Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc17bb99-4912-4a53-ab4e-1da33e7016b5.roa
File: cc17bb99-4912-4a53-ab4e-1da33e7016b5.roa (raw, json)
Hash identifier: if6cMdMs81sBqG9ozI47+rKqaAseAIYFEzGANl5GYFE=
Subject key identifier: C4:71:BE:17:5F:18:84:14:6A:1C:D1:46:56:E8:03:CA:5F:9B:AF:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20E0BFA018A71F95A26DE2774866BBA7AEA076BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc17bb99-4912-4a53-ab4e-1da33e7016b5.roa
Signing time: Tue 21 Oct 2025 00:30:59 +0000
ROA not before: Tue 21 Oct 2025 00:30:59 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.134.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e0:bf:a0:18:a7:1f:95:a2:6d:e2:77:48:66:bb:a7:ae:a0:76:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:30:59 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=2625261ba26316c513b42c67efbef989e2846a3c8e3041b180a1050829b28c42, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:6e:f2:93:12:d6:f2:86:1f:50:08:85:bd:
21:f9:67:b5:56:1e:25:fe:8d:19:e7:c0:09:65:34:
c7:4e:5d:29:19:ac:a4:11:a4:34:ba:fe:1b:6d:84:
0d:fe:02:f0:25:de:28:dd:b0:03:30:b4:33:c6:26:
c3:08:aa:48:8d:3b:c9:52:29:7f:2d:63:8c:3b:d4:
ce:17:34:dd:e7:d7:2f:d5:f7:a4:f1:ef:39:70:8e:
1f:05:6a:fd:88:06:13:ba:40:75:f5:3e:73:1f:dc:
7c:9f:46:73:a9:38:cd:0c:d6:a3:d4:d3:cb:9a:ba:
9a:24:98:45:2b:93:9c:44:cc:c1:a7:48:91:8c:43:
27:de:2b:04:59:a5:df:4a:f3:73:71:4a:15:cb:c0:
a3:4a:42:4f:70:ee:80:63:95:e8:10:f0:0d:4a:c7:
a6:e6:a3:e6:93:20:b5:80:64:c9:e0:6b:1c:8d:f0:
25:70:c3:c0:ad:d0:9b:9b:25:e9:23:83:a7:97:8a:
3b:f4:b7:c8:e5:90:c3:de:f8:2a:7a:40:8b:f4:df:
25:b9:d2:fd:5d:a4:92:90:76:b0:09:68:42:33:52:
e9:ec:18:a2:b0:55:6a:dc:3a:8c:8d:9f:87:aa:e5:
78:0f:3c:64:dd:6d:69:4d:a1:6c:d3:ba:56:9e:b1:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:BE:17:5F:18:84:14:6A:1C:D1:46:56:E8:03:CA:5F:9B:AF:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc17bb99-4912-4a53-ab4e-1da33e7016b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.134.66.0/23
Signature Algorithm: sha256WithRSAEncryption
81:34:66:29:fd:51:ab:a4:ee:06:85:32:70:b5:6f:a5:e1:ac:
24:1e:eb:91:32:ea:86:c4:98:30:47:83:a7:0a:9e:8b:80:fd:
ce:8e:ef:0b:ec:46:c7:9e:dc:31:8f:2a:f2:4a:b9:47:9d:3c:
32:5a:35:85:ce:df:37:eb:75:aa:ab:63:4b:dd:ef:a3:c2:fa:
88:5f:8a:70:98:70:d6:82:54:f4:53:ba:49:5f:89:37:95:39:
82:86:36:b0:b1:a7:22:c6:05:e4:d4:3a:8b:ff:bc:07:35:1f:
ac:41:cf:6a:30:8b:bc:b1:db:4e:7b:e5:03:90:00:98:2d:cb:
ab:48:23:13:3a:c9:94:80:6e:0c:ed:96:59:d0:00:86:ff:2f:
b6:b3:b6:3b:91:ec:53:67:f8:07:c3:6a:89:63:6d:13:4f:8b:
53:92:84:84:20:83:e7:b7:86:a9:e3:28:68:94:36:7d:8e:81:
cc:05:95:7d:d9:7c:19:e6:62:c1:9c:41:cd:d2:a7:53:82:0c:
5f:b2:2f:9e:20:ff:70:41:88:0b:49:6c:73:2c:58:b3:2e:d4:
7a:15:2c:08:23:aa:f2:af:cc:ff:c3:5d:b3:5e:ef:3d:58:85:
6b:7b:3e:37:06:48:dd:f2:70:80:0f:a1:a0:92:54:af:a6:00:
3a:4c:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:55 2025 by rpki-client