Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa
File: cfbd0837-4eff-479f-a1bc-b854caccddcb.roa (raw, json)
Hash identifier: RZ4UIEDrVmsjkXdK1brxh9UPcTevL/1tn0Anjb4mTIk=
Subject key identifier: AF:A2:3A:4C:6F:1A:03:6C:1F:40:01:93:55:03:2A:70:3A:2B:16:72
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B6B4FC971A70052D4F016061FCE51A291FF40D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa
Signing time: Fri 03 Oct 2025 00:40:53 +0000
ROA not before: Fri 03 Oct 2025 00:40:53 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6b:4f:c9:71:a7:00:52:d4:f0:16:06:1f:ce:51:a2:91:ff:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:40:53 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=37bdb6ea90dc492e034143af678b65270fcfdd08488045b101c8d8517bfcc589, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:e0:30:11:28:f7:b4:73:0e:62:34:30:66:
b4:22:28:04:3b:3a:64:d5:94:d4:f1:5f:95:9b:6d:
ed:06:35:ce:ff:c7:57:f9:6b:1d:ea:b8:cb:2e:67:
24:ed:fb:6c:3a:91:3a:7d:0a:5d:7b:6c:d3:fc:9c:
68:a7:8f:ed:70:5a:f9:5b:3b:9f:0e:6e:0c:16:41:
74:d8:3c:38:5c:23:e6:94:db:b3:de:bb:0d:43:77:
c8:3f:52:f3:3e:95:e7:bd:81:ca:1e:57:a4:c0:50:
0d:41:2f:20:9d:e9:4a:6a:da:73:f4:bf:e2:40:32:
74:85:f1:32:8f:2f:e1:48:f5:29:84:3a:05:4f:a9:
10:65:f8:f6:80:41:e6:9c:44:6f:37:12:28:70:ab:
6d:06:69:e2:bf:e3:7a:04:28:1d:4f:56:e6:07:5d:
b7:f7:cc:6d:b4:b0:a1:06:c5:c7:e5:41:b9:1e:44:
60:2b:be:9a:6e:a2:88:fd:3d:a6:56:35:04:67:ec:
cd:35:25:7b:15:07:19:ed:dc:51:ca:0a:54:30:05:
27:12:fb:d0:0e:81:6c:55:07:e4:f3:39:13:e2:16:
7a:f7:80:e8:72:2e:dd:9c:de:50:bd:00:ee:dc:e8:
4c:4c:60:c1:ca:a6:8e:33:52:92:c3:fb:01:f8:a1:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:3A:4C:6F:1A:03:6C:1F:40:01:93:55:03:2A:70:3A:2B:16:72
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b0:28:f3:d4:28:b6:ec:e7:23:e9:81:20:d6:7b:c8:90:1b:
17:48:9f:19:95:22:49:4f:47:5d:d8:c4:51:57:0d:f3:15:25:
4e:63:46:b7:63:4d:e1:44:b0:e4:4e:78:e0:87:1b:8c:ed:74:
46:ff:7f:a3:a5:14:21:4d:fc:16:47:86:1f:15:e8:70:94:7e:
db:7a:87:d5:8f:eb:e9:b2:32:c9:03:c8:2c:7f:88:4d:1a:95:
18:0f:34:0e:6b:55:f4:ee:88:9c:1d:b2:eb:6f:b4:c1:1a:f2:
5f:94:1b:fa:34:1a:18:81:00:0c:95:10:d5:01:b8:18:7c:9b:
c0:95:95:fa:fd:cc:f6:65:91:50:18:e4:3d:01:d7:43:f1:22:
27:2b:17:77:5e:93:ae:2b:fd:1d:91:fe:15:ed:c5:ba:f9:4b:
0f:92:6e:1a:68:18:44:d8:0a:c0:45:af:53:a3:7c:c9:c0:3e:
4c:6c:78:00:65:e4:48:f5:33:18:23:58:c1:fd:05:55:b1:6b:
b8:ff:17:a5:bb:80:9d:1c:52:37:88:bf:dd:97:1d:1e:ec:84:
39:ff:c6:55:30:b5:40:f6:50:2d:1e:1f:08:03:80:01:85:63:
7a:1f:45:25:d5:e2:e5:74:f8:cc:06:f9:7e:25:bf:97:14:50:
60:18:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:09 2025 by rpki-client