Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa
File: cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa (raw, json)
Hash identifier: mcFDsT0OKrHMxVPmBYeknRlaPZ5TbSbXwz5vzHBkXTA=
Subject key identifier: B3:1F:08:CC:C4:A8:0A:0A:78:9E:67:15:B3:A0:53:64:A0:22:BF:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64D40937A25B26C6344249C6BFB0B76A97C9D687
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa
Signing time: Sun 26 Oct 2025 00:00:01 +0000
ROA not before: Sun 26 Oct 2025 00:00:01 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.134.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d4:09:37:a2:5b:26:c6:34:42:49:c6:bf:b0:b7:6a:97:c9:d6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:00:01 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=e59771be09d4f2275ef86e63a5513a08cda84c74fabeb61f65e048e059db6871, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:6f:04:24:86:d5:de:c5:50:43:09:42:38:
5b:aa:38:42:af:d1:c3:9d:72:a3:3d:35:7e:ee:e0:
92:e5:ca:77:a1:d9:7d:6a:94:46:34:15:f3:ec:7d:
df:1c:9a:a9:e8:df:7f:4a:a4:7d:4e:06:64:ba:25:
ad:84:76:bd:df:6f:ee:37:46:24:76:3a:26:45:dd:
b7:ea:26:98:dd:6a:54:6a:71:ff:ca:d0:48:37:3b:
56:db:43:88:d5:a2:ba:d2:d6:2d:d3:55:ce:51:fb:
57:8f:e8:3b:96:30:41:cc:f3:87:64:49:11:9f:b6:
1a:21:04:77:43:4e:73:3b:f0:09:a4:64:10:72:81:
32:53:10:53:ec:f4:00:6f:fc:0f:7b:61:24:b3:a5:
77:0f:e6:bf:f9:3b:07:0c:40:c0:34:de:03:98:ca:
1a:cb:0c:f0:8e:58:dc:6a:61:df:24:f9:47:49:81:
5e:10:db:64:85:ce:c0:43:da:8b:02:c0:7e:b6:e1:
64:dd:21:5a:36:af:67:72:bf:08:a1:0b:1a:a5:eb:
b1:50:d7:93:03:1e:66:f6:b8:75:f6:d8:e3:e4:6e:
eb:df:81:b5:e8:00:31:2f:dc:be:66:40:b3:dd:14:
e5:65:03:6b:ce:ae:8e:93:12:6b:b7:3f:f0:5a:a2:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:08:CC:C4:A8:0A:0A:78:9E:67:15:B3:A0:53:64:A0:22:BF:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.134.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:a7:b8:35:4e:07:f1:72:20:b1:6a:68:57:b8:71:d2:ce:88:
9a:5b:16:76:34:10:f8:b4:b0:4e:c0:1f:ab:f8:25:bd:b4:9a:
d2:7c:36:7e:c7:6d:8b:8d:9d:c8:77:a1:79:d2:3f:b9:e7:7d:
5e:f9:27:8c:30:af:df:25:d7:47:a5:98:15:49:3f:58:5b:ca:
1d:41:30:3c:7f:e5:14:16:b0:69:0a:2e:46:99:e9:b9:7f:84:
4b:8c:79:0f:83:e7:78:64:a6:0a:69:0f:fc:6a:b1:42:f8:d1:
93:53:32:00:af:4a:2d:8a:84:84:f6:37:63:4d:ae:8c:96:9e:
c9:8e:9a:27:70:96:ba:d6:0e:07:11:95:ea:a5:d1:8c:37:fd:
36:89:bc:de:99:bf:00:89:d9:ea:97:cb:44:96:35:07:16:9e:
a1:ec:0f:77:e7:07:1a:37:70:9b:b3:c3:e0:0f:d9:4f:be:bf:
de:ed:5c:29:e6:16:f2:2d:03:cf:aa:48:a3:ce:94:40:82:85:
fa:49:53:bd:7b:8c:f7:f8:4d:28:a2:e9:7b:11:f6:16:03:54:
2d:d8:e0:19:d9:5c:0c:f4:31:97:87:5b:b5:73:a9:33:f4:bb:
db:a5:c7:56:8c:2a:3b:3d:b9:82:6a:ce:67:81:c4:fb:f9:b7:
be:22:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:11 2025 by rpki-client