Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f9624a-62d5-4436-a9a0-acac295eff08.roa
File: 48f9624a-62d5-4436-a9a0-acac295eff08.roa (raw, json)
Hash identifier: ttStrojYTP+6Yg8AOfv/m5L8CzwC3SpA9AcYtwQMJH4=
Subject key identifier: 2F:23:80:33:51:72:B7:F8:B4:05:B6:92:B3:DF:CB:9C:03:99:5D:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0AAD27FE13ADAD091AD8B1C6969C620CE8D9135B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f9624a-62d5-4436-a9a0-acac295eff08.roa
Signing time: Fri 31 Oct 2025 20:53:28 +0000
ROA not before: Fri 31 Oct 2025 20:53:28 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 75.2.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ad:27:fe:13:ad:ad:09:1a:d8:b1:c6:96:9c:62:0c:e8:d9:13:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 20:53:28 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=7db48d999fb937a16b528f09021f4135ac5a67ef9141a33fb0d5fd2cc60ecb1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:05:f4:48:fe:42:4f:b1:f8:35:6a:bb:34:
db:c8:d5:11:06:f5:45:60:b4:28:db:2f:84:6c:b6:
74:31:89:58:46:db:d0:27:4a:36:b1:81:2e:9f:ad:
bf:91:59:70:7e:90:94:fc:15:75:33:46:21:c4:ce:
76:96:5a:57:7f:5c:5a:b0:d5:ce:de:d1:c4:ba:68:
19:85:79:b7:51:a4:5a:0b:b3:4e:5c:35:1a:da:ef:
ce:f1:03:b2:eb:6b:3a:a2:1f:43:39:54:b4:d6:6a:
83:fd:f6:df:04:86:f5:e0:24:42:7f:1c:48:41:d5:
86:42:53:f4:bf:3d:04:a6:77:f8:84:ff:57:ca:7d:
b2:f9:35:ca:04:a3:69:07:4f:96:33:4f:6d:09:ff:
ae:28:bf:78:98:fc:71:99:a9:fb:cb:92:b1:80:5d:
11:ce:b3:aa:8b:fb:82:11:07:cb:e7:b6:4b:c3:d5:
7f:7d:77:09:fa:23:99:dc:a0:56:f3:8d:5a:48:1e:
96:b7:44:7f:2e:01:06:eb:b4:17:98:12:d8:da:91:
d7:01:06:b8:49:c4:07:7a:bf:ea:71:9d:be:d6:1c:
0b:9c:8b:ed:b5:df:24:66:95:0b:e8:ad:ff:62:42:
c7:ed:3e:6d:22:30:27:8c:5e:07:09:39:ae:26:cb:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:80:33:51:72:B7:F8:B4:05:B6:92:B3:DF:CB:9C:03:99:5D:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f9624a-62d5-4436-a9a0-acac295eff08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.2.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:34:9b:fb:64:31:ba:fa:d4:12:a7:5b:c8:7c:89:6d:6d:a9:
b3:1b:08:e7:e5:0e:28:ac:cd:b2:05:29:bd:b0:64:97:ed:10:
93:88:de:b0:25:62:18:c1:d9:73:01:6a:6c:11:0a:bc:3d:36:
e5:33:dd:64:55:22:bc:3e:cc:ea:ca:e0:12:db:47:77:13:1d:
44:33:7a:40:b8:35:0d:17:7a:9a:85:20:c5:04:69:ac:53:ba:
ce:fc:61:21:20:f9:88:ba:8c:76:ff:a3:12:2e:6c:4c:00:c7:
d9:a1:2f:73:17:6a:31:c0:da:ac:5d:0f:68:bc:0b:bb:c6:75:
6e:de:e0:0b:04:14:12:51:e3:2b:69:16:91:d1:85:44:6b:94:
61:4b:16:f0:65:5b:85:1f:ef:72:3f:0f:f3:cc:9f:53:6b:f9:
ed:4e:a6:f2:5b:27:e2:ce:8c:ca:a0:28:84:2f:54:a8:03:f3:
5b:b9:53:e3:91:6d:d6:56:a5:44:bf:9a:de:8a:cf:77:d4:f7:
28:41:ad:47:db:a4:8c:6a:18:0d:9b:5c:ad:a0:9f:48:7d:f2:
09:9f:6c:81:4c:d4:86:6b:98:a0:b2:d7:54:d3:c5:da:69:66:
e3:f8:f0:a9:09:ba:3e:24:19:49:38:bd:99:b6:7e:a6:f5:3b:
1a:50:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:52 2025 by rpki-client