69:68:39:30:e2:8c:51:ab:d4:94:0c:55:
98:a1:61:d6:c8:9a:db:92:23:f7:3b:90:76:f7:fc:
ea:72:fb:74:0a:3a:e7:5e:cb:af:49:81:99:01:55:
a5:8c:df:b5:59:40:b4:da:4f:aa:23:ea:7e:e9:e7:
e7:a9:53:d9:09:d7:c5:d3:05:d5:6c:80:17:ea:4a:
6e:d6:57:f9:a8:ba:43:45:77:3d:59:e5:c6:3f:77:
02:9d:89:25:b0:98:eb:30:58:6f:c9:50:2e:e9:35:
47:8d:04:d2:cb:3a:73:8c:e2:61:67:5c:88:9b:b6:
dc:a7:a5:31:a3:5b:6b:47:ef:9e:59:e6:e2:57:90:
94:b4:cb:74:70:8d:d4:42:e4:d5:a7:67:73:82:45:
4f:11:68:3a:75:40:a1:f1:e7:f9:60:20:f8:7c:05:
91:6e:e2:b1:70:1d:84:4a:2d:e8:ff:31:d5:02:81:
7d:d1:9d:71:f8:6b:fe:a1:4d:68:c1:61:f7:a7:20:
85:25:24:d8:62:8e:dd:00:9c:51:f0:43:91:5c:a6:
fc:3a:6f:2b:64:0a:4f:69:4b:37:69:05:85:4e:e0:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:E8:47:64:32:4B:4F:9D:C7:0A:EA:BC:B1:E8:2A:20:22:9E:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:3a:72:de:31:f5:69:80:5a:50:48:4c:47:ea:4a:be:c2:42:
86:31:a9:fd:94:6c:b4:8b:a4:82:5b:05:fe:8b:e0:cd:a9:af:
a2:2b:04:ea:b9:9b:bb:90:99:80:93:04:f8:e4:ad:c7:15:c1:
23:04:3d:49:ef:85:f9:36:bc:29:03:cb:7f:77:fc:e8:a3:29:
2f:a6:22:b0:05:05:ab:a1:38:fd:25:24:dd:0e:5a:e2:bf:7c:
e2:c9:ba:a7:0c:97:1e:b7:54:6b:44:cb:04:1c:94:e3:6a:16:
e8:12:fb:7d:3f:12:cb:58:6d:e1:b1:45:b6:01:b5:39:be:ef:
d3:2e:b9:63:98:e4:d2:64:7a:0c:74:f0:5e:4c:36:79:fe:fd:
29:0a:ac:ef:9d:18:32:4a:ac:66:38:cf:56:ca:42:da:f5:fa:
5a:8e:7b:32:a6:5d:15:80:6e:cd:73:ce:28:a7:b3:8b:84:22:
42:1b:d8:25:50:2b:82:85:fa:89:24:13:bb:a6:29:1c:ac:8a:
54:91:e4:a0:f0:ff:4e:61:50:42:9b:38:0e:97:d1:bc:97:ba:
f8:ca:a5:88:a2:cb:09:4e:2f:f9:2d:a3:39:bf:1c:82:a9:a7:
2c:4a:e5:88:e3:92:85:a1:77:68:6b:37:9d:39:a1:e0:c4:67:
d8:91:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:55 2025 by rpki-client