Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e592ff96-040c-4d1d-a06b-348264721358.roa
File: e592ff96-040c-4d1d-a06b-348264721358.roa (raw, json)
Hash identifier: x8of83Bdm/Ua5F7gt/DsEZ98g/Tk5R9u7v3FmcbnI/g=
Subject key identifier: EE:81:71:6C:91:6C:31:62:B9:F9:8B:76:43:53:48:56:3E:5F:43:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 226A99CE8FB0213C5DFA5E4FF55A1C0EF701B4E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e592ff96-040c-4d1d-a06b-348264721358.roa
Signing time: Tue 14 Oct 2025 16:02:30 +0000
ROA not before: Tue 14 Oct 2025 16:02:30 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:6a:99:ce:8f:b0:21:3c:5d:fa:5e:4f:f5:5a:1c:0e:f7:01:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:02:30 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a1321d74b4a07173f25e98300b0617131f7acf3faa322b595006bafff5368af5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:3b:29:b1:9c:8d:97:76:e8:19:99:0c:e0:
a3:a2:d0:7d:06:00:2e:ff:1a:e1:f1:6c:66:16:f3:
a4:47:7d:02:90:4a:3b:c7:9b:a2:da:e6:52:e0:f9:
f6:5b:11:7e:f1:47:fd:64:41:94:43:a6:60:3b:4e:
28:6d:42:22:d9:69:04:24:bb:6d:db:74:c6:88:53:
2a:8f:69:6c:5c:a5:c1:1e:6f:4e:2c:bf:4d:1c:34:
83:fa:a3:3d:2c:66:e4:bd:7e:92:5b:7d:f2:7c:a7:
41:de:fc:1a:d2:cb:6b:f4:ca:f0:b7:0e:ce:53:73:
60:f7:4c:f4:16:98:4b:fe:34:46:19:e9:84:86:ce:
f0:ae:16:5b:1f:c0:19:f5:1f:61:98:62:17:23:5e:
47:f6:4c:d2:bf:ac:f7:03:45:31:47:7e:bb:5d:f9:
a0:cd:b8:39:a4:33:29:63:e2:3a:b7:e3:f3:4a:d3:
2c:a9:be:8f:64:fc:f5:7e:98:67:d2:75:45:91:6a:
6a:5b:8e:6a:83:63:23:a9:ea:f5:52:fd:18:23:13:
8b:d1:b9:3f:a3:92:db:9f:ca:48:4b:a3:0d:d5:8d:
44:02:ed:8d:54:16:84:08:d6:f6:c0:56:03:15:ce:
dc:10:20:3c:72:95:27:99:f3:43:4d:33:a5:1c:ea:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:71:6C:91:6C:31:62:B9:F9:8B:76:43:53:48:56:3E:5F:43:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e592ff96-040c-4d1d-a06b-348264721358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.174.0/24
Signature Algorithm: sha256WithRSAEncryption
26:be:b2:81:20:a9:df:7f:a9:45:c7:52:17:2e:a1:4a:e2:b9:
08:fa:22:8f:c1:43:dc:4c:ca:15:14:6d:16:0d:2e:ed:79:7e:
0f:96:73:4d:cc:d7:39:cf:cc:81:08:8e:f8:bb:bb:99:58:5d:
3e:42:88:92:b2:f0:75:4e:0b:ed:df:0d:94:43:06:7e:78:19:
3b:cd:a4:1a:96:c9:40:91:f1:a1:f1:29:f8:de:90:a6:f2:04:
b8:47:b0:56:ec:51:ae:b1:10:e3:3a:82:83:30:a7:fe:75:4e:
db:86:31:fa:a6:99:04:1b:bb:7d:8a:a0:cd:49:ee:f6:95:e1:
49:85:fb:5f:a9:85:15:af:1c:da:06:c2:8e:6a:30:18:29:ce:
f1:49:98:ca:c2:fc:48:2a:cd:c5:70:2b:88:9c:a0:b4:a4:6d:
82:5d:3c:5b:9a:b0:86:2f:97:b7:9e:5a:b7:4b:d2:0a:d2:f2:
61:42:74:b4:05:45:e6:c0:9e:f2:65:61:91:c6:80:c7:59:10:
cb:3e:cf:32:3d:56:18:1e:79:a3:85:c1:bb:9c:b9:f2:2e:7f:
80:32:10:b2:f3:95:63:ae:c8:0d:5c:28:08:2d:42:e5:e1:7c:
d7:a7:53:b9:ec:38:18:15:8a:cb:8c:d7:60:cc:f8:0a:d8:96:
d4:dd:a0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:13 2025 by rpki-client