Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e78f2b34-df4e-4726-bab2-f240e8c1eacc.roa
File: e78f2b34-df4e-4726-bab2-f240e8c1eacc.roa (raw, json)
Hash identifier: sijKwjzoqUFckEfLe0PNOQiop4gFYkeDcyyGqbEemv4=
Subject key identifier: A6:29:87:07:73:4F:DA:22:9D:72:6B:9C:C0:BD:B0:C0:88:53:3A:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32E493B99A25B36547396EA96E6C3EBA7243AF7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e78f2b34-df4e-4726-bab2-f240e8c1eacc.roa
Signing time: Tue 14 Oct 2025 17:02:53 +0000
ROA not before: Tue 14 Oct 2025 17:02:53 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e4:93:b9:9a:25:b3:65:47:39:6e:a9:6e:6c:3e:ba:72:43:af:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:02:53 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=ce333c69d006beacc12e0026d90d8f0989fb9fbfbee11c0adee2ce097624c219, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:d9:64:16:08:19:99:1a:9d:99:23:05:7a:
b9:9f:de:18:7a:46:25:ec:98:28:0e:da:d1:fe:3d:
ce:d0:11:8d:3e:2a:fc:75:c7:94:e5:6d:5e:b6:84:
de:f7:bb:47:8e:b0:95:68:de:f5:c8:60:53:e7:73:
4a:fa:c0:23:07:35:da:34:0f:68:11:41:99:fa:1b:
97:f2:85:94:12:9e:e3:ad:dd:ed:e3:b0:8d:10:d7:
90:c9:ec:6c:a7:9e:81:f4:6a:d8:90:f8:ce:bd:eb:
e3:a4:8c:43:53:87:12:27:0b:72:9b:a3:69:43:9d:
47:47:ac:43:0b:85:43:c2:52:41:40:f5:3c:1f:e1:
df:ea:ef:ef:f6:5d:bf:72:2d:19:69:20:95:5b:fb:
fc:2b:80:38:24:12:03:c8:2e:2e:71:09:6b:db:ef:
c1:f1:4b:47:76:37:51:c2:a3:1d:48:92:05:a4:53:
76:c4:73:3a:94:cd:91:fa:ba:ca:34:02:a9:73:72:
fe:a4:6b:c4:bc:46:c4:00:fc:8e:e6:6d:26:4f:b9:
47:cb:67:0c:e6:cb:ed:02:0d:64:f1:c7:99:fa:5c:
00:38:81:b0:b8:bc:0a:a3:50:8b:14:dc:43:91:4e:
59:23:72:fa:7d:35:ac:dd:a1:44:dd:cb:76:16:3f:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:87:07:73:4F:DA:22:9D:72:6B:9C:C0:BD:B0:C0:88:53:3A:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e78f2b34-df4e-4726-bab2-f240e8c1eacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.33.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:dd:09:3b:49:7a:cf:a4:3b:69:2b:f4:26:fd:13:34:99:2c:
62:3c:55:e3:80:22:ec:24:e3:6e:a1:f4:94:cd:33:cb:6c:59:
15:2a:c7:a0:b4:dd:c8:ac:b8:2a:a0:56:aa:1f:77:c2:00:18:
32:b0:05:96:0d:3a:4a:33:42:c5:38:b8:c5:40:12:00:be:aa:
8d:f5:81:6e:5e:3c:db:7c:0e:44:f5:1d:60:b9:13:4e:ef:4c:
df:11:92:f4:d0:0b:6e:57:c6:7d:56:c6:75:47:af:51:05:2e:
2c:81:92:c4:27:94:56:52:9a:d4:94:cd:94:6e:fa:b2:6e:db:
06:5f:43:45:d2:cf:c4:50:75:05:2b:22:a2:27:09:57:58:a7:
e3:2d:a3:6a:30:27:65:33:15:2c:c2:cd:26:06:64:fc:53:83:
aa:17:70:17:e6:ba:7b:be:ac:62:c1:5a:ec:de:09:ac:62:06:
be:67:e9:ce:9d:7b:6f:81:fb:35:4b:96:57:35:cc:db:61:45:
50:48:a8:bf:9b:5e:c4:56:79:73:75:ba:7a:82:dc:66:66:d2:
ad:70:16:92:40:72:f4:c7:92:64:1e:95:05:1c:ff:c4:85:cd:
db:46:11:30:e8:48:7b:3b:a9:74:bc:04:34:43:c0:0a:30:72:
8c:df:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:52 2025 by rpki-client