Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a656ff06-dd61-4a24-a01f-a8fcac8be378.roa
File: a656ff06-dd61-4a24-a01f-a8fcac8be378.roa (raw, json)
Hash identifier: HatWl6Kf+js82ldDwYc+Ee1n7xqer9Y2pvsWbRUsQxc=
Subject key identifier: F5:4F:2B:71:C1:20:4E:8C:26:E4:D4:3E:FE:DD:25:DB:34:3F:4B:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3951BA281805466A17F245328E27DC9C89F90082
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a656ff06-dd61-4a24-a01f-a8fcac8be378.roa
Signing time: Wed 22 Oct 2025 00:10:14 +0000
ROA not before: Wed 22 Oct 2025 00:10:14 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.232.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:51:ba:28:18:05:46:6a:17:f2:45:32:8e:27:dc:9c:89:f9:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:10:14 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=d88d5098b6eda0d7331e88e9b75f379c5de92b3c7ba270c8224653102b4e2599, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:ae:68:3a:7a:15:c5:ff:51:a6:00:80:80:
20:67:80:e4:b0:70:ff:f5:3c:88:e2:c2:23:40:c6:
16:44:37:5b:eb:e9:89:d1:35:5d:13:f3:3a:17:61:
38:32:64:e5:b4:29:60:4b:ec:07:45:68:59:57:71:
87:7b:a7:50:49:6f:19:54:d1:44:2d:fd:72:04:6f:
a8:bb:64:68:e9:2d:ff:56:f5:58:69:1b:37:1f:c5:
16:68:88:3e:9d:b9:30:b7:1c:05:72:47:1e:df:7c:
21:4a:76:8d:3b:d0:1a:d0:8f:79:e4:d2:0b:31:34:
12:a4:00:36:01:f2:c1:14:55:f9:5b:ee:cc:88:41:
3c:71:21:a1:48:6b:43:26:0d:d0:73:84:12:f9:6e:
68:1c:30:80:dc:6f:a9:34:fd:54:c3:1b:9d:83:2f:
8a:f3:b9:14:5b:35:b0:38:d6:87:53:75:f2:8a:52:
53:a4:53:25:d9:68:21:ab:dd:70:df:35:ce:a3:98:
e7:af:cf:aa:48:8a:b7:12:d4:9f:e8:f5:1a:c8:97:
55:2d:3b:57:a1:a7:2c:f3:0f:0a:6b:16:54:11:c5:
60:45:fa:6e:05:a4:a1:59:56:6a:07:6d:23:35:29:
13:72:c1:0b:79:65:1f:24:13:64:5f:dc:84:d2:a2:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:2B:71:C1:20:4E:8C:26:E4:D4:3E:FE:DD:25:DB:34:3F:4B:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a656ff06-dd61-4a24-a01f-a8fcac8be378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
66:e7:ef:bd:ca:0c:79:a5:85:57:e7:69:92:26:e5:b9:c3:cd:
21:1b:33:01:a4:5b:f1:4c:a5:9e:df:b8:75:e5:72:50:df:b8:
58:bc:38:ec:e6:94:89:83:03:29:ad:86:8f:bb:10:7f:49:54:
98:6e:84:3d:59:68:0c:79:1e:36:6d:40:75:43:55:83:39:4e:
4d:88:a0:5a:8e:16:a0:40:6c:27:cb:66:29:6b:3f:b7:42:85:
ab:1a:d2:44:30:5c:87:fd:7d:36:52:06:0a:1d:aa:0f:b6:de:
08:94:46:71:33:e8:90:75:f0:27:30:c4:c2:2e:97:23:91:a3:
3b:4d:21:aa:f3:25:9b:b3:00:26:b1:61:ab:fc:fc:60:eb:9e:
5d:69:7f:6f:fb:ba:85:d5:a7:1d:b8:09:94:a4:3a:38:5a:7b:
5d:52:f4:ea:8a:ce:6d:3d:63:3c:f7:91:34:43:f3:de:8e:47:
88:bb:68:04:3e:04:cf:b5:2d:25:ff:65:cf:e0:28:0a:8d:1a:
4b:c7:67:c2:5a:63:11:46:c2:94:55:bd:8c:52:1e:8a:9e:f4:
21:07:c0:23:d7:fc:d8:1a:01:45:58:18:d0:59:0d:1e:cd:aa:
a6:26:7b:50:26:1a:a9:88:2f:2e:a3:18:1f:62:a0:02:53:06:
49:73:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:13 2025 by rpki-client