Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/179f85e0-4165-4fb8-9967-a7f2c90b4cff.roa
File: 179f85e0-4165-4fb8-9967-a7f2c90b4cff.roa (raw, json)
Hash identifier: xkgScVnO3UDvcqs6qAgJF1DxkeMgBzHZNFjZKjQFOBs=
Subject key identifier: C0:6C:BA:07:3D:25:04:90:99:95:8F:AF:4D:2C:54:1A:D4:70:50:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C86F3FCAA5B4F8D9A43A8E7F11853D63E24726D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/179f85e0-4165-4fb8-9967-a7f2c90b4cff.roa
Signing time: Fri 31 Oct 2025 20:51:48 +0000
ROA not before: Fri 31 Oct 2025 20:51:48 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:86:f3:fc:aa:5b:4f:8d:9a:43:a8:e7:f1:18:53:d6:3e:24:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 20:51:48 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=179a3e7d5b39fae8f60df2f42fc975d8adf7e72b1ada4b8447dd0677e9dd4f47, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:d5:85:94:51:11:98:1f:87:1e:e7:a8:56:
65:6d:e9:8e:b1:17:6f:2b:d5:97:31:5f:e6:1d:0f:
ac:9e:7d:61:86:cd:92:40:00:2f:2f:0b:85:31:35:
2a:46:0b:d3:c4:ed:2c:f3:af:bd:02:d8:c7:d5:79:
f6:1d:19:21:82:26:84:78:31:50:c1:10:d6:76:b5:
dc:60:cb:01:33:38:53:9f:03:8d:43:dd:29:e6:aa:
2c:4d:5e:45:ba:de:c2:6a:8a:a5:00:84:25:fe:88:
42:31:c3:6c:6f:ba:58:dd:db:ce:38:1d:cf:9a:4e:
dd:64:12:af:45:78:de:c2:f7:40:fb:9d:b2:75:55:
91:40:5f:60:7a:50:7e:68:9f:49:27:f1:f5:5f:1d:
16:0c:e0:73:f7:f5:37:5c:c8:8c:8c:e3:4b:8a:e7:
c8:e3:09:c6:86:eb:2b:33:2b:7f:9d:98:69:c0:78:
97:87:bc:4e:02:6a:af:6e:14:1e:be:aa:7e:b6:17:
88:1e:e8:11:87:c6:23:83:91:9d:4c:33:80:c7:3e:
cf:d5:a1:5c:3c:80:48:d6:7a:a1:0f:7a:77:3f:71:
36:9b:48:f9:3d:ac:01:98:6c:45:d0:40:39:a5:24:
8a:94:b9:87:19:ec:e7:ce:f4:d5:89:c2:49:db:c4:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:BA:07:3D:25:04:90:99:95:8F:AF:4D:2C:54:1A:D4:70:50:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/179f85e0-4165-4fb8-9967-a7f2c90b4cff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.120.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:14:a7:ea:c8:8b:c5:11:3d:79:79:05:8e:32:3f:e5:22:38:
89:1b:49:69:d1:02:14:2d:e2:9b:84:d2:cc:4b:3b:1e:79:9c:
e0:13:21:a9:d4:fb:b6:36:9f:95:2a:6f:53:12:81:b7:85:c4:
e8:f3:79:c6:56:c6:55:b4:71:6a:02:91:0b:b9:45:fd:27:f5:
61:26:59:69:67:c2:fc:a8:05:0d:4f:24:10:e7:41:3e:ff:98:
e4:3c:6a:49:41:bb:20:67:4c:77:5b:24:3b:1e:83:1d:ff:5d:
8e:9b:62:21:1e:0c:0a:1f:60:d6:ae:89:e3:d9:1d:6c:2d:d8:
fc:3f:99:be:e3:aa:c8:50:6c:73:49:de:e0:c2:fb:7d:f7:8d:
7f:24:e5:e5:47:ba:f8:35:8b:9d:70:80:92:b5:4e:95:05:20:
d9:a1:bd:8c:c3:a5:f7:61:c7:4c:b9:a0:92:05:24:4d:80:f1:
ec:5a:a0:95:54:13:9e:39:83:ad:68:14:63:cb:8c:b8:63:5d:
56:4a:ee:76:e1:5d:76:94:82:fb:ad:8c:b8:80:a1:79:a4:f4:
04:4b:ec:dd:23:6a:1f:fa:73:7e:69:b5:1e:9e:5e:04:80:db:
7e:1c:47:26:7c:69:2a:65:b4:ad:66:00:af:28:6c:f5:91:7e:
09:80:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:26 2025 by rpki-client