Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3075fd28-3221-468a-9dea-be5b1b4612d0.roa
File: 3075fd28-3221-468a-9dea-be5b1b4612d0.roa (raw, json)
Hash identifier: qmIZrq9p9Bl14lnQKFPZW5ALfOCjVv//fiYod4HUHy8=
Subject key identifier: CD:A8:57:6F:56:66:2C:DD:32:C4:35:2D:13:1E:69:AE:32:39:03:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5995DBA59E2AAC503670FC95A6A9D29501226916
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3075fd28-3221-468a-9dea-be5b1b4612d0.roa
Signing time: Fri 31 Oct 2025 20:51:47 +0000
ROA not before: Fri 31 Oct 2025 20:51:47 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:95:db:a5:9e:2a:ac:50:36:70:fc:95:a6:a9:d2:95:01:22:69:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 20:51:47 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9847a7b343eb930efd23ecec9c3cceb48284da17daa2484f47e0b02c42bc8569, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:d3:ba:33:3a:a0:fe:ff:66:eb:9d:d8:e1:
65:02:d6:c3:9f:95:1c:1b:32:d4:b2:c7:9b:f8:27:
89:44:49:72:0d:36:d2:32:ea:7b:68:f6:f4:13:8b:
df:66:4a:8f:5a:c9:7e:2e:8c:80:52:63:55:98:ea:
89:ef:b3:a2:74:2a:6f:6b:bf:a4:ca:34:f3:e0:6e:
a8:f7:ec:d1:a1:a2:87:30:c4:2e:b4:69:c4:76:d4:
02:94:ff:f2:3f:ac:5c:21:a7:01:7c:b1:df:0a:a2:
20:12:be:07:f5:2f:42:9d:0c:82:97:3e:04:10:a6:
0d:2a:82:7d:ea:54:84:5a:6a:54:75:ff:14:fe:57:
7f:a7:5c:76:34:8e:6d:0c:7d:83:78:93:3a:71:92:
ae:68:42:1e:a4:83:ac:43:f8:93:3d:6a:0b:84:83:
fe:46:d5:2f:f3:6d:96:c0:9c:8b:62:2a:71:43:f5:
95:73:4d:88:16:00:34:9e:30:4e:42:a2:92:5a:95:
8c:4d:58:33:c2:98:fb:16:63:95:e0:8f:10:93:94:
d2:b8:c8:ce:c7:b8:20:6a:cd:d0:d8:76:01:be:80:
ac:98:4e:96:3f:93:79:99:2d:74:18:a4:76:74:c8:
fb:db:ba:2f:e9:8f:d9:4c:c8:f8:ea:9d:4f:f7:01:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:57:6F:56:66:2C:DD:32:C4:35:2D:13:1E:69:AE:32:39:03:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3075fd28-3221-468a-9dea-be5b1b4612d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.114.0/23
Signature Algorithm: sha256WithRSAEncryption
62:3c:bf:8c:99:63:82:89:81:79:67:47:34:21:0b:26:58:92:
29:13:00:a7:7b:e0:ae:c3:66:17:16:14:ed:ba:72:d1:30:74:
fd:ba:8b:4b:8a:8c:06:96:a9:6e:8a:4f:64:ab:96:ad:99:8c:
71:f8:34:7b:a0:6a:db:73:63:e4:56:84:eb:3a:0a:fe:ca:1f:
3a:96:8e:b5:8f:79:a9:85:f7:d9:fa:f0:42:69:61:2c:15:79:
e0:f9:6b:00:93:11:2a:db:c0:25:db:13:e4:eb:89:3a:a4:28:
30:ac:5e:e2:f3:f5:5c:e5:67:00:5c:a1:be:95:de:78:3c:52:
05:c4:b6:79:03:7d:0f:c1:24:38:e2:39:07:2d:dc:29:04:6d:
b6:b5:e1:03:ac:5c:8f:51:54:5d:29:a3:ba:31:82:0e:0f:1d:
55:42:24:33:3d:8e:4b:af:f1:11:ab:19:15:d1:ac:3d:5e:09:
a9:96:83:5f:76:48:54:e8:89:03:b0:b7:56:9f:71:d9:f8:d0:
a7:a7:6e:ab:fd:37:94:62:38:3c:c7:77:3b:42:cb:72:93:e5:
69:f3:e0:d9:5d:68:5f:23:8b:d6:94:97:f5:2b:96:f0:de:b3:
23:e8:ee:7d:dd:b8:06:cf:94:32:99:9a:27:6c:b1:74:4c:0a:
c3:16:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:21 2025 by rpki-client