Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa
File: 17428170-47b5-40b1-8882-bb95915d3ed7.roa (raw, json)
Hash identifier: V7v0TF+13jhC3xolskb14NVGk5RCpjyjtafcbSovilE=
Subject key identifier: 00:64:EC:39:DD:AF:E8:D9:13:CF:48:4D:86:38:2D:49:8C:05:D3:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 772BA4A3808561A739E4B9140469B5F6CA0C7118
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa
Signing time: Sun 02 Nov 2025 00:00:06 +0000
ROA not before: Sun 02 Nov 2025 00:00:06 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 66.109.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2b:a4:a3:80:85:61:a7:39:e4:b9:14:04:69:b5:f6:ca:0c:71:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:00:06 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=1060a5f4999302ef076d2b5d6a3680dd2012617078d8e1aa91b92b428a7bad2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:5f:04:ee:b2:d7:82:e3:1c:76:cf:35:a2:
f9:d0:07:73:fc:f5:28:bd:4f:7c:38:49:cd:17:92:
cb:92:90:89:12:ec:28:37:32:f5:6f:e5:25:02:cb:
2d:52:42:40:6f:97:60:8e:df:e0:91:cc:f2:b0:39:
b6:32:34:06:73:b4:49:1e:20:85:79:6e:a9:66:c3:
68:43:cf:5c:39:35:f5:be:8d:50:cc:12:88:fd:3d:
f2:f0:e5:7f:07:0b:ce:42:58:3c:6b:f0:f3:f8:2c:
2f:13:77:c5:12:89:30:fa:3b:aa:ed:2d:45:f9:62:
02:9b:ea:91:6f:a5:4c:3f:7d:2c:3e:b0:a4:7f:9d:
1b:dc:76:2b:f3:1d:28:ce:b9:51:14:91:ce:47:68:
40:0c:50:c6:bb:ef:d1:01:25:ce:64:7e:1a:06:f5:
ab:21:a2:5c:ef:32:8c:d2:d5:37:f4:0a:a7:15:e2:
dd:65:e5:40:43:7e:fe:e6:d6:26:f5:ce:ad:b0:d9:
48:1d:a1:3d:41:85:2c:5b:c8:57:7c:91:bb:57:fd:
fb:c0:74:fd:df:08:f5:c1:c4:04:b3:0f:2a:9f:38:
1f:2f:2f:be:9b:3f:a7:78:78:34:f8:25:db:f9:3b:
36:f3:a0:72:5e:0c:a5:16:62:65:23:b2:90:07:ef:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:EC:39:DD:AF:E8:D9:13:CF:48:4D:86:38:2D:49:8C:05:D3:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.109.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:2b:b7:ad:a0:54:54:b1:ed:af:08:01:a1:09:51:e8:af:fc:
65:e8:f1:b9:6b:e5:b0:1b:a2:f4:d4:a5:d6:db:99:ca:11:e5:
c6:bc:7b:99:c0:ce:5f:7a:88:a6:4f:59:58:cb:45:95:f2:a8:
0c:a5:10:04:64:11:63:79:37:c4:4d:a7:f3:f4:a2:73:39:a4:
8d:db:5e:5d:99:e1:48:0d:69:cd:b2:40:fa:99:df:ad:06:ec:
b8:7b:f5:5c:83:64:bf:8b:71:90:31:8c:0c:f9:1b:ab:df:48:
b0:ba:1b:1b:42:9d:5b:c5:77:05:d1:89:c6:12:57:75:58:f7:
12:fa:5e:c9:5e:e2:92:84:c8:be:54:b5:62:9c:d9:53:72:64:
f7:08:9a:47:eb:f0:24:03:aa:1e:d8:2e:c3:de:e9:e9:f4:10:
ec:de:10:0d:43:05:00:1f:9a:71:7d:00:9c:46:52:4a:95:1b:
65:b8:87:f6:31:08:5e:0a:6a:73:fb:c1:d0:29:39:80:89:a5:
4f:d2:4b:9c:0a:ca:8b:70:3a:2c:3c:bb:fe:b5:a0:6a:0f:b0:
be:2e:2e:cc:b6:5a:5f:da:2d:4e:26:9b:cc:de:93:95:42:9e:
51:10:62:54:56:f9:c6:fd:ef:f3:17:31:38:0a:70:df:9c:f8:
a8:31:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:16 2025 by rpki-client