Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
File: dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa (raw, json)
Hash identifier: yZDk52nBwTYO8oZvnzDm4D0hfZMKX8BijkchRh3xYD0=
Subject key identifier: D7:8A:A3:B4:0D:27:67:31:78:5E:7E:7F:52:90:23:BD:CF:5F:D4:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5679CC2E07EED4B8080448FF6C5D2B7BF156FB5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
Signing time: Sat 11 Oct 2025 00:41:22 +0000
ROA not before: Sat 11 Oct 2025 00:41:22 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:79:cc:2e:07:ee:d4:b8:08:04:48:ff:6c:5d:2b:7b:f1:56:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:41:22 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=fa75c21b05a65bca34b3b5fdf39d00ab305b63078f8a9d51f329b26f2b72e34a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:a1:c9:ee:c9:bc:ca:5f:90:2d:66:1b:d5:
d3:bd:4d:90:00:da:5b:c0:5d:c7:24:99:7c:0b:fe:
84:5a:1f:6a:d5:50:21:35:86:9d:3e:82:f3:a0:d8:
23:c3:cf:92:d6:56:71:c8:ba:d9:e5:cf:7e:14:d4:
81:46:6b:46:e8:a0:b1:db:1b:d2:81:03:05:07:0f:
81:ff:b2:60:49:9d:69:39:e8:ab:57:15:bf:50:37:
c7:a1:dd:96:96:27:64:1d:af:c8:04:50:7a:68:c6:
8d:3d:ec:74:ce:ce:78:56:79:0d:19:34:5b:d3:49:
4d:88:04:01:da:be:c8:e8:36:b3:84:3e:cc:49:1b:
59:59:da:fd:d6:0a:2c:96:de:af:5a:08:8c:53:1a:
f0:20:83:61:93:c7:7b:f4:52:ab:51:5e:b0:c1:ac:
a3:bf:01:92:bb:e0:b1:e6:b6:3d:35:af:7a:91:f2:
07:c0:4f:8c:ac:98:15:a5:29:65:7f:2e:da:c2:40:
0e:43:54:8b:c7:1d:c9:d4:ab:74:40:ea:90:23:f9:
14:09:53:7f:ad:67:07:ca:64:89:a4:d3:8a:14:2c:
d3:9a:d0:36:11:0d:d8:3b:75:9b:db:da:dd:cf:b5:
57:44:6e:d3:5e:f9:82:bd:a3:88:bd:d7:22:4d:34:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:A3:B4:0D:27:67:31:78:5E:7E:7F:52:90:23:BD:CF:5F:D4:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.244.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e2:b1:6b:95:84:23:d6:a3:d6:16:0c:76:12:6f:b8:74:62:
08:4a:d9:69:41:92:d9:07:21:6c:78:60:6b:c2:23:31:e6:fa:
1b:22:88:e1:bf:fe:57:0a:cc:6c:c8:13:39:bd:10:2a:f4:4b:
60:0f:db:77:c2:7c:3c:8d:e1:9c:83:7c:e4:33:7b:6b:30:e1:
1f:f1:b5:e8:9b:fe:3b:99:52:78:f3:81:4b:64:db:7a:bb:a8:
19:7e:f1:60:a7:46:04:47:49:0a:63:20:9c:db:d0:b8:bf:b1:
73:ff:14:b7:7a:0b:2c:18:48:80:5a:be:28:8c:12:b4:34:1b:
17:25:43:55:ab:63:5c:86:cc:29:a1:a5:c2:4b:dd:48:f3:cf:
ac:de:cc:ba:8d:39:6b:ee:c6:15:35:5d:b0:b1:82:d5:66:fd:
cd:2e:ec:be:fc:49:83:14:2c:4f:b0:df:1f:34:4f:bd:be:23:
01:c1:d9:70:5c:26:3d:06:42:db:f6:80:a9:a9:7f:f9:ca:56:
12:c2:b0:23:22:98:f5:f9:23:a7:a4:bd:d0:38:83:e9:84:ff:
7d:22:7e:f0:7b:eb:c4:34:f0:44:9b:23:da:c6:0e:d1:ec:76:
82:35:d4:60:8a:3d:e1:6f:36:c0:7a:45:64:fa:62:33:ec:93:
85:c2:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:33 2025 by rpki-client