Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0f11de-bc5b-4909-bee4-4894cc854992.roa
File: cd0f11de-bc5b-4909-bee4-4894cc854992.roa (raw, json)
Hash identifier: Vw1kauT49zWjJ7zeanHJjLG65+29tltoxtjlxGyjj1k=
Subject key identifier: 6A:94:4B:CE:95:B2:71:2B:54:39:E3:54:16:4E:6A:A6:A2:51:91:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CA7589FEE438E7E960781C002C87EB28D8FC9FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0f11de-bc5b-4909-bee4-4894cc854992.roa
Signing time: Tue 14 Oct 2025 17:21:57 +0000
ROA not before: Tue 14 Oct 2025 17:21:57 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a7:58:9f:ee:43:8e:7e:96:07:81:c0:02:c8:7e:b2:8d:8f:c9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:21:57 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=49834c1c515c0949a1183a68f26b9ab704a0e4e3f23676a81c99441e2a19e3d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:84:23:2a:e2:16:94:d5:ba:4d:37:2d:50:
65:5e:cb:df:46:82:6d:c1:0f:61:78:a7:4d:ac:43:
40:55:af:36:26:6e:8d:2e:76:24:79:31:92:08:1e:
27:6a:1f:16:54:0e:17:5a:01:f2:9d:14:e9:04:15:
3e:a5:55:70:70:bf:3c:2d:0b:f6:a5:ff:4d:20:bb:
d2:36:20:29:be:6d:09:49:40:96:32:41:4c:bb:34:
3e:6a:72:72:ed:9e:7e:1d:89:53:3e:be:36:9a:b3:
cd:4f:c8:8b:1e:7d:63:ef:bd:bb:c7:1c:78:a0:92:
06:65:d5:27:fa:9e:99:5d:63:f4:e5:9c:0b:b6:06:
3a:4a:17:b9:73:68:b8:8f:e9:e0:83:88:fe:cd:3b:
e4:3e:15:d6:71:94:b6:fc:00:df:8f:03:2a:bd:7f:
bf:ca:31:42:7a:3c:dd:94:50:97:31:63:20:7c:d4:
91:6b:81:48:24:11:a4:59:09:b2:b2:ea:f0:d2:e5:
c9:e5:3b:b0:88:1e:0f:73:23:32:7e:dd:64:4b:da:
9e:7c:82:34:b8:42:71:66:07:7b:89:92:11:bd:bc:
ae:6a:7d:78:1e:2d:18:46:dd:e2:ad:e8:90:e2:61:
9b:74:bd:64:d6:ed:d1:94:eb:6e:ec:97:fc:9a:3f:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:4B:CE:95:B2:71:2B:54:39:E3:54:16:4E:6A:A6:A2:51:91:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0f11de-bc5b-4909-bee4-4894cc854992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6b:ea:23:3c:1f:c8:e3:48:f7:d1:d8:02:22:0a:59:66:b7:
26:19:de:a6:26:cc:4e:ce:27:ae:89:25:84:e1:76:4d:47:3f:
00:b6:00:49:62:d1:9e:af:bc:7f:c4:28:b6:22:df:58:1e:e4:
cb:33:9e:5f:3c:ec:c7:2f:42:72:46:e8:21:80:a3:62:74:fd:
2a:8c:5b:71:0c:0e:09:07:5b:45:20:59:29:b3:3f:20:46:77:
dc:02:84:d8:24:4e:f1:0c:57:04:54:6f:c9:b7:f5:7d:85:d2:
64:cf:61:93:2d:99:ce:74:0a:1a:fc:ce:c6:28:ab:38:16:60:
24:1b:4c:81:eb:cc:df:f5:44:13:fd:8f:24:02:f6:73:00:0a:
ac:c5:32:6b:aa:88:ed:c7:fc:7b:b7:73:53:23:62:00:27:86:
52:39:e9:ad:de:dc:79:bc:b0:4f:84:a1:ca:9f:94:7a:6d:44:
66:d7:0e:3a:32:75:4e:ab:5b:c2:e4:de:89:0d:66:45:d4:af:
a1:f4:cf:4e:69:2e:70:b8:18:e9:41:03:a7:ac:c7:d6:a5:8c:
a2:86:56:4a:cb:44:01:6b:ae:6d:d6:10:b6:4e:78:31:bd:b3:
fb:d2:3f:07:92:71:0a:23:a1:de:d6:a7:36:31:f3:a5:78:2a:
cf:ee:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:48:39 2025 by rpki-client