Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e388649a-1217-463e-bc62-10ba20ab2ccf.roa
File: e388649a-1217-463e-bc62-10ba20ab2ccf.roa (raw, json)
Hash identifier: /BNXURUe2U4HFgoN2FZoPz3dW56M1Z0TPaQByxlV1Dg=
Subject key identifier: 4D:B6:F9:9A:4A:BE:0C:79:65:D9:31:D1:B7:6E:9C:C9:55:36:12:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CA5C5005570C951CBA340EE5173D00E4D624A45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e388649a-1217-463e-bc62-10ba20ab2ccf.roa
Signing time: Tue 14 Oct 2025 17:38:23 +0000
ROA not before: Tue 14 Oct 2025 17:38:23 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a5:c5:00:55:70:c9:51:cb:a3:40:ee:51:73:d0:0e:4d:62:4a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:38:23 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=be490fa77a5df96a75eb8709b042201c9001a20dcf56a242239bc10ac6400aa7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:02:b1:63:1b:4b:55:99:c9:e0:dd:7f:4c:
0c:07:1b:8f:ca:90:a6:2a:d3:c4:e7:6a:fd:a3:a1:
26:b7:9f:2c:0e:81:83:33:30:1e:ea:b7:f1:97:ef:
a5:5c:34:9c:0a:fd:b8:48:01:29:1e:e9:e0:e9:c0:
54:49:fb:45:05:fd:25:d0:76:b8:ec:0d:69:29:f4:
62:96:51:77:a9:e9:e1:c6:ce:46:2b:b0:1a:01:aa:
84:b7:7b:cf:5a:71:aa:73:0c:48:e9:96:ed:6f:17:
ff:34:f9:d9:db:3c:ea:0f:69:2b:20:38:e7:b4:b3:
8c:d7:28:8b:ad:ff:39:33:20:83:61:97:3c:e0:87:
01:0d:0e:6a:b9:79:45:1d:e5:9b:6f:66:48:b0:8c:
55:13:94:cd:4e:07:79:08:3c:74:8f:38:dc:8d:1a:
4d:3f:b2:29:47:12:f1:d8:3d:19:5b:b2:35:06:4c:
10:8a:70:22:70:de:c2:ae:64:e9:cc:f0:40:4f:eb:
81:c1:99:72:94:00:cb:87:0e:5f:e4:15:68:13:03:
da:41:4b:a6:92:63:dd:01:7a:96:56:7b:fc:aa:49:
ad:11:dd:f9:e4:3c:18:af:86:97:85:39:af:08:2b:
c1:e2:6c:98:82:a9:a0:df:86:4e:8a:c5:19:2c:44:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:F9:9A:4A:BE:0C:79:65:D9:31:D1:B7:6E:9C:C9:55:36:12:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e388649a-1217-463e-bc62-10ba20ab2ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:c5:bd:5d:b4:01:89:59:34:93:85:84:da:0e:7c:87:a5:c7:
ed:16:2e:63:ee:dc:a9:42:49:5e:8a:bb:89:bb:1d:cc:a6:4d:
ce:06:bb:91:1b:c2:48:9d:48:9d:d3:d3:b3:60:d3:22:99:a2:
a3:b2:93:1a:d5:8a:66:54:da:d5:22:78:99:5c:1e:f0:fb:56:
a5:72:a9:d6:86:f6:ef:b4:f9:54:12:d3:97:3d:8e:f1:c7:34:
05:ba:72:4a:8c:3c:60:8b:75:1d:da:c1:fd:8c:2d:68:8d:5c:
ca:e8:1c:9c:82:22:0b:78:7c:33:16:20:80:da:f0:aa:85:77:
0a:f8:72:8a:45:9c:f5:69:55:ec:92:2a:f8:85:80:1f:fa:bc:
b2:72:78:05:a5:37:7a:08:80:5c:e0:8e:c8:19:5e:a3:d1:7d:
bf:28:ee:c6:46:b5:a3:97:b8:f2:e4:b6:88:9f:df:d8:27:99:
ce:eb:94:23:21:64:06:69:67:32:c7:ea:1d:fd:60:a2:a1:ed:
c0:37:73:00:5e:3c:2f:64:1b:5c:07:6b:69:e2:44:43:65:5d:
b7:6b:39:17:a0:c8:9d:d7:7e:e4:78:94:f4:47:70:48:e9:e5:
70:2a:6a:97:c6:55:fb:09:83:78:b3:70:e2:df:44:12:bb:8e:
d3:5f:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:12 2025 by rpki-client