Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
File: 0646c84a-66ad-4774-8199-e2472141283a.roa (raw, json)
Hash identifier: FpKkvmHmGgsddbCf/OfYs+DSroYLqInv0X4h05QLqMk=
Subject key identifier: 9F:4B:68:4E:B3:E3:0C:37:2E:16:5F:ED:6A:DD:23:EC:EB:17:0B:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D28231AA54019C723C0A8760DFFCF81B0EF82F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
Signing time: Sat 25 Oct 2025 00:10:37 +0000
ROA not before: Sat 25 Oct 2025 00:10:37 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 155.254.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:28:23:1a:a5:40:19:c7:23:c0:a8:76:0d:ff:cf:81:b0:ef:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:10:37 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=8d08be9409e251ee500e0111b43111a7c242801e1a84f54bb21b70a78187f299, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:de:5e:1e:45:8d:b0:1c:be:07:1e:35:de:
02:8f:1c:b5:0a:c4:96:37:8a:a4:ce:29:c6:87:a5:
1f:de:bf:9a:23:5d:7a:a2:3f:77:9c:e2:ab:c1:73:
0e:fa:c4:4f:b3:1a:43:06:39:40:46:58:4c:07:d9:
78:b4:3e:25:dd:2d:e4:c5:4f:20:f4:ef:eb:b6:0b:
89:f7:81:f4:d8:a4:b8:db:ca:48:f2:22:ec:17:75:
3a:b0:7b:1e:73:33:73:b9:a9:65:ac:6f:38:7b:6c:
70:ea:65:14:a7:c2:de:78:c9:e3:22:5f:87:4c:5b:
8f:96:df:ea:5b:4e:92:17:ad:83:9f:45:07:be:4f:
df:02:ad:cf:57:61:81:e1:a4:7e:a9:c0:3d:f5:ee:
43:70:f1:94:26:f2:84:bc:67:cb:87:e1:d7:af:62:
13:70:f4:9a:6a:34:8a:68:18:b4:d7:13:7d:48:3f:
6c:0e:2f:1f:58:e9:24:4f:56:d2:8b:02:40:77:e7:
6b:8b:b9:7a:cc:ea:3c:4f:be:1d:9d:7a:82:57:9c:
80:60:b4:ae:68:17:06:df:e3:e4:c0:09:c6:6f:4f:
c0:c6:cb:b7:e0:64:a9:8e:fe:79:68:1f:f0:d9:6f:
e2:a2:3c:f7:28:29:14:cd:22:ba:e5:60:0a:20:18:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:68:4E:B3:E3:0C:37:2E:16:5F:ED:6A:DD:23:EC:EB:17:0B:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.160.0/19
Signature Algorithm: sha256WithRSAEncryption
44:f3:4e:bf:f4:4f:53:1c:40:01:90:ba:c0:6a:e0:a5:11:68:
cc:5a:25:5d:3b:09:e0:68:d0:c0:81:5e:24:59:f4:53:eb:06:
45:c7:6c:b9:05:02:e7:28:2c:c3:23:7d:5b:c8:40:72:b6:68:
00:c5:b4:95:65:7e:ed:c6:82:b4:cf:c5:26:1d:72:17:e1:e1:
1e:e6:37:93:54:93:a3:bc:06:06:bf:c1:df:ff:96:ac:94:fb:
9c:c9:52:c7:38:cf:51:88:d2:d2:b7:7d:87:57:0a:72:e1:26:
04:e8:82:eb:2e:52:71:46:ba:03:b3:da:10:51:59:4e:6c:96:
76:33:46:8f:94:fc:9d:8b:6b:d3:87:4a:e6:df:53:6d:ae:c0:
22:66:69:a5:03:85:28:9b:40:7c:37:2f:ca:b9:2c:d2:bd:87:
5d:20:04:e2:17:8d:d2:39:11:3e:b2:b5:c7:08:53:5a:44:fa:
19:ff:23:85:43:9e:54:c1:c5:4f:7f:77:0f:c5:38:28:8c:06:
a9:8c:f9:80:f7:4a:cc:01:8f:bc:28:30:73:84:83:00:b5:a6:
3f:f1:1f:a0:20:1f:ee:af:75:b6:e8:96:96:9b:b6:43:97:e8:
df:53:45:ac:26:eb:73:14:b1:f7:c8:84:db:8b:08:f8:2a:26:
35:bf:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:28 2025 by rpki-client