Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa
File: 0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa (raw, json)
Hash identifier: 6/UNr9Jvr1qL0urHUcCNKQf+RyjpA+HBieJ/tLbZjTw=
Subject key identifier: FD:61:F3:53:E0:3B:A5:D9:76:69:F8:B5:68:8B:98:74:72:46:6F:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D0C58B201AB7CC356772AF42A58E589C55B54A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa
Signing time: Tue 28 Oct 2025 01:01:19 +0000
ROA not before: Tue 28 Oct 2025 01:01:19 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0c:58:b2:01:ab:7c:c3:56:77:2a:f4:2a:58:e5:89:c5:5b:54:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 01:01:19 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=d3201986ca2e18f04133681dd70f76ad83fe49c01bff55fff2ddf1e140609a29, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:58:d6:07:2d:f3:e4:a5:b1:86:10:bb:fe:
ad:72:72:01:64:ab:d5:79:83:85:ba:03:d1:62:5a:
5a:0a:fc:a0:a2:0e:50:00:af:d0:0b:20:d6:90:d3:
97:d4:77:dc:64:2b:a9:b1:c1:66:d3:8f:4c:57:e8:
ee:60:2b:3a:b0:dc:c6:3f:6f:a8:a6:c2:b7:31:4d:
b1:d4:d6:aa:74:16:87:ee:a3:df:26:1c:c3:1e:68:
35:96:db:13:cf:e0:b0:62:f9:da:93:e1:b2:e2:d2:
c2:be:51:90:26:1e:eb:ee:60:31:31:ab:7f:82:29:
37:15:3f:d5:04:f8:dc:d4:2e:31:fa:85:6b:dc:50:
99:d8:23:6b:04:7e:d7:b5:13:20:4d:5e:8a:29:0e:
79:1f:7b:d6:41:68:b6:dc:87:24:7d:6d:55:d4:3c:
79:10:df:b1:3f:61:b1:92:97:8c:84:1a:8d:98:7a:
ed:48:99:79:dc:1e:93:c8:23:0d:5e:9d:c7:71:19:
b8:92:9a:46:06:d0:62:e7:88:89:9c:e9:51:fe:b6:
fc:9a:25:e6:63:be:54:90:91:95:1d:ca:eb:05:44:
76:c9:53:d6:1e:3b:a8:1f:db:f5:52:ef:26:e5:d8:
01:5b:ec:ea:ef:0c:9c:66:b2:e6:64:f0:ea:88:12:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:F3:53:E0:3B:A5:D9:76:69:F8:B5:68:8B:98:74:72:46:6F:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.117.0/24
Signature Algorithm: sha256WithRSAEncryption
33:64:fa:39:d6:00:30:e8:ca:77:6f:96:94:8e:e6:b9:f4:39:
06:28:8d:a4:94:36:f1:bb:3f:42:21:57:46:21:6e:6b:96:4d:
f0:92:ed:e8:06:67:cc:88:6f:7e:17:b2:42:62:f7:73:b0:02:
9e:6b:ea:d1:c8:56:8d:04:e8:81:d0:08:64:2d:33:9e:30:fc:
88:17:77:22:cb:5a:6c:04:f6:e1:3e:8e:12:f8:76:d9:2f:65:
7e:eb:93:77:4f:d9:0e:ee:08:ab:76:e2:ac:fd:c6:ae:6f:f2:
01:22:23:cd:07:bc:04:48:8b:fc:d3:11:17:2a:e4:ff:67:3e:
fb:83:08:4b:ce:4b:8f:c5:34:9a:8f:f6:0e:ab:21:a6:b6:d2:
f3:8b:d8:31:a3:62:4b:88:1f:73:b5:c0:7f:b4:6c:6d:d5:88:
db:19:83:c5:6e:d7:14:64:5d:5c:22:f6:87:64:4a:ef:be:64:
eb:13:70:6b:e0:1f:de:e5:87:cd:8f:4b:05:55:6e:3d:82:9b:
09:c0:8e:8c:8b:97:1e:41:63:58:4b:5a:a8:1f:b2:12:c5:dc:
ed:27:04:82:03:d1:92:86:92:46:78:d1:16:7f:bd:c4:0a:5a:
21:22:71:22:d8:de:ae:dd:14:ec:96:45:1b:05:10:c4:31:90:
fc:23:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:47 2025 by rpki-client