Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
File: 18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa (raw, json)
Hash identifier: BU1hsLT9qQzpzeSVPvtdrzoKSpxecxfcYqflftNbC0E=
Subject key identifier: CB:B6:95:B9:3A:D6:52:73:16:EC:19:E3:0B:A5:96:10:86:FF:CF:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C96BEB421882CA30E92ED925889570833075D7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
Signing time: Sat 01 Nov 2025 00:30:53 +0000
ROA not before: Sat 01 Nov 2025 00:30:53 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 184.73.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:96:be:b4:21:88:2c:a3:0e:92:ed:92:58:89:57:08:33:07:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:30:53 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=2292baababa0b76148c246a1b2386f829bc0f9a38f72a083cf3c01b0bf7c3d3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4a:ff:e2:0e:bb:82:08:99:0a:1f:37:4e:96:
4a:11:52:ec:d9:be:9e:e5:91:64:23:65:87:c3:6d:
f7:a8:67:b1:d2:2b:81:ea:42:09:61:35:d1:2f:96:
c6:f6:d3:15:bd:e4:5d:94:03:f6:ed:79:32:f0:1e:
f2:8a:49:54:79:59:22:a8:92:7b:72:01:9c:24:b9:
07:90:29:23:a4:99:97:9d:3d:a1:77:ba:83:c7:a1:
3a:ac:b5:5d:6c:d5:a4:9f:8b:34:bc:04:9e:74:1d:
dc:0b:5f:5b:93:ce:6e:04:46:57:32:6c:f2:5e:19:
b0:01:2f:0a:15:6f:0f:aa:55:fb:71:71:48:d2:1d:
e8:da:da:f8:9e:50:a7:8b:7e:e9:55:b7:24:ce:0f:
8d:bd:26:00:b5:a8:98:7b:7e:96:98:25:dd:dd:29:
ef:44:83:f3:1a:bf:b2:84:98:3a:36:7a:02:6c:4c:
a8:7c:0b:20:c4:1a:6b:f5:0a:91:cd:99:4c:87:12:
e1:e5:d6:e0:7d:30:3b:1b:b4:1b:50:66:ae:c9:01:
d3:a7:52:65:bb:27:7f:d9:7a:44:8f:85:97:ed:95:
dd:07:0f:1e:11:8c:0a:8f:7f:1d:13:18:88:30:e4:
87:24:a6:b3:85:ff:c2:0e:34:53:31:f6:ae:2a:b3:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:95:B9:3A:D6:52:73:16:EC:19:E3:0B:A5:96:10:86:FF:CF:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.73.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b1:3d:2e:ea:30:d2:2c:d6:2c:7e:80:6c:21:17:a4:0e:2e:e3:
c9:58:f7:4e:3f:45:1c:9e:39:e0:37:b9:1b:83:3c:08:67:ac:
e5:2f:c2:9b:e9:09:eb:92:36:ca:b0:de:40:04:13:5b:a3:ca:
8a:e5:31:87:29:45:4f:51:6b:e5:73:c5:d5:80:84:db:b9:77:
fa:6b:64:2e:5b:21:ab:70:fa:fa:b8:13:71:c9:1c:be:9c:71:
a0:4c:ba:a6:63:87:f4:74:4e:43:95:17:c0:c8:04:f8:bb:ce:
ee:dc:6b:2a:4e:7a:85:fe:77:91:48:40:c2:1b:34:1b:47:e7:
04:5d:1b:4d:f8:f6:5b:68:27:b2:93:89:c4:a5:62:b4:46:7f:
ae:b1:44:b8:50:57:9a:1d:e3:af:77:6c:9a:06:d7:6f:26:ac:
ee:8c:da:ce:16:71:e8:5e:31:a1:69:65:d3:ce:d5:ba:dd:27:
13:8e:dc:e1:7d:59:61:1a:10:06:77:a7:00:c6:a6:f2:1b:62:
1c:61:a6:6b:b7:07:e1:db:33:3a:57:fd:8d:3e:ab:cb:9c:20:
ba:db:2e:25:20:f0:77:bc:1e:38:91:d2:14:52:dd:85:1e:ea:
0d:e1:20:3a:6f:cf:49:0a:a2:46:eb:b5:50:e8:45:60:c1:40:
57:31:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:46 2025 by rpki-client