Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7fa1671-c3aa-4694-b658-1a514d9d9caf.roa
File: c7fa1671-c3aa-4694-b658-1a514d9d9caf.roa (raw, json)
Hash identifier: 4JMsLdvpk94yGW7QbBu91CFxvyRkMBZpnilROZtnAV4=
Subject key identifier: 6C:CC:96:DB:4C:95:5D:2B:41:A3:97:F6:F4:05:65:EF:DE:BF:89:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07D3D71893D403797E4EFEC6CB15574C872A592C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7fa1671-c3aa-4694-b658-1a514d9d9caf.roa
Signing time: Tue 14 Oct 2025 16:52:13 +0000
ROA not before: Tue 14 Oct 2025 16:52:13 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d3:d7:18:93:d4:03:79:7e:4e:fe:c6:cb:15:57:4c:87:2a:59:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:52:13 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a53c93053471ffd77239c341eb9b9b4fda06c9bf0504aa1f4fe983d0ea6ae48c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:b8:9f:c0:7e:5e:41:11:ef:71:d4:26:58:
89:50:eb:09:2f:7a:83:95:7d:6a:a6:29:ba:86:b3:
8c:1a:79:ef:f7:1e:41:95:e2:85:d8:8f:1d:f6:6b:
2e:de:f3:c2:c4:15:d1:9e:fb:bd:4d:21:b9:07:10:
37:d3:98:6b:2c:71:ab:17:04:4f:9f:e1:35:4b:2b:
d0:83:9b:d0:8d:c6:14:89:50:8c:b7:0f:83:8c:59:
0b:98:ab:eb:2f:6e:5f:c1:68:23:be:98:a2:13:2b:
a7:d4:bc:3f:68:79:22:39:7c:67:5f:fc:6e:4a:83:
b0:8b:da:57:31:08:9d:3b:ac:f3:cd:ab:57:e6:1b:
f2:f1:eb:c5:a3:4f:1f:64:0d:60:d0:be:04:08:30:
90:c7:28:54:ff:27:b4:c6:02:d5:11:d1:60:ce:dc:
9e:f2:e8:92:43:cb:82:cc:1d:ee:6c:5b:04:37:b3:
32:f2:df:26:98:26:20:63:ad:9e:d9:91:ea:bf:8e:
06:68:0a:4b:60:73:83:c2:a6:1a:ac:4a:52:4a:5e:
6c:ab:3b:91:7b:66:67:11:02:21:a4:fe:d3:d8:aa:
1b:ab:a0:ea:05:e8:73:1f:c0:84:eb:9c:01:68:97:
48:eb:0c:d9:5a:05:34:18:5c:0a:80:96:de:6b:7e:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CC:96:DB:4C:95:5D:2B:41:A3:97:F6:F4:05:65:EF:DE:BF:89:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7fa1671-c3aa-4694-b658-1a514d9d9caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9e:40:16:ec:95:a8:7f:51:7c:b1:e2:f5:9c:be:ea:4d:c1:
4a:b5:c6:b7:dd:df:7d:d3:15:19:a2:29:5f:8c:b0:cf:3a:75:
96:88:b7:8d:20:b3:3f:d4:57:2c:33:ab:db:33:86:89:0b:3b:
ce:aa:c2:e7:b9:a4:1b:e7:34:17:cc:ae:9c:8e:05:14:a3:f1:
fc:c0:96:3d:1b:1c:2f:c2:0f:ef:3b:2f:13:0f:a3:21:09:cb:
38:9d:f7:d3:be:19:f3:50:b9:ff:a1:5a:01:09:2f:b8:3b:69:
98:31:55:8b:82:46:92:08:4e:13:8b:4b:81:36:84:fc:ce:d3:
48:22:bc:fb:1b:30:f9:5d:f6:0c:38:94:2d:43:d3:2a:81:d3:
3d:73:c6:d2:b1:26:42:c0:ca:4b:64:b0:4d:4a:80:6a:0f:15:
d5:0a:82:8c:05:20:63:c1:2d:75:15:bf:82:64:b0:e9:50:6f:
7f:86:16:1b:c5:aa:76:67:df:cd:bf:cd:92:01:5a:21:db:65:
3e:3f:26:cd:e5:04:42:bd:88:09:5e:37:b7:6e:ec:29:1b:f8:
b7:4c:eb:03:ea:b2:20:ac:f5:38:6f:2f:4c:30:87:38:56:33:
c4:36:e2:49:7b:77:04:50:f1:bf:d7:53:c1:86:6d:c8:79:e9:
d8:41:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:47 2025 by rpki-client