Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa
File: b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa (raw, json)
Hash identifier: KOzrCp5N/sZg2A/HGQXSHvW93HDd6IQvP7K8+D4e1jo=
Subject key identifier: B3:88:88:B6:74:0E:D0:61:13:C7:49:76:CF:32:B8:18:C4:4D:97:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63BD89EE977F7439AA37870186A8C135F3628F71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa
Signing time: Wed 05 Nov 2025 00:30:13 +0000
ROA not before: Wed 05 Nov 2025 00:30:13 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.52.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bd:89:ee:97:7f:74:39:aa:37:87:01:86:a8:c1:35:f3:62:8f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:30:13 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=6abc07d7b30d2372a0b7fd97e60a7b48c2b8a72db29af06f8e98fe1524ec9be1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:6c:29:de:1b:7f:14:e3:ec:d4:68:5d:74:
4c:73:07:a8:fb:c7:2c:68:71:d9:15:19:b2:12:d5:
33:df:a0:bd:ab:04:8a:28:0f:3d:60:cc:08:7d:a0:
cc:36:d4:04:fc:ca:51:0b:43:32:e4:46:5b:08:a9:
0e:97:9f:1e:c7:e4:4a:7f:1a:83:f8:47:2a:78:56:
15:4d:74:36:7d:cc:0d:74:e0:28:34:d8:05:e3:29:
b0:4f:86:0a:d5:09:72:cb:9f:f8:c8:33:62:c1:ef:
5e:6c:96:13:fb:c2:55:c4:ad:f5:fb:35:d4:c4:9e:
11:02:91:aa:b7:4c:8d:77:55:35:fa:4a:e9:f9:54:
89:78:18:ed:ce:43:a1:e7:9a:c2:15:a6:7a:9e:f4:
eb:e9:13:2f:7a:7c:04:e7:e7:3e:2c:c1:e3:05:39:
19:d3:2c:d9:4f:7d:80:da:89:d6:e3:9c:0b:1d:3e:
08:69:32:f4:9d:9c:a7:e6:39:bd:46:85:2b:9d:5f:
64:72:a6:f4:ce:ea:87:f5:7f:17:71:44:bd:e1:e3:
a9:6a:3e:9a:29:60:d9:09:65:62:1e:6f:31:9d:9a:
8b:8e:e6:49:8c:ba:78:43:97:de:ce:77:70:8d:99:
76:bb:4f:a4:44:ff:8f:10:d0:04:bd:cf:d2:6a:b1:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:88:B6:74:0E:D0:61:13:C7:49:76:CF:32:B8:18:C4:4D:97:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0e:6e:50:37:dc:02:5b:b8:00:bc:86:de:b1:95:30:b0:d1:
1e:ca:22:70:34:4a:db:11:a6:dc:89:e0:99:d8:ab:85:5a:be:
ad:3e:8e:85:6c:33:a3:8a:2c:87:07:6a:4c:16:ed:1a:7c:7e:
62:7a:f3:04:77:99:37:16:dc:45:95:e6:de:c3:d2:c6:7b:ad:
6a:f1:43:4f:68:6e:bc:10:4d:6c:3b:8f:e9:cd:15:4d:e1:ca:
80:85:69:08:24:f9:f1:b0:78:7c:49:48:39:b7:6c:a1:68:7f:
d4:34:8d:9d:f0:fe:f3:6a:eb:a2:21:cd:16:a5:17:0d:63:b9:
42:3d:ae:96:3e:db:a2:a6:2a:33:5a:bb:16:cf:cb:24:70:17:
a9:aa:a3:5f:29:1b:3b:c4:33:ab:8e:b2:90:14:7c:6f:5b:b1:
8f:27:a2:8c:98:51:a8:e1:dd:cb:90:96:5e:ab:7f:a2:ec:b3:
a4:29:ae:ff:a8:b7:f1:e6:cd:c5:7b:d2:a1:31:d1:f2:5c:9d:
8e:61:b1:b8:67:bc:4e:5f:dd:22:0f:1b:3c:47:0a:dc:2b:ce:
c7:f6:f4:0f:cf:d5:81:5a:24:ba:71:28:c9:85:23:dc:2b:d2:
46:0e:0a:d8:72:16:5b:0d:96:06:fa:e9:90:03:26:67:0a:ad:
d1:2d:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:32 2025 by rpki-client