Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0f76962-7709-4e94-ba5a-85ccbec84db9.roa
File: c0f76962-7709-4e94-ba5a-85ccbec84db9.roa (raw, json)
Hash identifier: F60d57ecvO4nU1nWVfyn6Kes0nTVJQtMmRfnCVQBKA8=
Subject key identifier: 36:76:28:94:9D:4D:05:87:10:1A:20:57:6A:17:7A:68:5F:CA:97:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04334BE5F0A9C47B2CC50625965E1C4E8B98BDC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0f76962-7709-4e94-ba5a-85ccbec84db9.roa
Signing time: Sun 19 Oct 2025 02:40:52 +0000
ROA not before: Sun 19 Oct 2025 02:40:52 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:33:4b:e5:f0:a9:c4:7b:2c:c5:06:25:96:5e:1c:4e:8b:98:bd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:40:52 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=3ad8ed586176aa8be7a36cc84438ec1135eb489737e0409b6bdf01b59c3624ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:e0:6e:29:3e:1f:59:2c:6d:5b:b9:e4:d9:
a8:63:81:8b:b5:48:2c:90:12:ad:18:3e:d5:ae:dc:
9d:36:eb:a8:65:8b:bb:a2:bc:b3:07:7a:f3:0f:70:
8d:42:5d:1a:13:b1:47:64:e8:7a:fe:86:bb:11:02:
32:ea:c1:a6:34:11:41:bc:f0:d3:df:0e:39:2d:40:
e7:db:3f:9c:e4:f6:43:4d:e2:54:9f:64:2a:c8:28:
bc:94:21:e6:8f:ba:f0:18:b1:83:29:c0:86:26:f8:
99:2b:ae:ca:c4:66:38:ab:38:1f:09:de:7a:11:5a:
54:53:59:f6:62:e6:4a:6c:82:2a:d9:80:53:a4:d1:
20:b3:3b:84:5d:ec:9a:50:1a:3c:d3:38:20:77:13:
53:c0:44:04:95:7f:5b:65:eb:06:8c:55:f9:d3:7c:
16:b7:7d:64:6e:c2:1d:a1:c6:f4:7f:15:4d:01:51:
60:74:ba:cc:05:6a:f1:fd:7d:87:70:e0:7a:1a:ce:
d1:d3:d7:e8:63:b2:7e:9e:c8:ea:11:2c:08:2a:49:
a7:83:35:d4:22:c6:a0:aa:69:4d:ff:69:1d:1d:cc:
84:4d:56:16:fc:75:b3:07:99:7e:37:94:bd:1c:e4:
90:8b:0d:62:34:bf:f6:b7:bb:78:77:92:51:6e:53:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:28:94:9D:4D:05:87:10:1A:20:57:6A:17:7A:68:5F:CA:97:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0f76962-7709-4e94-ba5a-85ccbec84db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.216.0/24
Signature Algorithm: sha256WithRSAEncryption
67:81:48:10:99:88:dd:5b:77:e2:d2:06:d8:92:a2:9e:7f:13:
e8:dd:96:8b:6b:dc:23:c2:ec:8b:70:0a:d4:13:e3:47:ea:54:
da:72:8f:f3:a0:17:24:ef:dd:bd:d1:d1:b5:b0:6f:74:af:0e:
7c:06:ac:c9:99:fd:2d:2c:10:e3:1b:57:05:7c:f6:da:a3:9a:
ec:12:12:d0:89:5d:9a:74:a1:50:72:c5:45:d1:d6:7d:6a:88:
44:2b:e7:96:5f:44:e2:1b:f4:a9:b6:03:23:f7:ce:19:43:89:
62:db:08:c0:54:73:49:74:c3:c8:66:b0:ba:c2:af:40:04:65:
56:0e:af:ae:bc:1d:13:ac:3a:3f:62:9d:91:19:1d:9d:c7:48:
0d:d8:8a:22:21:1d:b7:04:de:f8:5c:7f:ea:a2:67:0c:ad:66:
c3:6d:4f:29:8e:9d:74:35:6e:6c:5a:db:a3:21:f1:7e:ff:cc:
98:9a:12:bb:7f:8b:87:59:67:dc:b1:61:7d:68:ad:97:6a:d2:
1a:c3:36:2c:8f:24:d5:89:12:43:66:b3:b5:f9:2a:ea:71:a5:
69:09:31:ee:3e:a4:a8:f5:a5:a7:a4:87:7c:4f:4b:a7:d0:a6:
a9:93:10:07:52:4e:e1:61:14:b7:cf:0d:43:08:fb:08:15:4d:
51:04:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:27 2025 by rpki-client