Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa
File: ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa (raw, json)
Hash identifier: iB3abJZOrMTDQprV/gjxzpB0kA/8fvL6SXGRagMekig=
Subject key identifier: EA:94:47:FC:48:B3:3B:4F:07:AB:A8:13:B7:02:C3:24:06:2F:EC:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70B6E91B3C6788F17C03F6A657762D0B6F96DAB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa
Signing time: Sun 26 Oct 2025 00:01:02 +0000
ROA not before: Sun 26 Oct 2025 00:01:02 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.159.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b6:e9:1b:3c:67:88:f1:7c:03:f6:a6:57:76:2d:0b:6f:96:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:01:02 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=aeaae8bf41e08d9cda4199c78a09e1eb5faeabd6c3a9d503f04530fb7a68eb4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:29:c2:21:43:ca:20:a7:c0:f6:64:88:2f:
19:d4:8c:a3:fa:32:4d:9d:39:49:69:d0:e2:40:e5:
41:c1:4c:cb:48:50:cd:cc:d5:5b:99:05:dd:f0:56:
7f:15:37:70:ff:71:99:33:1d:e7:22:b5:63:d7:56:
f3:53:7c:71:91:c2:9a:32:c3:3a:38:29:17:82:ff:
0c:e0:ce:08:18:d0:a1:e0:4f:82:24:bd:7a:7e:fd:
89:dc:b4:6c:74:13:79:ee:d7:81:bd:42:26:ea:96:
c3:bf:ae:11:1f:db:e5:d3:f9:25:3e:06:ef:c3:17:
30:c1:93:b9:99:35:a1:ff:39:7c:1b:f2:5f:24:73:
39:c4:05:1f:d7:e0:dd:12:96:f5:1f:fa:29:0b:45:
fe:4b:64:5c:bb:b6:0c:de:52:7f:b0:e5:d3:b0:5b:
44:e5:b2:8d:b4:7b:b2:73:1f:73:fb:de:01:e3:fd:
4f:56:b3:72:5a:9c:75:e7:71:0e:23:10:d8:12:4b:
f5:0d:e4:b8:1f:8b:83:2c:e7:d4:bf:f6:78:cf:9a:
1b:fa:e4:2e:67:ce:7a:d7:e7:84:4f:1c:e7:cf:25:
08:4b:55:11:f3:06:3c:2f:7b:48:a5:be:9d:bb:73:
2c:01:01:66:f3:94:96:96:3a:bb:36:4f:90:d3:1e:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:47:FC:48:B3:3B:4F:07:AB:A8:13:B7:02:C3:24:06:2F:EC:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffdc0c5a-e9b4-4cde-81e7-7126a9bb4a1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.159.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:10:46:c8:31:1f:e0:be:e6:6e:36:af:5c:37:31:e2:ff:86:
68:e8:61:40:a8:d3:79:3c:eb:ab:4b:cb:60:43:8b:72:38:4a:
f8:86:d4:80:4d:32:53:6c:8f:5a:e8:f6:f8:ec:83:9f:90:78:
8a:50:fe:8b:d3:8b:d3:4f:f3:91:d0:40:67:f1:b5:1c:4b:a8:
cb:b5:2c:1b:5a:03:09:00:bf:51:5d:3f:2c:c1:d0:45:3e:f3:
5a:c2:ec:e1:1b:70:76:f1:95:97:4a:07:e6:87:30:d2:c0:a4:
a5:39:b3:00:35:1f:07:fa:96:dd:af:55:4f:46:eb:85:6a:85:
57:08:98:08:16:a7:03:d1:bf:57:71:61:61:7e:33:3c:e7:7b:
a2:1f:32:a2:0a:e3:19:69:7f:08:31:52:40:b4:bf:46:3f:72:
56:26:2f:02:6b:ab:53:b3:94:bb:b5:50:8c:53:2f:a6:b9:fa:
f5:ac:e6:9e:c3:e9:92:e3:8a:d4:47:dc:ab:18:17:38:8c:90:
4a:a7:4e:f8:d1:a7:ba:f8:64:d0:eb:00:33:75:23:b5:d2:57:
5b:16:21:4f:d4:a5:5a:14:f9:32:4c:f1:3d:21:52:6f:2e:89:
81:df:f8:42:f6:c8:1f:eb:cf:1a:1e:77:9c:e0:6a:6b:c3:c5:
b3:03:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:01 2025 by rpki-client