Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa
File: 272c4ae3-4134-472f-8b64-c9388a26cc0a.roa (raw, json)
Hash identifier: clsAsNpohoGY6/fPu9D/atmRDUXM4EQuYxMkBn3UWUs=
Subject key identifier: 2C:A9:69:CB:DB:C9:F4:B4:31:80:FF:BC:EB:0A:BD:37:56:B4:D6:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E7BADCC2C69DC24C4F2CE74013B47BBD91788F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa
Signing time: Wed 22 Oct 2025 00:40:07 +0000
ROA not before: Wed 22 Oct 2025 00:40:07 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7b:ad:cc:2c:69:dc:24:c4:f2:ce:74:01:3b:47:bb:d9:17:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:40:07 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=eaac028640409e6b2b80040a2cfb7e21a9eed394c7c0c16262f4deb1de3dda4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:23:ba:eb:2d:31:2a:93:5a:07:20:5c:7d:
49:da:17:49:10:a0:ef:ca:4d:80:f9:6d:10:d1:3d:
4e:87:11:95:95:b0:3a:f2:39:c9:96:48:3f:f0:42:
a4:fc:f6:a9:eb:64:ba:9e:a3:54:15:ef:6d:58:d3:
7a:4e:e4:85:b0:09:53:9c:3a:96:d7:53:da:23:3c:
02:3a:e5:85:de:d9:cc:6f:b4:85:90:e7:fb:97:23:
e1:42:10:72:b5:2f:96:73:ca:48:fa:34:48:e4:cb:
cb:c3:ef:fe:17:80:6a:cb:d4:a9:ac:0a:ce:fb:32:
d4:f2:01:2f:d1:4d:66:90:92:1d:75:54:1f:88:33:
d6:e0:02:e5:b0:81:97:00:a3:43:92:24:25:c5:8f:
22:f4:77:13:a4:29:5c:17:4c:78:51:17:77:5d:e7:
fc:65:65:b4:5d:53:8a:10:06:c2:f1:cf:e4:1d:8e:
4c:f2:92:e9:51:c1:a3:40:7d:97:85:ab:14:62:00:
38:71:89:24:b3:de:1a:6b:07:c7:a7:21:44:c0:44:
08:bd:e0:42:13:ed:b1:28:d8:05:dc:84:8d:bb:92:
7f:84:ea:53:c3:f7:45:f7:44:95:7e:5c:b7:df:8a:
c1:46:bf:95:9a:33:eb:2c:02:0c:36:9a:e7:3f:00:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:69:CB:DB:C9:F4:B4:31:80:FF:BC:EB:0A:BD:37:56:B4:D6:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:0e:8e:df:19:a2:1a:0b:57:d4:21:1d:bc:af:13:f9:2f:06:
a3:bd:74:49:2c:7c:ad:f1:e4:7e:f0:6e:19:e7:11:03:b1:26:
ec:46:27:a3:4d:40:4b:d4:1a:6a:c9:2b:83:73:94:af:15:f3:
0a:1b:3a:0a:58:3a:cb:ff:08:8a:38:4f:9a:87:89:92:2f:46:
11:32:98:3c:55:e6:bd:35:09:ab:ce:04:75:e5:07:f2:5f:78:
03:83:43:34:c6:88:93:59:b0:ec:d4:33:d1:f7:12:1e:c0:23:
59:ba:ec:31:e1:f4:8b:7c:74:4e:b0:80:a8:f2:25:d0:2b:18:
30:60:99:68:97:38:b2:42:9d:44:6f:47:c0:7c:36:26:6e:44:
2e:6c:22:b3:17:ad:c3:c0:ac:c8:22:97:47:1a:3e:f6:ac:ed:
7a:6e:ae:1e:7b:01:58:9f:b8:7b:67:20:f8:78:a0:7b:98:45:
93:23:7c:15:83:9a:01:44:39:17:cf:a1:52:a5:32:de:09:90:
35:a8:3f:e4:12:4b:bb:31:9f:5b:24:cf:b9:80:45:0a:26:e8:
8b:60:3a:23:fc:f9:7b:28:fd:2b:ba:f4:34:c1:6a:b1:52:39:
dd:80:2e:ba:d5:a5:98:95:f1:19:0d:f6:4e:2d:78:bc:e6:f6:
a7:b1:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:52 2025 by rpki-client