Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa
File: abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa (raw, json)
Hash identifier: nPGJK+e378WrNYltBvkciN/ZeFJha9eqgfRSIDVwjRE=
Subject key identifier: FB:25:6A:02:5C:E9:F1:7B:A0:6D:76:AE:2C:8F:32:6F:B3:42:E0:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34CFA34E46BAFCDB0A3F0D982A908FE4E6BE6253
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa
Signing time: Wed 12 Nov 2025 02:21:21 +0000
ROA not before: Wed 12 Nov 2025 02:21:21 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cf:a3:4e:46:ba:fc:db:0a:3f:0d:98:2a:90:8f:e4:e6:be:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:21:21 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=db878d77b7ba8bc7417115d234e65c830316bdd0b7d56a168700bea5099444cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:eb:4b:d4:bb:6d:48:36:93:76:55:1a:09:
c3:89:24:6e:ad:41:44:bf:df:e3:f7:7f:48:a3:9f:
46:a6:9f:ba:d6:76:7b:6f:90:f6:22:8e:9a:17:47:
0a:b3:8c:f8:0c:92:0f:8a:3e:24:ef:ad:61:10:b8:
f3:d7:2a:97:95:60:d3:62:3d:7c:28:23:7d:d7:83:
0c:f7:e7:05:37:0b:e8:61:c7:03:e4:62:d8:56:cb:
b7:bf:6a:5d:45:4a:fb:a2:24:16:c7:92:64:37:c9:
ba:be:fd:3b:0f:29:19:d4:15:8b:d9:40:d2:15:de:
02:8d:96:88:f1:e4:95:e1:24:3a:96:58:95:b4:90:
07:3d:80:88:c2:f6:d6:d8:ff:b9:03:06:a3:1e:e3:
00:08:ec:c8:49:e0:ec:5e:fe:99:8b:08:0b:f7:d6:
ab:9d:a7:d7:1e:95:d3:53:14:ed:7f:79:3f:c9:4c:
f5:22:4d:4d:fc:4c:bc:9c:7f:f8:5e:e9:b9:3f:0f:
1b:bd:cb:83:52:bb:97:f1:74:92:33:46:49:de:1b:
ef:ca:9e:ea:93:02:ee:10:ab:b5:19:86:8d:11:21:
b2:28:f7:22:fb:f9:03:83:38:21:b9:eb:26:f4:1f:
ed:6f:1c:14:1e:46:04:22:4e:a0:28:41:a6:a8:c4:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:6A:02:5C:E9:F1:7B:A0:6D:76:AE:2C:8F:32:6F:B3:42:E0:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:d4:df:d1:7a:5f:2b:6b:e3:1b:dd:90:3b:59:17:75:e3:a8:
50:f5:8e:11:26:ec:af:22:c7:90:9c:fb:93:b5:57:9f:61:9d:
9a:08:95:6e:7b:b3:13:92:ca:23:65:59:b4:b6:11:d5:e9:70:
58:72:f0:90:4a:e9:0d:5f:57:5c:bd:f6:fc:ae:2e:f1:a0:df:
4e:06:5e:09:b5:fc:00:e5:ad:66:56:4f:8b:b3:e2:68:43:9c:
11:52:16:eb:2e:b0:77:46:49:f3:85:a2:c5:2c:7a:cb:54:86:
e8:95:94:bb:61:ed:a7:32:11:28:48:32:91:13:c4:4f:57:ec:
f9:3f:0f:ed:14:b3:6f:a1:6f:80:6d:ca:98:38:72:1b:44:a7:
0b:e7:14:52:1d:21:d2:af:b8:10:6e:ae:b5:c8:83:3d:6c:68:
82:4f:4a:75:2c:92:1a:28:23:0d:0a:29:06:13:48:db:86:1c:
f6:15:87:e5:cb:a4:99:c7:a9:58:c7:21:da:c7:64:51:23:81:
13:d2:67:af:d0:e8:9c:7c:10:6e:37:0c:6e:bf:4c:cc:89:04:
1f:72:f2:c1:4c:3e:7a:5d:93:04:54:ac:a3:6a:39:8c:20:68:
7e:93:40:91:24:8a:c8:e9:99:ab:0b:51:3c:cc:d2:e7:a5:20:
c4:1a:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:37 2025 by rpki-client