Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa
File: 8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa (raw, json)
Hash identifier: CO5rnmc9m94/v0r9IySRpOzlIFZUvL3bI+SoeieOLW4=
Subject key identifier: 7C:4E:1A:4B:4F:A3:E0:A9:6E:0F:32:47:2F:EB:A9:77:C4:29:BA:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 633009A64FA709158E09A16E4CC8F7935673E9BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa
Signing time: Wed 12 Nov 2025 00:21:44 +0000
ROA not before: Wed 12 Nov 2025 00:21:44 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:30:09:a6:4f:a7:09:15:8e:09:a1:6e:4c:c8:f7:93:56:73:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 00:21:44 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=3b4786fa6e869e7365ff8c0408bf9a132674736bbe82c926a3e7dc161886a2c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:fc:51:d2:6d:e6:20:ed:7b:8d:ed:a3:05:
7c:68:f9:89:c9:58:ce:93:b6:2e:ae:4d:98:c6:3e:
25:64:ce:37:73:b8:1a:6b:81:aa:bb:48:d2:18:40:
53:b4:d0:ca:b7:65:93:23:57:40:0d:9e:57:c6:74:
a9:4e:b0:25:c2:9a:36:38:a7:04:79:4a:24:fe:42:
be:c9:79:fe:2b:23:84:a5:dc:29:0d:2e:fa:05:c6:
43:52:fc:19:9d:14:d3:cb:0d:a4:19:17:02:20:d6:
43:b2:39:d6:45:f6:60:83:4c:17:19:08:48:97:f0:
e6:5e:dd:e8:a7:32:63:04:40:1c:20:0a:ad:90:2b:
c6:20:4f:92:80:c7:e3:68:78:5d:f0:b8:ce:51:d4:
cb:4b:94:e4:02:24:4f:58:4e:67:78:7f:e2:4e:ce:
9a:bd:8a:f9:59:e4:75:cd:d7:74:2f:f1:18:df:71:
4b:4c:51:11:31:b6:4c:48:9d:14:18:ed:18:9f:e3:
ea:54:37:c7:db:8a:13:ce:0d:02:86:99:b1:4a:3f:
21:fd:c1:b9:4d:0a:6f:80:d9:e8:27:5c:3a:85:5c:
7a:e6:f0:35:71:8c:be:d4:9f:38:7d:b3:e4:a6:a2:
eb:b6:3d:08:be:91:c3:97:27:18:54:a2:0f:e6:ea:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:1A:4B:4F:A3:E0:A9:6E:0F:32:47:2F:EB:A9:77:C4:29:BA:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.97.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0c:7d:2e:30:77:23:3f:01:24:ae:b9:94:4c:8e:d2:7a:9b:
a6:ec:03:5b:43:2b:a8:b2:b1:59:e4:15:8e:60:ab:bb:d8:27:
96:f3:cf:7d:21:f6:76:6c:29:86:dc:e7:54:97:6d:e0:3f:2b:
5f:bd:ab:db:f4:b3:2a:03:9f:55:06:b4:e1:ff:24:ae:b5:ba:
25:58:e5:66:de:58:bc:ad:64:5f:8f:d7:ca:db:bf:c0:7c:3d:
78:e6:99:fb:57:54:10:2e:7f:10:bc:f9:04:f5:cb:d2:f1:de:
34:ab:8f:df:dc:6f:61:8e:67:f6:05:57:47:1d:47:2f:32:1f:
44:05:33:50:6b:a7:a7:3d:87:d9:d1:9b:db:85:27:16:2a:4e:
36:b3:1d:2f:ff:e8:5e:a9:38:82:12:53:58:fb:00:a4:c7:55:
3c:fe:7f:8b:2a:66:e7:fe:64:51:6b:9e:e6:5c:c3:62:6c:f3:
1e:78:1c:38:0e:a2:43:ce:ea:e3:a4:4d:93:d4:95:8f:05:a2:
ce:e2:04:34:8e:d6:38:73:d1:ab:62:a0:2e:2b:59:fa:17:49:
3b:6d:1d:31:44:9b:05:cb:0b:1a:bd:6d:b1:4d:1e:58:2e:ee:
15:81:5d:05:2a:ab:83:09:e9:b4:96:64:7d:5e:c6:35:63:19:
58:39:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:38 2025 by rpki-client