Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6f07fe5-aff8-44a2-ae12-cb22a13d2e28.roa
File: e6f07fe5-aff8-44a2-ae12-cb22a13d2e28.roa (raw, json)
Hash identifier: uF3XJiGrJrQBw1Ze1JM226W/65BAUJHfifwFVsP4V6c=
Subject key identifier: 1F:F1:44:1C:FE:E9:5C:9E:51:EE:96:77:D0:B0:A7:6B:9F:55:03:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0433E11294B722CC8428B090104DFCE4CB8E2F61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6f07fe5-aff8-44a2-ae12-cb22a13d2e28.roa
Signing time: Tue 14 Oct 2025 16:22:53 +0000
ROA not before: Tue 14 Oct 2025 16:22:53 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:33:e1:12:94:b7:22:cc:84:28:b0:90:10:4d:fc:e4:cb:8e:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:22:53 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fd3ad37ac7de270b7d9e26ff4940e30b9c74a1c94866f2af13b04f86f018f8cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:45:9b:9f:4f:a1:25:f8:d3:0a:01:40:37:
64:63:3d:fd:83:bc:01:7f:f3:3b:07:fa:f1:83:2f:
1e:9f:52:e2:79:cf:1e:e4:f0:56:d8:80:5d:d6:cd:
5f:76:94:e8:37:6f:7e:bd:7e:cc:cd:82:86:ed:00:
a4:9c:13:01:3f:4a:68:9a:4e:94:b3:82:47:a1:3b:
60:94:af:78:46:f4:71:5d:97:42:8b:1a:57:d0:9d:
3a:8a:12:8f:40:5d:ca:c2:8f:05:6a:65:e5:95:d3:
9f:f9:d1:fa:be:57:fa:2c:ea:80:5b:69:70:6c:60:
be:d2:53:02:90:2e:66:a3:5c:6f:ed:f7:7d:a2:4d:
f0:a9:87:d7:eb:dd:e0:0b:6c:11:4f:aa:4c:32:fb:
40:a2:59:cb:24:27:6c:58:89:0e:af:d0:f2:18:53:
80:80:a5:47:db:1c:88:e0:17:cd:16:a9:b5:aa:81:
55:02:3b:ab:df:96:08:31:c4:b5:09:80:89:d9:35:
c5:ae:a9:0d:e4:ed:d1:1b:0a:c0:71:c7:a0:90:d8:
99:80:11:d9:90:10:00:81:ca:c9:7d:3a:f1:35:44:
c5:c0:ac:29:74:6b:ac:ab:91:f6:75:60:0e:28:42:
24:48:b9:ee:48:d0:8e:de:b0:f3:03:65:02:29:8e:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:44:1C:FE:E9:5C:9E:51:EE:96:77:D0:B0:A7:6B:9F:55:03:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6f07fe5-aff8-44a2-ae12-cb22a13d2e28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.131.0/24
Signature Algorithm: sha256WithRSAEncryption
22:29:5d:05:41:4a:c5:de:a9:b7:07:53:e9:59:65:c8:3c:55:
38:1e:c5:ce:91:75:07:08:5d:93:c6:b7:43:cf:dc:87:94:5a:
e1:2e:33:92:5f:b3:4d:8a:79:c1:12:24:ad:60:f7:09:ea:26:
39:e6:e5:1b:a4:bd:7f:76:85:1f:70:5e:93:a0:25:0b:04:d9:
18:7f:d6:d1:b3:96:32:5a:98:66:0e:34:2f:02:c6:65:ef:62:
06:e7:9d:09:32:97:ec:6b:28:45:84:9a:20:47:90:59:6e:87:
20:e9:05:72:79:4b:d7:be:76:37:08:34:4e:b7:d1:37:52:d5:
47:10:18:ad:50:c4:ab:b4:a6:5f:4c:c6:58:3c:9e:0a:f2:b1:
4f:60:45:54:1c:f3:a2:ad:d9:2e:60:64:d5:7f:89:a8:bf:c1:
c3:f2:4c:42:dc:2d:7d:45:e3:84:3c:56:00:25:b4:0f:e7:6f:
f4:7e:5f:7e:d0:d5:dc:ca:d9:34:f8:b2:58:88:5b:e5:2f:76:
8c:50:3d:8c:28:7a:17:bb:14:b4:79:e1:c5:5e:2e:32:dc:bd:
73:f7:a4:3d:72:b1:c6:c1:f4:bf:fd:ea:2e:65:5b:30:a1:49:
c0:70:00:7d:4b:f0:f4:6d:26:99:7a:8c:72:67:2a:4e:5c:9a:
fa:9e:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:49 2025 by rpki-client