Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa
File: 0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa (raw, json)
Hash identifier: wJ1TRiwocBEYiumgIHrUVQ1I5w8EiVOwZdX7997zaNw=
Subject key identifier: 02:27:42:A9:E1:DC:38:5B:2E:A3:22:A9:B7:26:79:EF:EE:56:86:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28EC4FDF72CF1B6AEC4B387B5E982B3E9425A806
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa
Signing time: Wed 05 Nov 2025 00:21:26 +0000
ROA not before: Wed 05 Nov 2025 00:21:26 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.21.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ec:4f:df:72:cf:1b:6a:ec:4b:38:7b:5e:98:2b:3e:94:25:a8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:21:26 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=1dc1f5885904658512a04486949115cc372c28a474d80bcc72966138f69bbeec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:30:94:e9:77:a3:b5:b8:9c:a0:84:f1:94:
6a:89:b9:cb:ef:d6:cf:c1:61:e0:01:ac:00:d4:b9:
9c:5c:08:51:da:b9:0d:0b:3c:45:32:47:b1:9f:c3:
31:60:50:df:1c:c1:16:75:a4:fb:17:00:44:bf:d7:
16:c4:7c:db:bb:d1:b9:a8:ce:09:92:02:38:dd:e3:
18:b1:2a:c6:81:27:a4:c8:2a:92:17:1b:54:e8:31:
b5:c3:c5:16:14:f6:60:d9:50:22:2a:79:e2:f4:4c:
78:18:85:f6:c4:8b:3b:d4:06:84:bc:0b:0a:01:ed:
65:1a:86:cb:f6:59:62:ac:55:3a:12:7d:69:4b:a7:
a4:53:94:96:94:53:37:fb:ce:93:ae:1c:56:39:60:
06:cf:a7:c0:15:a0:9d:2c:8a:54:03:c5:7e:fc:15:
b5:2f:0c:d5:be:90:53:14:82:3c:d3:83:51:b5:fc:
31:08:f2:e1:70:6d:69:e1:ef:65:c7:65:77:47:1a:
d9:ee:5c:36:f3:81:81:8a:03:73:6b:74:d8:c6:c0:
51:ee:17:d6:26:4a:b5:75:10:de:02:4c:f9:78:31:
da:ed:55:93:8f:76:ef:64:72:78:07:af:ab:cd:de:
4f:56:ef:fc:d8:94:cd:ba:2e:20:fa:26:02:98:cc:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:42:A9:E1:DC:38:5B:2E:A3:22:A9:B7:26:79:EF:EE:56:86:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d9e1a10-484f-4c7b-9ceb-ea04bc5f5ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.21.212.0/22
Signature Algorithm: sha256WithRSAEncryption
76:24:5b:53:9b:9d:2a:95:34:fb:cc:d6:ed:ac:85:03:a3:f4:
ee:71:36:ac:e7:9f:b2:85:54:5d:50:53:83:de:87:b0:68:e5:
4b:00:e1:3f:73:db:15:5d:9e:87:db:15:b6:ca:e2:3a:fe:d5:
85:c5:6d:fc:63:1a:12:2e:f9:4d:cf:ed:1b:77:e5:a7:a6:1b:
16:63:8b:08:31:50:66:51:6d:6c:62:6f:11:b9:46:0e:72:05:
1d:66:4f:db:ae:b9:8b:54:54:00:73:43:aa:62:c8:9e:7c:e9:
3c:c2:fd:78:c6:6b:b4:cd:03:63:ba:09:ef:74:66:c4:de:73:
f2:d8:d6:7b:d5:71:cf:21:9b:66:27:29:a8:ab:85:26:4f:eb:
e2:f8:5d:7f:8b:e8:dc:74:44:b9:58:08:99:3e:13:bd:3a:81:
e2:32:72:86:f3:8d:fd:0a:ab:b4:3a:84:19:cf:1c:27:34:a2:
64:bd:1b:a9:25:77:e5:e0:da:91:8f:35:1f:8e:fc:1b:b9:93:
ab:fe:33:d6:23:25:76:3e:96:7b:e4:ff:2c:14:56:79:75:aa:
79:ea:e1:70:59:ee:f5:89:4a:92:36:6a:6b:a7:af:e2:3f:6d:
34:e1:55:ae:c0:28:c4:7a:2a:3e:50:40:14:bf:65:d1:d9:6a:
d8:dd:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:43 2025 by rpki-client