Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa
File: e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa (raw, json)
Hash identifier: CVL5EIuXl8uCYrlBAucTzs8zjhQPR5eOFNyxB6NvVys=
Subject key identifier: 8D:76:D9:A5:C4:B7:8A:CC:17:F6:01:F3:8A:DB:C2:BE:5C:89:71:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 743CFDA3BFD733B106681BE4A59CFFA5B5B9CCBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa
Signing time: Wed 05 Nov 2025 00:31:36 +0000
ROA not before: Wed 05 Nov 2025 00:31:36 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.190.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3c:fd:a3:bf:d7:33:b1:06:68:1b:e4:a5:9c:ff:a5:b5:b9:cc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:31:36 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=61d2d200f79e9c25006f5d9c5acd6b0325254da365b36269c8a6fd0fdfa01535, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:58:ca:1a:95:0c:01:7f:17:68:80:7f:af:
60:7a:ff:f0:1a:cf:fa:e0:f6:cd:e6:b5:70:3b:a8:
96:4c:e6:d8:33:fe:24:69:5f:26:c1:cb:18:db:d9:
7d:66:71:f1:3c:47:3f:f8:91:6c:d7:39:9e:5a:b0:
a4:9e:bf:8e:39:63:43:36:fa:e0:f7:1b:5b:2a:44:
88:78:ff:e1:f7:ac:64:ec:44:f3:bc:4e:21:f5:1f:
96:25:62:25:0d:cf:9d:9c:6a:98:bf:6b:4d:8d:07:
75:50:53:e5:02:aa:a3:b1:a1:cf:5f:8d:d8:b0:30:
99:cb:0e:dd:55:b1:f3:97:0c:25:1e:a7:bb:02:7d:
bd:66:e9:73:97:bc:cd:8d:54:43:4b:0b:c2:02:e7:
d7:44:65:ce:27:7a:d5:08:a9:5c:d5:3e:2c:95:99:
a6:24:4a:71:33:d8:d5:5a:c4:ce:fa:33:87:4b:f1:
9f:b2:a6:65:ad:98:7e:12:00:cc:c7:e3:9a:60:28:
07:14:a7:5f:30:b8:78:33:78:1e:e6:ea:fc:45:65:
1e:e8:90:92:b5:e8:ba:0b:51:f5:73:fa:42:89:3c:
45:c3:72:82:72:98:fd:27:9b:17:5e:3c:16:73:dd:
6f:a7:fb:b2:6d:90:2b:fc:13:f2:fd:ef:d7:44:6c:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:76:D9:A5:C4:B7:8A:CC:17:F6:01:F3:8A:DB:C2:BE:5C:89:71:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.148.0/24
Signature Algorithm: sha256WithRSAEncryption
02:68:a6:66:d1:9a:8f:cc:6b:eb:1f:95:90:36:7c:5f:b4:fd:
6c:ea:fa:2b:fe:ee:a6:5a:f4:0a:26:ba:81:fb:12:24:ec:7d:
b2:68:05:9a:16:8d:6d:f3:b6:78:97:cc:98:c2:25:a0:3d:1e:
9c:c3:4a:06:39:0d:28:93:5d:6c:93:d8:99:fd:5f:cc:bf:31:
bd:c0:f6:59:2c:49:e7:1e:1d:20:ce:d9:2c:9a:30:19:14:ed:
1b:cd:8f:d4:bc:e0:87:6d:57:99:bf:dc:3f:bf:6d:d2:8a:b9:
74:01:d2:07:41:8e:f7:44:a5:10:12:10:7f:1b:fe:e9:ca:81:
5f:fc:2b:e3:37:df:10:b0:7b:4c:b4:a9:c8:7d:47:10:d9:43:
4d:03:8f:25:b4:2f:1c:62:f8:b6:f1:f6:84:9a:5a:87:07:3c:
63:3b:5c:c3:6c:ce:88:54:66:be:9c:44:8c:15:d4:c1:f2:a1:
ab:53:18:38:68:91:09:df:09:a2:08:07:31:0b:e2:b2:4c:35:
6b:23:d4:38:2d:b9:ea:50:75:6a:dc:a3:cb:b8:f7:8b:e2:8f:
e7:31:38:53:7b:d6:aa:bd:49:87:22:b0:dd:0d:ab:03:0c:6a:
19:7b:7a:e9:70:74:29:fe:69:3d:be:f9:ee:4c:db:2d:23:92:
1f:12:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:47:58 2025 by rpki-client