Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa
File: 0deeae0b-5842-4da2-9a82-9e71130af856.roa (raw, json)
Hash identifier: brMlPNVhNypDJgqe+f5l+hx1fdHkiff/BhXybR8VMpc=
Subject key identifier: F7:7A:9F:1A:6D:22:65:96:74:12:16:CD:47:8B:5E:3C:E1:36:61:DE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62C0538834C8AFDD11F65E68ACD48E56B72C0964
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa
Signing time: Wed 22 Oct 2025 00:30:12 +0000
ROA not before: Wed 22 Oct 2025 00:30:12 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.30.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c0:53:88:34:c8:af:dd:11:f6:5e:68:ac:d4:8e:56:b7:2c:09:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:30:12 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=bede4edcd78045495cfad821e456fe5066504db7135761ee6f671329aed49682, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:08:e7:8e:2c:df:dc:39:06:ab:54:03:39:
bc:5b:58:ad:fb:fe:d4:ab:58:1f:06:74:4f:19:5d:
2a:89:24:12:d4:9e:5d:f8:39:cc:a6:9d:4d:8d:09:
6f:e5:bc:a9:70:6b:f3:7c:1e:a4:00:6b:fe:bc:76:
7d:a6:0b:55:62:88:27:d5:57:f5:15:96:71:be:92:
9b:0d:4a:e9:23:2e:e0:10:28:2f:44:1e:a2:0c:8d:
5c:ee:12:b0:72:dc:8f:02:f6:4a:f6:45:73:0e:e8:
51:e2:8f:60:45:ad:cf:5a:eb:d2:70:78:38:60:ac:
49:64:73:75:e1:50:3c:92:41:d5:8c:06:05:fa:b8:
91:bf:da:1f:f2:46:4b:81:ca:8c:ef:b8:e7:38:dc:
6b:fb:0a:6f:f4:85:44:17:04:5f:46:a4:2f:d0:7a:
e5:70:98:fc:c2:df:88:5b:05:a9:43:23:d9:41:11:
95:8b:0f:0f:eb:fe:65:89:0e:b7:be:5c:48:96:07:
26:78:8c:9d:5c:62:83:8c:4e:a7:74:74:a0:fa:6c:
02:95:54:8d:2c:c8:68:19:14:f4:2b:e6:c3:0d:7b:
7f:19:54:77:1e:53:0f:58:68:69:a9:20:19:13:47:
1d:2e:7b:79:fa:f1:dc:d5:73:ae:b7:3c:67:16:b6:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:9F:1A:6D:22:65:96:74:12:16:CD:47:8B:5E:3C:E1:36:61:DE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.30.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4b:42:1a:3b:01:a3:88:f8:55:3b:0b:dd:05:c0:20:a4:97:31:
fc:f1:ad:e3:63:11:64:28:71:1e:3d:7a:a8:4e:67:9f:35:9d:
c1:ba:9a:eb:bd:1d:88:a0:0f:05:f8:68:53:15:fb:18:dc:5c:
b1:9d:e9:b5:1a:5c:ca:f9:98:af:ef:ca:ac:29:ad:68:08:b4:
49:a5:0f:ab:a4:b7:20:d2:10:66:02:d9:91:d2:70:25:a3:3a:
7e:f5:00:44:5b:20:e6:40:e2:65:b0:27:5b:be:fd:25:09:f3:
81:61:57:c1:a8:82:1e:7c:fc:77:5b:0b:ba:62:f1:47:b5:44:
41:72:ee:84:9f:82:65:74:72:52:4b:a1:19:58:bc:59:df:2e:
65:3f:af:c6:14:9e:da:b4:3f:a0:7e:b0:69:b3:26:60:4f:1a:
2f:f4:3a:c2:3d:14:02:1c:b0:68:f5:6f:39:ca:c4:61:2c:ab:
cd:e9:fb:ee:7d:e2:28:df:16:3f:18:58:67:50:0a:ee:b1:64:
03:91:8d:f7:73:0b:ee:4b:e5:8a:2e:14:31:98:aa:29:e4:b3:
7b:be:61:b0:c6:18:3c:17:a2:88:b0:f3:33:39:df:85:03:77:
3d:5a:89:86:42:8a:a8:a0:85:c6:08:c8:a6:ac:af:01:7f:f6:
88:a8:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:04 2025 by rpki-client