Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d45699fd-5f59-4d60-a32e-970a5598ac60.roa
File: d45699fd-5f59-4d60-a32e-970a5598ac60.roa (raw, json)
Hash identifier: ptHpAJzBepYTfMo61+RpLO1G02M+d1i+jvMpshAYAfg=
Subject key identifier: 85:E4:2C:2D:2C:85:F1:F7:5D:22:8D:7D:C1:28:80:59:70:7D:92:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F69B695F9B08268CD3573A4B3E3D7E51F2A0A6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d45699fd-5f59-4d60-a32e-970a5598ac60.roa
Signing time: Tue 14 Oct 2025 16:51:09 +0000
ROA not before: Tue 14 Oct 2025 16:51:09 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:69:b6:95:f9:b0:82:68:cd:35:73:a4:b3:e3:d7:e5:1f:2a:0a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:51:09 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=66b2bbc0e879f8e4df241fef3d01ace5b82bd10281000bda3c8f92c7f4ade9fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:24:e9:b7:98:d5:4c:04:4c:1d:92:e5:af:
0b:8b:4b:c1:2b:d5:19:b4:67:3f:bd:3d:63:f2:93:
0b:9e:1b:94:01:47:bc:5e:5f:89:14:ac:0f:b9:2e:
d0:19:ea:20:ba:f8:43:47:df:93:d6:ad:26:00:8b:
8e:7b:5f:dc:ae:76:89:43:fa:29:a3:5e:ef:13:dc:
f8:33:9b:93:d3:e9:cb:7a:95:af:13:bb:78:21:77:
8b:6c:8f:eb:ea:6d:c4:da:a8:a1:84:8e:0c:58:4d:
fd:8f:ff:99:fc:ab:38:38:db:61:b5:54:56:12:fc:
96:d9:85:98:75:ad:67:15:9f:05:01:5c:59:31:3f:
12:07:87:cb:2f:c7:84:95:3a:c7:87:e3:c6:a7:8d:
f4:a7:6b:b2:1a:1a:51:7d:9e:24:98:54:32:10:58:
fd:cc:94:5b:52:47:7b:69:98:2c:ff:7a:09:c7:54:
21:7a:6b:c2:6c:c2:ba:02:9e:af:93:3a:ea:75:a6:
40:4d:05:2e:80:48:2a:a5:6c:04:90:91:74:bb:6d:
d7:6c:30:68:49:8b:cc:99:cb:9e:d0:f8:64:8c:03:
6b:6b:50:ea:9a:79:0c:ac:d1:d8:f0:1d:aa:84:14:
73:1d:78:54:c1:5f:84:50:ba:38:a4:6e:d7:94:3d:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:2C:2D:2C:85:F1:F7:5D:22:8D:7D:C1:28:80:59:70:7D:92:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d45699fd-5f59-4d60-a32e-970a5598ac60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.166.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e8:3f:3b:c1:21:33:91:f5:86:4a:15:45:89:ae:53:09:db:
5c:98:25:dc:c1:30:58:be:e7:e6:33:6d:e9:9a:72:91:af:9b:
10:9a:99:39:cd:ba:16:7a:40:a0:2c:77:20:04:9c:af:cc:77:
fb:2b:4f:76:2c:6c:7d:7b:73:cc:6b:d7:55:92:07:3d:0c:b0:
b0:d8:49:77:15:62:69:ae:91:d5:fe:b7:a7:f8:03:85:da:c5:
35:9b:e9:b8:c7:43:38:8a:9b:f3:5f:87:39:be:be:b0:9a:21:
35:58:30:d6:0e:44:06:bb:cd:34:64:71:b2:ff:e6:dc:98:b2:
81:54:d2:b0:74:f4:fd:9b:23:28:07:a2:de:aa:3e:af:f5:eb:
99:e8:e6:c2:a5:78:ef:3b:07:d0:60:38:72:34:50:07:3a:7e:
12:8c:11:c8:af:01:e7:08:d7:0a:05:69:9d:c8:29:31:28:1e:
a5:86:13:15:08:3d:6f:7f:5a:16:88:63:5e:bd:77:e7:63:13:
88:68:73:be:30:29:fe:95:ce:df:65:04:d6:9b:86:f3:5b:35:
37:36:e7:af:68:0a:34:2a:58:ba:92:01:5a:b5:56:13:46:e1:
a6:49:53:c7:d7:c5:4c:b5:cd:95:f3:11:a5:86:ba:37:e0:33:
db:cb:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:01 2025 by rpki-client