Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05c4765b-4799-4565-ad48-4904ecc48754.roa
File: 05c4765b-4799-4565-ad48-4904ecc48754.roa (raw, json)
Hash identifier: vA+DvrWye1wl/nBbIF3xGrWHgDhUzJ7BT5Gkg0oMOMU=
Subject key identifier: FA:A3:6B:27:7E:57:32:26:A0:8A:45:09:FF:4F:09:C7:53:7A:A7:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F856978FE5A166CFC76BDC278610406554C6619
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05c4765b-4799-4565-ad48-4904ecc48754.roa
Signing time: Wed 05 Nov 2025 00:20:07 +0000
ROA not before: Wed 05 Nov 2025 00:20:07 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.87.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:85:69:78:fe:5a:16:6c:fc:76:bd:c2:78:61:04:06:55:4c:66:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:20:07 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=3c8377da8154b476a168c6a5ad547c5323dc03e912bb8980efd9fd36b6ccd48f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:61:8f:26:dd:57:ed:a4:21:a8:36:5b:a1:
41:78:ac:2e:da:0b:dc:4b:97:ed:a1:b6:d2:e9:04:
00:3c:60:19:54:6b:e8:f9:fd:b9:eb:33:63:f7:4a:
5c:c0:74:38:25:66:90:4f:f4:2e:2e:cb:3a:4e:14:
91:f3:bd:9d:36:35:41:5e:d2:2c:71:2c:be:6c:9e:
a5:7a:69:fc:79:ba:7c:8c:06:09:2a:be:8d:83:57:
93:2b:57:9b:ff:57:ac:a6:9e:97:3c:40:99:c3:3b:
b9:99:70:57:99:3f:7c:5c:34:82:8d:13:53:7c:7d:
d2:fd:38:51:b7:3c:6a:30:42:a6:36:f0:8d:6f:18:
32:29:f1:50:84:ee:3c:a7:10:8c:a8:87:79:1b:21:
91:f5:78:06:2c:fc:a4:1d:b5:e2:85:1b:80:fc:2c:
76:fe:8a:c3:44:32:9d:c2:48:7b:78:7c:e4:64:3b:
72:08:1e:4d:f2:07:3f:af:ca:87:c3:e4:9e:84:39:
4b:79:71:69:48:66:25:5b:1e:08:05:ef:e8:5e:e5:
23:57:a9:0e:db:38:ce:89:15:5f:22:8a:3e:be:ac:
30:40:5a:d0:8c:8f:3d:b4:20:b3:07:6c:61:af:d9:
c6:36:bf:1c:b6:b6:69:16:07:d8:e7:37:00:09:a5:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:6B:27:7E:57:32:26:A0:8A:45:09:FF:4F:09:C7:53:7A:A7:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05c4765b-4799-4565-ad48-4904ecc48754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.87.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:0d:63:6e:65:27:e5:f3:f6:2f:dd:86:0a:8f:07:98:54:b4:
b9:53:c1:15:c0:ad:49:a3:58:ab:a7:a1:3f:c4:48:be:38:c4:
67:9c:8a:c1:4d:2e:53:72:ab:93:d0:5f:54:4d:3d:ee:93:e4:
64:45:70:a2:c5:21:97:62:de:3a:43:fc:73:23:39:a0:a0:38:
19:3f:8e:ac:0b:67:1e:db:73:8d:e2:a7:cf:68:15:5b:02:17:
ac:31:c5:0f:18:8b:36:16:1f:0b:8f:6f:a8:b1:ba:17:01:d5:
45:ac:51:64:68:7a:01:00:81:fe:f3:b5:47:71:a1:86:8a:1a:
81:11:6b:5b:fb:5c:c1:16:97:a1:e2:5a:29:3b:84:e7:9e:c1:
d1:e7:a1:7c:f9:6a:75:eb:65:53:56:47:86:fd:af:3a:3d:a4:
b7:c6:96:96:87:a8:0d:3c:20:f5:83:d4:46:b0:ea:a6:72:4a:
6b:b9:f3:11:61:1e:02:55:e8:f3:72:4e:04:00:c0:3b:bb:1b:
3b:6e:4c:a7:ed:47:86:b0:32:9b:d3:0f:bb:4e:5f:f9:b4:2e:
bd:7c:07:5a:da:1b:55:f4:99:b5:05:cd:fe:d9:23:a3:a7:02:
b2:bc:d4:d1:1c:4f:bf:a5:40:1c:bf:f0:ad:a7:b2:df:aa:a4:
0b:16:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:26 2025 by rpki-client