Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa
File: 1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa (raw, json)
Hash identifier: Tfx+1eaWMkZ7GyuZL3nd7eaR+owlcHy2CQbxR0BrFoA=
Subject key identifier: 83:28:93:01:DF:A1:46:0F:86:F6:D0:71:E0:19:CF:88:43:7E:D2:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6728384720F4576F333B24F475A9AC7B020B7991
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa
Signing time: Wed 22 Oct 2025 00:30:17 +0000
ROA not before: Wed 22 Oct 2025 00:30:17 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:28:38:47:20:f4:57:6f:33:3b:24:f4:75:a9:ac:7b:02:0b:79:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:30:17 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=908a3621c30673c54c7f27f6cefaf054faf333f6533f345a455a7b4a54e176d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:36:c8:1f:95:d3:94:cf:06:af:a6:28:c8:
34:ff:ff:80:c8:d6:71:79:21:cf:d5:b4:00:4a:fb:
1e:53:9c:5f:42:3a:db:88:ab:c0:1f:b8:dc:c7:a3:
1d:64:2b:ce:ff:c6:a4:af:d5:6c:f8:20:88:0e:1e:
dc:66:ca:73:6a:cd:2c:0d:f1:48:6d:0c:80:28:ea:
ae:2a:b1:62:5c:e4:a2:9f:68:8d:25:7e:11:fa:2e:
43:1e:0c:29:a6:b3:91:f9:4f:c1:3c:5b:f3:74:83:
fe:0f:34:a7:64:f2:09:1c:c6:18:b1:d5:40:c0:72:
61:f8:bf:71:b2:e0:03:13:27:51:0f:13:fe:dd:f0:
9a:51:3b:b0:33:26:3c:cb:be:5b:02:36:d6:bb:85:
00:74:a9:d7:09:ed:3a:df:9e:3f:cb:74:f0:e9:29:
57:a1:55:6a:ec:a2:af:5d:6e:b3:b1:8d:c7:cf:97:
ba:9b:75:cb:7a:71:e9:96:f6:1b:84:be:33:42:82:
aa:a5:c0:23:4d:18:83:a9:28:8b:fc:a0:a8:54:d2:
68:d9:2f:d3:8a:a8:92:e7:a6:ec:fc:5f:da:79:10:
ae:1a:21:80:c6:bc:79:30:ae:55:61:bb:0f:e0:e9:
ec:9f:93:33:42:c9:35:b6:e4:0b:5f:15:79:1e:20:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:93:01:DF:A1:46:0F:86:F6:D0:71:E0:19:CF:88:43:7E:D2:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:62:50:e6:7f:42:0e:20:25:9c:3e:d8:74:9e:8b:d7:20:eb:
09:f7:cd:c1:0f:c8:58:71:48:4e:50:f1:9d:2d:15:a7:46:76:
38:bf:57:3a:ac:75:a6:34:3c:be:5a:de:b5:d3:08:f5:ae:89:
f6:d0:61:68:b8:93:e4:f5:6a:54:e9:a3:01:50:14:6f:9d:95:
52:fa:49:95:d7:dd:fe:1e:ae:34:ec:ad:40:0b:d9:37:e5:9a:
f4:ac:25:73:0b:4f:35:8f:7a:16:9e:5a:ad:85:81:9b:5f:14:
7f:fc:a9:9e:5b:87:be:a6:5c:c1:a5:9a:4b:ce:9d:bf:83:5f:
fd:db:1e:d2:04:07:fa:bf:de:4b:65:2b:98:16:58:3b:8a:10:
e6:c5:f2:7f:dd:68:73:32:a9:ab:10:43:9e:bd:e2:56:d7:84:
0e:8f:0e:92:7f:4f:8f:54:0f:c3:65:c9:59:ac:44:bf:bd:1d:
2f:85:4a:cb:89:d5:3f:f3:5d:35:16:0c:38:15:3f:60:b4:a4:
18:74:27:87:d5:c5:b3:f1:21:47:2e:a9:2b:e2:2b:e2:4b:69:
1e:da:ae:91:da:49:14:0f:d3:bf:67:f6:a2:4e:39:e7:db:40:
66:cf:31:92:5c:0f:99:8f:40:1a:5a:2f:04:f6:05:ae:aa:25:
01:bd:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:50 2025 by rpki-client