Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa
File: 19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa (raw, json)
Hash identifier: xs7TF8+zAQTBEp7Pj0mSywVWlWe/AlmSwoO++bSbKlo=
Subject key identifier: 50:07:53:30:0C:5C:82:BB:E7:10:5A:53:B4:EA:27:2C:A3:2F:91:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5AE6C4FE8439F932A9DF47A863E20357262F5218
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa
Signing time: Wed 29 Oct 2025 00:30:07 +0000
ROA not before: Wed 29 Oct 2025 00:30:07 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e6:c4:fe:84:39:f9:32:a9:df:47:a8:63:e2:03:57:26:2f:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:30:07 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=c83f54b88499d02ed4e0ba1991c391cfbf4b1809accfdcf37adfa77f2ebf48eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:bb:2a:ce:6c:11:f6:9f:77:22:76:52:52:
b5:ca:0a:f1:58:b4:ef:23:24:6e:a5:c1:53:51:bc:
3f:73:a0:33:17:4d:03:c1:85:3f:94:1e:d3:59:f8:
05:e1:1b:a8:c8:83:b6:f1:f4:d8:41:58:ea:29:88:
ce:8c:50:70:36:2f:4a:b4:13:99:fd:d4:c8:6c:6b:
c9:99:70:cf:2b:5f:3c:0b:53:ce:c9:ba:bc:d6:72:
17:5d:d9:c4:07:00:8f:0e:c2:df:dc:27:02:c0:19:
76:3e:77:75:ab:98:f4:15:24:86:54:99:13:00:6b:
40:cc:28:38:35:b8:51:07:a3:07:45:24:36:78:f7:
08:5e:1f:4f:63:9f:8b:61:5c:5e:d5:99:29:ff:f1:
a2:a5:e9:cc:22:d4:16:77:79:5d:66:21:4c:84:36:
b6:41:03:72:85:14:4e:81:5c:c9:91:6d:3b:af:4a:
05:1c:02:e1:97:d7:98:13:6a:5c:77:5e:5d:c8:1e:
da:53:38:be:4b:29:d9:24:72:73:1c:e1:ee:88:08:
a8:76:b9:66:34:f6:1e:1d:4e:f0:54:0d:35:f8:30:
5c:58:91:29:78:2a:ed:e8:a6:d3:c2:cd:42:b5:99:
75:cf:63:e0:3a:cc:9b:99:da:c0:75:86:7d:63:c5:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:53:30:0C:5C:82:BB:E7:10:5A:53:B4:EA:27:2C:A3:2F:91:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.141.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:21:fa:b3:66:ad:b5:a0:be:8c:a7:fd:d2:a6:2a:f2:40:0a:
88:84:2a:4e:15:97:05:f3:18:fd:b8:d8:5e:8b:fa:85:22:ac:
ce:8f:ec:fe:13:6d:dc:3f:8b:42:b9:a3:0d:8b:b4:4d:5f:0e:
6c:40:5c:7f:45:65:28:4a:09:9a:97:b0:85:da:52:de:66:f2:
a7:ba:51:01:dd:ce:28:65:12:ee:5e:b6:76:bd:92:86:77:07:
a0:50:42:26:02:8f:78:9c:2f:48:b7:1b:56:40:71:ca:46:7b:
8c:25:64:fc:d9:00:0e:bb:e3:c9:79:2a:ff:58:b4:d3:9a:e3:
83:63:0a:a7:48:99:4a:3a:7e:4c:8f:18:c6:5a:ed:c1:12:0a:
a9:55:47:7a:e0:64:45:3d:f3:cf:7a:26:83:0e:7f:48:81:0b:
20:7d:56:ec:5c:3e:0f:69:61:d0:59:13:3d:60:d7:f0:74:5b:
73:81:0d:60:35:c9:38:1e:b5:a3:bd:ee:2f:1e:69:b7:23:70:
fc:4f:f2:4d:3f:de:72:ec:d4:85:a0:ae:45:a5:b6:59:de:1f:
77:99:f7:14:ea:52:9a:90:93:4f:d1:94:02:ac:ef:99:48:86:
59:d1:78:26:10:ac:5d:b5:0d:0d:6e:bb:9b:16:e8:d6:ca:ed:
6c:4e:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:36 2025 by rpki-client