Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c803db0f-99e7-4f7f-8e1c-5ca731697444.roa
File: c803db0f-99e7-4f7f-8e1c-5ca731697444.roa (raw, json)
Hash identifier: Oa2k9PR2aTRoRqLgNTHDFW2HfT5E4qSDC/sEX2QnttU=
Subject key identifier: B8:E2:7A:00:E6:06:45:74:75:DF:3C:03:FE:57:CC:D6:E5:1A:5A:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4D39375D73011B2882D681AC409AF2E79112FD89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c803db0f-99e7-4f7f-8e1c-5ca731697444.roa
Signing time: Tue 14 Oct 2025 16:42:29 +0000
ROA not before: Tue 14 Oct 2025 16:42:29 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:39:37:5d:73:01:1b:28:82:d6:81:ac:40:9a:f2:e7:91:12:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:42:29 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=07255230ac0c17b573007fe47435f20dc16f9cb0e31d771ec9e2582085862441, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:b7:f1:49:24:91:72:cd:eb:3c:8b:f1:66:
5d:51:c7:21:fd:fa:d1:cd:61:62:9a:92:34:ff:83:
89:a0:4d:37:9e:4e:c9:c8:b4:7d:fb:17:4f:b7:01:
07:cc:07:31:c8:26:bf:7c:9d:10:e9:01:e4:8c:5a:
57:9d:36:40:8f:09:20:c7:bd:8d:41:d1:61:11:3a:
b5:2f:e2:bf:3d:c9:67:77:d7:69:88:52:4e:d8:90:
ce:0a:0f:d3:e4:bb:87:af:23:d9:7a:84:61:2e:74:
ca:44:20:f5:1e:6f:4a:37:27:fa:6a:03:a2:68:a9:
3d:b9:f6:77:69:e8:c3:99:2a:4e:68:0e:1e:a9:cb:
3e:3d:0e:31:b1:55:9d:80:b8:11:2a:ea:60:c8:de:
0e:2a:93:98:79:63:f3:7c:5d:fb:e7:35:6d:3b:83:
7b:d4:e5:2f:56:e8:8f:62:c4:9a:61:72:4c:0d:7e:
16:3e:84:09:66:e3:20:bd:66:f4:73:5d:bb:24:63:
0d:aa:a3:ff:68:1f:83:57:34:70:f2:84:72:7a:1b:
bb:4f:06:ea:17:f2:e2:67:94:4a:a1:21:ed:f8:97:
d8:93:cc:dd:e3:ec:67:93:bf:c6:cb:03:51:24:42:
5e:fe:e3:0a:08:25:ee:79:f3:58:7b:61:f8:d4:1c:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E2:7A:00:E6:06:45:74:75:DF:3C:03:FE:57:CC:D6:E5:1A:5A:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c803db0f-99e7-4f7f-8e1c-5ca731697444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.147.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e5:12:ac:20:59:a2:ff:c4:16:df:0d:c6:4b:69:99:95:5b:
1e:67:34:a8:e8:2d:35:e1:54:48:61:0c:42:10:2e:a9:ca:e3:
16:9b:a0:17:0f:8e:76:97:ec:1f:d6:1e:10:fe:b1:e0:0a:da:
58:49:1f:67:6e:1b:71:5d:f7:4f:b6:35:32:78:48:4c:e4:ea:
cb:01:7a:88:7a:f0:af:5e:fb:46:b7:f5:ec:4f:63:5b:d1:5e:
d8:9b:55:57:ec:a1:0c:d5:e7:94:fe:f9:8c:18:f6:f1:4d:1c:
cf:db:38:f9:e9:70:d5:2a:82:88:28:b4:cd:5f:38:a6:c4:32:
86:b7:02:ef:12:16:2f:ce:f0:f9:8c:15:0d:6d:01:13:cd:f3:
80:c3:40:1c:a6:05:e7:72:80:68:32:ee:ad:67:3e:c8:96:ed:
7d:7d:11:b1:57:df:f8:7d:bb:af:ef:5b:2c:42:1c:59:e2:e1:
61:4c:bc:4c:cb:17:36:d4:be:74:1b:9b:0f:e1:d2:a4:3e:9a:
34:e5:73:37:16:28:4b:e3:59:4b:46:97:9e:92:90:d0:b3:dc:
a0:76:e8:af:35:74:b9:e3:c5:b2:92:22:c0:78:22:ce:8a:55:
90:dd:b4:90:3e:48:b5:d1:ec:ba:24:dd:57:5d:ae:d1:99:c1:
7a:e2:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:58 2025 by rpki-client