Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2533bbb0-6485-4989-87f4-7489b9a3bc49.roa
File: 2533bbb0-6485-4989-87f4-7489b9a3bc49.roa (raw, json)
Hash identifier: LVhPYZh6kdX8YI/JpaIZxoWee0MJzId/fhU9Nn6RKeg=
Subject key identifier: E2:AF:AE:68:71:C8:75:D8:7F:0A:61:E9:FC:28:3B:25:6B:F8:B0:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4692F9C466B58DD91CDE1B2BFFC8D66383472F35
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2533bbb0-6485-4989-87f4-7489b9a3bc49.roa
Signing time: Tue 28 Oct 2025 00:00:12 +0000
ROA not before: Tue 28 Oct 2025 00:00:12 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:92:f9:c4:66:b5:8d:d9:1c:de:1b:2b:ff:c8:d6:63:83:47:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:00:12 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=09285de789388c7bdb26fcbc6b0f4b5615352b8be4d728fa397b65ba1f5ab47c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:ff:65:4c:82:c6:51:9f:a8:c3:86:a7:e6:
04:2e:c3:e2:4d:32:6b:8d:47:ae:b0:70:2f:54:71:
10:6c:cd:32:07:fc:5d:f0:4c:48:c3:ce:77:6a:8a:
b1:01:f0:73:2e:67:db:0e:5a:29:3a:b6:0b:32:05:
89:5e:db:74:0c:47:ca:22:94:9b:bb:29:c6:75:c4:
09:a5:ac:00:18:5e:f1:7e:34:6b:40:30:77:9f:38:
58:4f:9a:91:4f:22:5d:bd:1f:64:c1:cd:89:08:27:
e1:c7:c6:2e:dc:5f:b7:22:41:3a:12:dd:10:a6:14:
06:f6:26:09:bd:88:81:31:94:da:1b:f8:35:09:d0:
5f:fe:23:28:30:fd:79:93:6c:9e:d1:be:3f:9a:45:
77:85:4a:a8:4a:86:6f:48:66:5a:46:43:c0:8e:e2:
7d:e1:5a:70:32:ed:0a:56:41:d9:6f:2b:8d:87:c1:
a6:dd:17:40:d7:05:4f:56:76:b7:0d:d0:fe:70:ad:
bd:04:23:d3:cb:af:95:73:46:f8:30:17:31:ae:0e:
74:ea:12:3e:9f:7e:c7:4f:71:9d:29:1c:88:32:08:
af:8b:4b:eb:7b:40:75:8b:2c:8a:20:2a:c7:1d:60:
d1:02:1c:13:89:b1:b6:14:b9:f2:6e:5e:af:f1:fd:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:AE:68:71:C8:75:D8:7F:0A:61:E9:FC:28:3B:25:6B:F8:B0:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2533bbb0-6485-4989-87f4-7489b9a3bc49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.152.0/21
Signature Algorithm: sha256WithRSAEncryption
00:e4:22:04:7e:9e:a0:60:c6:67:4f:99:42:88:06:f7:95:a4:
5f:f9:71:5d:7f:d1:95:37:62:4d:0c:0e:3d:4f:11:3c:c7:90:
d4:08:9f:fc:02:1c:2d:42:73:88:6a:6a:a1:91:fe:73:fa:9e:
d8:3e:d7:84:43:8d:55:81:60:71:88:dd:5b:66:a2:c4:d0:d7:
ae:5b:df:55:e8:83:4f:8c:60:69:c6:aa:19:af:26:0f:23:a6:
40:3a:b5:f3:f1:fa:b6:5e:5d:6e:0b:11:2d:fc:ee:12:32:31:
13:a0:79:19:d9:b8:31:7c:3b:b9:41:17:10:4d:6e:6f:ea:a2:
8a:ee:51:0b:5b:8a:42:1c:cc:13:a5:2a:2a:70:f4:f8:5a:f1:
d6:bf:15:8b:55:53:55:65:72:3d:bf:5d:74:cb:f8:a2:fe:d2:
0c:4d:b7:af:40:f7:1f:4d:fb:b3:a3:4e:15:28:93:94:2c:cc:
72:86:f5:ab:e2:13:d9:7d:d3:2c:ae:00:bc:91:5f:43:c9:cc:
32:da:ec:44:56:8a:b3:7d:8d:7d:67:ad:1b:11:87:b2:95:4f:
47:fe:59:cb:07:4a:45:d7:8c:bb:1e:d1:d7:64:ca:47:86:96:
08:e3:4a:eb:cd:e8:5e:ec:71:62:1c:56:92:80:31:03:51:87:
d3:f9:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:55 2025 by rpki-client