Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf43a36e-0c74-4a22-9ee5-ad146f2cc565.roa
File: cf43a36e-0c74-4a22-9ee5-ad146f2cc565.roa (raw, json)
Hash identifier: c2bLdTUoF2oVjMh+hH/nT/Nn83yJnp9lIA4KVOWkqOs=
Subject key identifier: BB:C8:54:6E:F3:BE:11:09:77:F7:23:06:E3:8E:16:7C:DC:00:A7:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 193EBB4DCB37CAD2D9D61EAB97763024031B9D78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf43a36e-0c74-4a22-9ee5-ad146f2cc565.roa
Signing time: Tue 14 Oct 2025 17:21:22 +0000
ROA not before: Tue 14 Oct 2025 17:21:22 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3e:bb:4d:cb:37:ca:d2:d9:d6:1e:ab:97:76:30:24:03:1b:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:21:22 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=1e46ffc07b17068e3be78125ee6ddeb4dffd8616d5413b457374102cb31904cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:9c:40:7c:43:b3:16:a8:aa:d7:25:66:ba:
f1:6b:ed:1e:14:45:48:23:2b:be:14:64:44:98:d7:
15:4b:0e:39:a0:8f:fc:66:15:58:e8:5a:6d:ad:09:
ac:34:12:93:63:2f:08:88:c7:06:79:0b:0c:c0:ce:
11:02:c8:f6:b9:9d:ca:44:7c:c5:5c:4a:56:a8:d8:
66:b4:75:12:e4:74:73:f8:5b:09:95:f9:a5:84:21:
8c:88:05:ec:88:57:bf:77:97:c6:f7:7b:3b:cc:ce:
e4:aa:2c:0d:8c:53:75:2f:06:f5:19:72:27:5c:1c:
a5:31:96:13:27:23:6c:f9:e3:86:b3:2a:e1:5e:d9:
2f:61:6e:4e:36:38:b1:56:b8:b9:c7:00:38:cc:cb:
81:4c:f8:ca:fb:3f:a1:1a:c6:4d:7e:05:1d:62:13:
cb:64:f9:b7:53:c3:56:5b:2d:20:7a:53:91:72:24:
96:1f:92:0e:d0:20:40:7b:67:86:71:80:77:bb:5c:
61:de:ec:8d:8c:62:2e:30:b1:d6:b5:c0:4b:5f:a1:
b2:7b:f8:30:5c:fc:03:4e:d8:a0:28:8a:af:f1:9c:
c5:91:b9:77:81:04:c0:15:2d:31:94:84:9b:5b:0c:
d1:22:a8:b2:09:73:63:3c:1d:81:e2:d7:fd:b2:03:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:54:6E:F3:BE:11:09:77:F7:23:06:E3:8E:16:7C:DC:00:A7:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf43a36e-0c74-4a22-9ee5-ad146f2cc565.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.4.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:a6:4c:52:50:ea:c5:61:91:db:ae:8d:36:44:ea:81:6c:98:
0d:d7:0e:b5:d3:f5:dd:79:a6:0b:c9:40:ac:9b:25:c4:3d:9b:
5f:76:a9:ff:32:02:aa:85:07:75:23:5f:b8:38:c0:57:71:6d:
05:6c:11:79:12:7c:15:ed:ec:cc:23:4d:f0:95:e6:30:98:af:
3b:e6:dc:39:6c:4f:2b:ca:16:99:29:73:09:63:bc:06:f3:d5:
e7:ab:e0:f3:0b:04:8b:8c:f4:a9:61:c7:d2:95:5f:51:6c:e7:
c2:3d:03:84:00:28:33:6c:a6:8a:06:2a:93:2f:91:69:3e:a7:
d1:1a:16:d3:41:ec:11:db:c9:a1:b3:92:73:c1:86:31:d9:31:
cb:ca:79:0a:27:33:2c:da:6d:fe:7a:11:98:f3:b5:3e:a4:1e:
bf:12:31:3f:2a:8b:6c:cd:5c:83:bb:b7:83:9f:c7:86:3e:2b:
17:28:09:22:b1:c1:12:cd:1f:81:1e:ae:24:4b:98:d0:7b:56:
a5:36:2b:2f:33:f8:7c:d0:d3:a6:86:da:d0:9b:3f:08:6b:65:
82:ec:14:76:dd:cb:28:85:46:54:92:c9:cd:fa:08:ea:e8:9a:
ff:9e:c6:28:88:40:2d:0c:d2:7c:81:14:26:2c:c9:f4:8c:e0:
ee:e0:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:24 2025 by rpki-client