Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67bb38f6-58ef-440d-88e7-0fda4e4c3e00.roa
File: 67bb38f6-58ef-440d-88e7-0fda4e4c3e00.roa (raw, json)
Hash identifier: xjnsLOZQ20qeO3wRrigpP4zuwyCqd/NR/U/X5xme6vQ=
Subject key identifier: EC:FD:26:B6:6F:86:5A:C2:1E:72:E6:4A:46:29:B5:20:17:25:D3:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5AE29018B375CC797F7BA533058A37A3B8CF5210
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67bb38f6-58ef-440d-88e7-0fda4e4c3e00.roa
Signing time: Sat 27 Sep 2025 00:23:26 +0000
ROA not before: Sat 27 Sep 2025 00:23:26 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.52.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e2:90:18:b3:75:cc:79:7f:7b:a5:33:05:8a:37:a3:b8:cf:52:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:23:26 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=7c2f8c3936a3db09a262a55ccd5f85de8f155570e8cc59ee363a3261f7f6a8c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:ce:29:8d:9c:04:c5:bd:a7:96:0f:e3:91:
25:f9:ce:c1:14:74:0a:90:bf:85:10:bb:fb:30:21:
fe:1d:83:23:27:43:d9:3f:33:c9:f6:be:6d:74:35:
2f:c5:02:fe:cb:43:84:af:97:a7:75:69:d8:a2:0d:
8a:66:fd:f0:f7:b8:45:ba:9b:32:ac:81:7e:7a:d4:
b2:d6:49:fb:78:3d:93:56:23:85:c9:23:c2:d8:2c:
1b:16:d7:a6:02:0f:26:79:93:7b:26:26:de:eb:d2:
cf:6c:99:aa:34:66:12:3f:9a:6f:28:b1:44:1b:ea:
1f:af:55:a1:02:63:cb:28:de:9e:55:de:55:41:90:
d6:21:a1:d9:53:2f:1c:cb:09:76:1b:93:25:20:6e:
6f:e5:ca:97:11:41:20:c8:d3:3d:f1:01:29:27:04:
d4:d1:fa:d2:91:38:5f:95:4e:e7:d2:6f:85:d7:e6:
d7:fe:a0:5a:87:51:5a:76:f5:38:cd:1b:90:d6:5c:
b9:d7:0e:3c:10:bf:7d:17:75:82:c5:94:d2:b6:ef:
5d:45:9d:88:a3:f6:e3:13:e0:3a:f1:80:94:73:0f:
ef:00:11:e8:22:1c:28:18:a7:68:34:c3:d5:45:33:
8c:d8:e8:f6:85:ed:1a:40:d3:43:25:d5:9e:09:3e:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:26:B6:6F:86:5A:C2:1E:72:E6:4A:46:29:B5:20:17:25:D3:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67bb38f6-58ef-440d-88e7-0fda4e4c3e00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.52.0.0/15
Signature Algorithm: sha256WithRSAEncryption
37:eb:ef:de:03:08:36:b5:f3:04:bb:59:29:ff:e9:df:28:14:
0c:89:15:6c:16:bc:81:bb:0c:e7:ec:e0:f8:18:be:42:dc:c9:
60:ea:37:73:5a:fa:f5:f3:b8:ea:f9:c8:bb:7e:3e:38:a3:46:
14:7c:5d:88:85:26:ad:d8:5c:29:ef:64:c6:4d:70:c2:8f:01:
c4:f6:c1:63:52:50:6b:22:fd:e1:af:7b:12:a3:44:00:3b:93:
81:81:47:1d:f9:24:68:34:7e:01:9f:12:71:03:c5:8a:d3:99:
50:78:56:18:35:fd:bf:b9:22:20:7d:26:61:0e:99:fa:dc:70:
da:84:1b:51:f3:2c:f7:f1:f6:9e:ca:4c:6b:f5:b4:3c:2d:01:
80:d7:01:0e:14:1d:cd:24:0c:38:0f:f0:05:0f:7e:69:3f:43:
21:90:d9:71:ba:2a:a3:57:8b:82:cf:d1:4e:16:7b:79:79:ab:
97:59:09:09:dc:fe:d3:ba:eb:dc:5d:99:a9:7c:e4:2e:a2:49:
23:f4:2e:43:70:f0:d5:f1:ab:b7:12:5c:d6:17:de:7a:3d:af:
56:00:c5:b8:ff:c9:86:e6:52:e2:fe:b9:7c:61:00:ee:82:c4:
d7:d4:25:31:45:c6:7d:35:58:83:f6:8b:18:3f:94:69:00:f2:
40:2c:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:42 2025 by rpki-client