Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdd560e7-ca1d-4ac8-9c51-5e5d1155e4e5.roa
File: bdd560e7-ca1d-4ac8-9c51-5e5d1155e4e5.roa (raw, json)
Hash identifier: HVlaL99x9SNpqL/uL+p2az5GXM72c/Mg/a3ImQDqQrI=
Subject key identifier: 85:9E:17:F6:54:15:5E:2D:97:70:E7:60:AB:0C:89:82:52:50:26:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 737D52978D2753F0B4F3F045595DCF98548B9989
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdd560e7-ca1d-4ac8-9c51-5e5d1155e4e5.roa
Signing time: Tue 14 Oct 2025 17:21:20 +0000
ROA not before: Tue 14 Oct 2025 17:21:20 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7d:52:97:8d:27:53:f0:b4:f3:f0:45:59:5d:cf:98:54:8b:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:21:20 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=f69ffc9ae519a53fb64b36008766652e81542f4271eb11de960a12d1d026db03, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:5c:38:12:af:34:05:26:f2:0e:68:28:f0:
cc:a9:7e:36:26:a5:46:d4:4f:05:2c:b7:e2:a2:b7:
b4:e6:39:a0:d1:72:fb:13:25:46:fd:10:76:d7:ca:
68:d6:24:39:31:ca:4b:ec:25:2e:d7:1e:b2:5a:a4:
97:68:c8:ae:c7:9d:4c:23:83:a6:a0:88:71:0f:07:
ff:b2:cb:4f:80:49:e5:8f:16:10:90:cd:31:3c:ad:
03:19:44:04:33:85:e3:5f:02:1a:0f:2c:3e:2e:e2:
d0:21:35:0c:a5:54:8b:0c:f8:5a:84:6b:fe:f7:0a:
82:3a:57:bb:59:fa:2d:56:ad:21:f3:4c:85:08:10:
8f:a8:61:70:8e:28:06:1f:08:26:a8:99:1e:68:01:
8b:81:66:1c:8e:14:c9:29:b2:60:89:59:7f:79:71:
dd:7c:27:b8:ba:ac:f4:1f:ec:cc:c6:be:eb:e7:52:
06:5b:25:04:0c:c8:ff:44:0e:49:c3:9a:88:53:27:
b6:2b:69:75:d2:ce:27:65:45:bf:71:d2:24:fb:42:
ec:bc:c0:3a:d4:78:ba:01:8a:ce:fd:42:79:10:59:
40:34:10:af:a4:61:b4:10:2a:8d:8d:b8:54:c8:ce:
9b:cc:c9:64:66:bc:0b:25:4b:8d:86:d8:33:61:38:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:17:F6:54:15:5E:2D:97:70:E7:60:AB:0C:89:82:52:50:26:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdd560e7-ca1d-4ac8-9c51-5e5d1155e4e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.4.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a8:94:be:e1:c7:4e:69:a4:8d:31:94:aa:e6:f8:59:4d:7b:
dc:ff:36:32:ba:1a:36:a9:e7:ed:51:32:98:64:5a:6b:d2:e3:
de:e9:11:ba:a5:a9:aa:62:1f:57:87:a7:99:73:49:0e:eb:42:
7e:55:7a:44:de:d5:f6:67:f1:d4:9d:8b:e8:be:bd:a5:d2:b9:
67:89:c0:d3:a5:83:ab:a6:71:03:b1:11:b7:90:30:0e:90:9c:
8f:1f:60:90:65:d8:78:7d:eb:ee:bb:64:35:d7:dc:7c:57:f2:
0e:68:35:0c:4c:ca:0d:5f:e6:16:f0:c7:4b:3b:6a:82:45:1a:
22:b3:6d:e7:c5:c6:ab:67:41:08:c5:f0:fb:0b:ec:1e:f0:08:
21:5f:45:1b:5e:ad:fa:fa:5d:ef:2f:6b:c9:42:e0:a3:0a:0d:
4c:53:c0:0f:03:b9:10:05:30:c2:aa:4d:85:76:a9:09:ed:fa:
ff:e4:a2:9a:57:9c:14:48:a3:73:1a:65:17:60:70:6f:ba:d9:
43:9b:4d:15:96:3f:ec:f8:5f:69:5b:85:f2:35:b4:f2:7c:e3:
96:2e:98:ed:85:dc:d9:37:d0:e9:5f:c6:98:ff:35:9b:95:9f:
93:09:1e:b2:7b:27:ac:ca:36:9a:24:b6:21:8e:c6:42:a4:3e:
1f:80:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:20 2025 by rpki-client