Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85c13336-d610-48b8-a727-b319fcdee591.roa
File: 85c13336-d610-48b8-a727-b319fcdee591.roa (raw, json)
Hash identifier: +WY0ckT+Q9NTDsS7x8GSkDeo9tTjuAoR0L1e73kTUq4=
Subject key identifier: A4:EB:04:2E:B5:B3:BC:08:BF:05:AE:9E:06:5C:57:8E:7B:28:9D:79
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76B79C4BE508E6AF90501DE36D82667AA1A22393
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85c13336-d610-48b8-a727-b319fcdee591.roa
Signing time: Tue 14 Oct 2025 16:52:59 +0000
ROA not before: Tue 14 Oct 2025 16:52:59 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b7:9c:4b:e5:08:e6:af:90:50:1d:e3:6d:82:66:7a:a1:a2:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:52:59 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=821863f8ff4b4360d8b5aecb96df364d812f986e8f443a385e27b8f958975cef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:fb:2e:55:e4:17:2c:f4:3b:1f:10:72:a2:
81:35:08:f0:c8:56:0e:6b:6b:b9:84:02:e8:c0:44:
ea:26:1d:00:0a:b7:a8:51:3d:cd:09:db:7f:87:0b:
78:9f:90:8c:33:39:f9:f5:fe:cb:ea:49:2a:6f:59:
11:01:39:96:cc:36:4b:07:ba:15:58:36:58:ec:ca:
03:bf:e1:ce:5c:fa:49:67:4f:0c:30:c1:cb:52:9c:
f0:26:ab:27:b6:c1:0e:a3:d7:38:81:e5:30:f8:0f:
b5:9a:2a:ca:00:c9:e6:23:b1:6e:8b:42:30:5b:45:
7b:02:d4:fd:c3:5f:21:fa:ca:7c:2b:57:c4:75:bc:
65:f8:a7:a9:e4:53:f9:bd:6b:dc:eb:37:b2:25:8e:
86:38:0b:72:ac:51:15:3b:2c:4f:db:1d:e5:1d:7d:
80:2f:60:fc:84:c8:dd:bd:d4:82:d4:4d:68:3f:b5:
2a:40:ee:1a:c7:79:f7:80:16:e9:c9:e0:1e:ec:57:
49:79:da:83:2e:07:95:11:9d:b5:b3:6f:7e:cb:62:
d5:a2:a2:8a:c7:0a:4f:64:a6:84:c1:30:d5:9a:5e:
d3:e9:0d:43:83:b5:cb:55:43:08:5c:c0:93:6c:24:
26:e0:90:40:39:74:30:11:3b:bf:a2:63:60:c9:48:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:04:2E:B5:B3:BC:08:BF:05:AE:9E:06:5C:57:8E:7B:28:9D:79
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85c13336-d610-48b8-a727-b319fcdee591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:50:58:d5:26:98:67:63:6f:35:e1:03:e7:7b:34:44:ce:b4:
09:52:23:93:5a:e9:18:cb:eb:78:02:82:81:c8:e5:51:6e:40:
bb:68:d4:b5:63:8a:63:8a:7c:47:ed:6d:3c:84:a9:16:62:c3:
53:f7:6c:1c:4e:bd:f0:c0:e5:3d:09:f8:e1:46:ad:26:24:9a:
cf:70:79:07:58:54:bb:4f:fe:f5:b4:8d:8d:32:7b:f5:83:8b:
47:55:4e:80:f2:12:c9:ad:fb:e9:ce:c7:2f:ab:8f:0b:b7:c9:
aa:b6:0f:09:1a:c8:b8:2b:10:a1:55:75:0a:f8:26:d9:98:d6:
a8:67:ba:a9:c9:fd:34:43:bb:12:ec:3d:18:36:7f:39:37:b4:
c3:19:b3:d0:ed:e5:8d:cc:1a:d4:9d:9f:5a:01:85:bf:f1:0b:
cd:e3:7f:d0:cd:09:6d:84:85:88:86:03:59:67:fc:5e:a7:77:
62:c0:7f:9b:a6:40:7a:bc:6e:bc:f6:cb:21:30:5b:b8:8f:b3:
dd:f3:cf:9a:1b:dc:a5:d1:e6:41:77:e2:ee:18:b5:3f:d8:86:
50:b4:6c:d0:36:b5:e6:f2:e3:44:48:b2:56:ef:05:da:7b:7a:
f7:49:3e:8f:c1:f5:83:1f:81:3e:be:94:b4:98:4f:02:b7:87:
a6:ba:ab:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:04 2025 by rpki-client