Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa
File: 4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa (raw, json)
Hash identifier: ed+XwbwVSOA+p7WjRsqjQ4SFCUy3l3efB4rgcPMgAGA=
Subject key identifier: FA:24:96:31:BB:F6:4E:B7:00:F0:56:EB:49:3B:86:C9:07:A1:9D:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B15702E23AA0E069EB66B3B2EE588F6C7E182B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa
Signing time: Sat 25 Oct 2025 00:30:12 +0000
ROA not before: Sat 25 Oct 2025 00:30:12 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:15:70:2e:23:aa:0e:06:9e:b6:6b:3b:2e:e5:88:f6:c7:e1:82:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:30:12 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=86a177fb58dfa1e84c36b49a93f7063d4bc2fad05d0d0f132679cab6138577ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:c1:b2:fa:12:37:f7:3b:76:ea:42:01:79:
15:c6:01:7e:71:6c:40:d0:3a:71:ba:4b:dc:ab:be:
6c:35:f7:89:02:e1:c4:37:a2:46:df:13:4f:38:d5:
dd:c6:15:ad:53:d8:82:1d:81:95:8b:0b:1c:ed:b1:
95:e8:6e:2f:af:92:3d:6f:27:e4:bd:0d:14:2c:f3:
29:69:a0:82:09:0b:d3:4d:02:44:bd:c0:a1:2e:b1:
38:51:dd:48:f6:3b:e9:6d:c8:29:c0:d7:33:28:61:
84:56:eb:29:f9:7d:d8:25:50:aa:a1:04:ba:2f:ac:
41:ed:f2:8c:ca:88:46:4a:ff:44:0e:76:68:3a:0d:
c2:dc:8d:0c:48:a3:78:0a:d7:6a:0e:2a:ab:20:ef:
0f:44:e6:ed:ee:0c:47:e2:93:24:5d:56:53:9d:e1:
16:32:97:a6:c6:a5:fa:44:46:62:a3:7a:ad:ad:07:
f9:4f:b8:36:a7:88:bb:f4:f5:5f:d0:7f:35:c6:62:
e9:76:f5:27:1d:6f:02:11:26:2a:3b:ea:0b:db:55:
b0:dd:7f:f4:e1:01:22:eb:5f:1b:ef:6a:52:21:99:
1f:59:79:ff:4e:39:43:07:5d:5d:2d:f8:d7:2e:14:
72:05:66:4f:57:b9:66:4f:dc:34:ed:f9:d7:53:e2:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:24:96:31:BB:F6:4E:B7:00:F0:56:EB:49:3B:86:C9:07:A1:9D:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1758fc-d538-4c20-8988-f7f1dcf2e637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:02:05:da:ee:56:1a:64:08:60:46:04:52:6f:c7:9c:a7:a0:
90:e5:98:b4:d2:af:1a:ce:a8:a3:61:2f:24:cb:a1:f1:7a:4c:
9d:dc:24:49:8a:4b:f1:76:1c:c4:2d:97:65:e7:9b:c6:b3:43:
4c:80:48:79:96:a1:3b:33:37:bf:de:34:a3:4a:67:b4:82:08:
a5:27:cb:5f:8c:aa:ea:e6:66:b0:0e:c1:ff:67:93:41:f4:d0:
af:c6:2b:52:06:44:3b:07:69:5e:dd:6f:0c:72:31:28:b2:92:
8b:d2:2b:03:e5:d6:4c:ed:c1:da:1f:b0:d4:28:c5:b9:f0:8a:
77:77:51:bf:9f:3f:26:e0:fc:47:8e:aa:52:f5:25:6f:1e:fa:
c8:35:5f:43:bc:15:39:48:c2:34:ee:a6:b6:ba:b1:94:ed:97:
03:14:ab:04:f6:70:50:fa:34:48:c2:f2:c7:12:34:35:27:b9:
2f:22:68:94:7f:e3:eb:91:44:57:7a:a7:f3:01:42:6d:36:a1:
54:b4:26:1b:19:14:fd:ad:70:8c:82:40:ff:dd:97:7e:bb:41:
62:a9:3b:da:47:0e:5d:96:e7:9c:b8:e4:ec:3f:d8:93:2f:13:
65:78:41:33:be:83:f4:16:75:b3:c8:fb:4d:44:e3:d1:01:9d:
36:5c:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:42 2025 by rpki-client