Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/983c5340-8807-4f71-bf19-8968b01e1dd2.roa
File: 983c5340-8807-4f71-bf19-8968b01e1dd2.roa (raw, json)
Hash identifier: CT/Keg5Xj1yCqinJQIczaW+l9Gp1hMY+NLTZ1PRQV9M=
Subject key identifier: C0:7A:69:2A:2A:29:64:57:61:39:63:0F:05:A1:EE:6C:36:3D:5F:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0519A9AEE59DFE55CB6E531E718B6D3927BFF33D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/983c5340-8807-4f71-bf19-8968b01e1dd2.roa
Signing time: Tue 14 Oct 2025 17:41:17 +0000
ROA not before: Tue 14 Oct 2025 17:41:17 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:19:a9:ae:e5:9d:fe:55:cb:6e:53:1e:71:8b:6d:39:27:bf:f3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:41:17 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=bda7d1396e0b65d7e5bba9af97833d934220d243b395873b3cdf8426f9d70111, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:7c:2c:7f:23:2b:7e:e8:6a:0f:29:a5:e2:
7a:71:9f:c4:38:a9:47:78:6c:8e:2f:a5:be:47:50:
55:65:50:82:47:9d:75:04:4c:1d:7f:9a:15:54:b6:
9b:75:64:93:66:7a:86:c5:69:e8:a5:13:a8:c5:20:
05:a1:7b:89:93:67:d0:8a:3c:1f:e7:c8:cd:d6:45:
7c:9f:1e:29:fb:eb:9f:08:6c:cc:be:15:b5:64:15:
09:da:d2:1a:fa:cf:43:5f:26:a3:d9:23:b6:95:33:
dc:87:f0:12:b3:85:7c:b8:58:7f:47:8f:f4:54:91:
28:de:fe:01:23:f1:cd:97:dd:81:56:79:f4:1c:26:
40:46:c7:b7:15:3f:7c:1e:f9:71:b2:26:b2:c3:f1:
fd:79:10:6f:89:e3:43:d8:9c:0e:ac:c2:53:a3:34:
d8:f5:23:b3:6f:c3:13:2a:14:7c:9d:33:96:40:26:
ac:9a:4e:f9:a9:5b:61:7b:f6:2d:92:34:3b:7c:cb:
8a:bc:a9:77:9b:5e:94:46:2f:2b:c9:4e:d2:64:0f:
96:fc:1f:2d:56:78:ce:fe:48:5e:c7:0a:e1:9c:a2:
33:4b:8f:a3:54:d4:4a:5c:5e:72:91:e4:23:d9:4d:
3f:d5:d9:e7:61:c3:a2:2c:6d:50:bb:32:fd:43:1c:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:69:2A:2A:29:64:57:61:39:63:0F:05:A1:EE:6C:36:3D:5F:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/983c5340-8807-4f71-bf19-8968b01e1dd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.14.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:0b:0e:ba:57:ac:7d:7c:f3:ce:19:62:59:1f:3f:e6:40:73:
a1:06:a6:a4:22:59:04:be:7a:cc:72:99:d4:d4:58:67:f7:bc:
11:d5:f7:76:6f:86:aa:dd:09:a6:a8:dd:7a:fc:dd:55:49:cd:
d0:98:7b:37:31:a3:51:12:5b:10:52:f7:44:c1:79:45:6d:79:
8f:69:c7:59:0e:21:38:e5:26:4c:40:af:ce:1d:df:05:9c:35:
4c:c2:d3:19:09:3c:93:db:4f:96:bd:68:1a:cb:d2:3c:74:53:
42:cd:8f:6d:33:23:80:3c:64:c9:6f:3e:59:3d:39:5b:75:42:
09:f6:ac:95:81:22:f5:1e:df:0c:f2:cf:3b:02:a6:ee:95:3f:
4f:39:d9:63:c1:a7:19:85:9c:35:fa:a8:b1:19:6c:3a:ef:2a:
90:4f:64:09:9f:63:9f:65:c2:44:e4:4a:8f:f6:dd:f3:9b:2f:
4f:c4:f9:44:c8:70:04:43:15:17:50:1f:e6:6a:2c:bb:89:49:
d8:0b:af:0b:91:a6:98:1e:9c:76:13:4b:0d:e9:25:1b:09:c1:
38:6c:2c:17:b4:40:00:a5:89:18:b9:82:06:6c:f1:fb:1f:e3:
3e:40:ca:4f:cd:e3:27:fa:4e:0d:dc:63:cb:2e:7e:ec:05:01:
3b:c7:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:10 2025 by rpki-client