Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa
File: fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa (raw, json)
Hash identifier: ni9naCJUS4nP80J5SpkTF8TWJlpQ5fW+7x73chJV72I=
Subject key identifier: 1C:76:E9:12:C9:4F:10:73:B3:5F:17:91:11:CA:3E:4E:7C:04:0C:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65897759C8F81D191F273FDD9EF1C5F7A82B9A33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa
Signing time: Tue 28 Oct 2025 00:50:10 +0000
ROA not before: Tue 28 Oct 2025 00:50:10 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 64.252.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:89:77:59:c8:f8:1d:19:1f:27:3f:dd:9e:f1:c5:f7:a8:2b:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:50:10 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=d76b6a9f30b0db6084b09cb117a4a5d685c4cdbb8e23fa67d7eeecd2d68509d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:74:89:62:57:93:a3:a5:5c:e9:31:d9:cb:
94:b6:a1:5b:66:f8:60:6f:86:29:0c:26:9c:68:75:
ce:8c:14:0d:d7:8c:2c:e9:82:7a:b4:cd:6b:b1:65:
bd:5d:e0:67:7f:53:f1:f3:cc:4c:65:32:a4:c8:f9:
66:26:8a:28:f8:de:66:77:72:98:e8:51:f2:df:d1:
02:55:fe:59:8b:97:06:c1:90:d4:ba:e7:d2:53:8e:
9e:41:33:09:93:ea:a2:53:98:1f:fa:26:bb:a8:e0:
81:15:17:54:bd:e2:8c:8b:84:9f:87:f0:9a:14:36:
94:43:76:fc:25:81:5e:71:98:02:3f:92:2d:fa:17:
16:eb:29:f7:a6:c7:ec:63:70:4e:45:f7:71:20:82:
58:72:49:6c:a7:e0:fc:8d:52:82:07:91:fd:22:6a:
ff:f1:a1:26:b8:24:e9:ce:a0:f8:65:0d:03:8d:2f:
94:23:6e:0e:a6:d7:3c:e2:fc:78:5c:51:e9:ec:e5:
da:d1:5d:27:74:ca:2f:08:f1:f5:6b:4d:08:57:f4:
fd:8e:f9:d8:75:e0:6b:23:b9:e5:8f:79:d1:b4:6f:
d8:46:22:ff:33:6c:ad:25:81:4b:65:8e:64:53:d1:
ca:a6:9b:37:aa:fe:6a:e0:d3:80:64:1d:1c:43:08:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:E9:12:C9:4F:10:73:B3:5F:17:91:11:CA:3E:4E:7C:04:0C:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e7:33:cc:bf:ad:73:43:cb:37:80:53:3a:8e:f4:ad:75:be:
6b:ad:a4:69:0b:aa:90:a8:ca:2f:d8:7a:8d:c2:ef:d9:0b:74:
6e:91:00:0d:c9:96:c3:c0:32:fa:75:6d:a2:57:1c:a6:ca:87:
30:b0:b8:b9:64:df:bc:a1:31:78:f3:24:31:37:1f:c1:63:d0:
17:f8:63:ea:24:a1:5e:ed:af:ab:4a:83:94:7a:ae:9a:2d:91:
7d:6f:f6:e7:e1:05:fc:66:44:c2:11:fd:07:d5:66:67:2b:b2:
be:ac:b5:08:19:78:e8:04:a7:b4:95:77:fe:bf:ab:ac:8f:20:
81:9e:c2:21:5d:fe:69:7e:57:a1:23:7f:c5:71:f4:ed:67:bd:
c3:ae:d6:d7:11:8f:0a:a0:13:00:e8:db:53:34:f6:83:27:e4:
9f:57:1f:cd:69:23:4d:c5:ca:d3:56:05:31:b3:eb:29:e4:29:
72:c1:8b:0a:48:5f:7c:16:c2:6a:53:c4:48:32:27:a9:05:91:
3e:64:f5:59:fa:d8:88:67:db:6b:41:01:c7:3f:33:f0:d2:34:
ae:17:ea:2e:2c:86:6f:b1:e0:8d:e3:4d:a0:ce:6a:de:1e:a9:
06:8e:2b:cd:4a:d7:70:43:47:5a:ec:09:73:aa:a2:85:25:c4:
0e:0b:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:45 2025 by rpki-client