Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1092889-7851-46d8-8991-c4166600332a.roa
File: c1092889-7851-46d8-8991-c4166600332a.roa (raw, json)
Hash identifier: N8C+PyzKEw/CLVZ1nzMd7WiFGrcU4oX1w8ji6f8UA9g=
Subject key identifier: 05:48:0A:ED:64:D1:06:08:96:98:03:47:50:A2:76:AD:EB:C9:FA:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B44234AA570374770477E0E30EABD7C99967A12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1092889-7851-46d8-8991-c4166600332a.roa
Signing time: Tue 14 Oct 2025 16:03:13 +0000
ROA not before: Tue 14 Oct 2025 16:03:13 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:44:23:4a:a5:70:37:47:70:47:7e:0e:30:ea:bd:7c:99:96:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:03:13 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=07fc5ffb3cd3bd2344b24750973b1d58f535403ca6a043ecf38ce8f8c33a29d8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:b9:98:d3:30:d1:bc:9e:df:fb:58:9b:6a:
20:a7:1d:2f:ee:ba:d9:b4:c8:0a:7e:a4:22:1a:09:
69:69:c3:d5:03:dd:bf:96:b9:6f:52:06:d6:ad:06:
76:0b:7b:2c:52:9f:b9:29:00:03:81:70:b4:68:30:
f5:e6:27:cb:2d:e4:4e:d1:ab:51:0d:fb:59:7e:f9:
d4:45:59:7a:42:ab:23:f9:95:d6:05:51:a1:fe:56:
1a:1f:42:09:87:b4:c1:9d:42:56:ca:06:ce:dc:67:
be:32:b4:51:52:84:29:8b:d4:6b:dc:f7:3c:94:55:
65:af:14:ea:28:22:24:f2:9f:58:dd:b5:7b:05:07:
48:f1:9a:54:6c:95:80:20:a7:39:df:9e:7a:20:0f:
d3:d0:dc:cf:05:81:0f:80:33:0a:3a:6c:05:31:fc:
08:cf:54:c9:73:cb:2b:ae:fb:8c:1a:37:e7:68:9f:
77:63:10:5a:6b:3d:b8:da:cf:9e:92:c1:35:3e:03:
52:31:70:5b:25:1c:a3:cc:e6:a5:34:5f:68:18:bc:
2a:4f:f2:a5:8d:c7:f8:1b:63:e9:9c:a0:6e:f8:ab:
7d:ab:2c:de:90:ce:cd:24:bf:f9:fa:fd:03:bc:58:
39:15:56:a6:f1:a0:a7:b5:f9:f3:7a:4f:2d:eb:e7:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:0A:ED:64:D1:06:08:96:98:03:47:50:A2:76:AD:EB:C9:FA:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1092889-7851-46d8-8991-c4166600332a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:9f:ea:86:c4:f8:3c:ad:1c:9a:d4:b3:a4:07:12:2f:1c:a6:
e2:ae:fe:ec:74:9b:30:2f:02:06:35:a7:58:d0:f4:f8:ac:34:
b3:2c:79:01:85:bc:f3:aa:5c:1c:71:92:3a:83:e9:fb:11:d3:
94:67:1c:9e:74:ab:41:22:b1:37:ec:00:3c:b3:4a:6d:7d:0d:
e4:4d:db:a8:0a:2e:a8:1e:46:37:68:60:61:41:dc:70:11:07:
29:34:1c:41:55:c1:ac:5b:0b:59:93:d2:de:ee:61:c3:5f:d1:
bc:1e:ca:de:5c:8d:6e:61:45:71:58:4b:9c:06:90:c9:94:40:
be:04:d6:6d:42:3d:98:76:a1:1c:fc:be:ba:59:40:18:0d:58:
57:93:38:d6:b3:a6:16:fd:79:18:b8:fd:4c:96:57:9d:b8:d5:
e4:bf:89:82:89:fa:3c:3f:55:83:93:b5:a1:0e:7c:39:8e:62:
66:18:9c:a1:fe:88:87:2d:c5:a7:32:ed:70:8a:54:58:75:15:
e7:bc:1d:6c:0c:0a:2d:42:d2:74:d7:99:c7:16:7f:23:2c:fe:
dd:bc:e5:a7:b2:25:a2:57:a7:7b:02:50:69:9d:d4:8a:b4:3f:
00:b3:ae:9a:9f:a3:11:d2:04:4a:b8:56:09:bf:91:5b:db:ac:
f4:14:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:32 2025 by rpki-client