Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557ead45-b1a7-4106-be3c-6b610ae5759c.roa
File: 557ead45-b1a7-4106-be3c-6b610ae5759c.roa (raw, json)
Hash identifier: gjWS4ogvsla4QfTsdJXrP08Uac9QDnOur9UTT8bx8dc=
Subject key identifier: 5E:E4:B5:3E:90:33:FF:02:01:BA:2B:EB:D2:E5:E0:9F:88:9D:94:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D1BF20C2E054F85948904990ECDD9D2A12EEF10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557ead45-b1a7-4106-be3c-6b610ae5759c.roa
Signing time: Wed 22 Oct 2025 00:00:58 +0000
ROA not before: Wed 22 Oct 2025 00:00:58 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1b:f2:0c:2e:05:4f:85:94:89:04:99:0e:cd:d9:d2:a1:2e:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:00:58 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=fe1f2d33c56b2d74624c9c6a4bbaeed976fe237928bc93648d3374e8bbb5b2d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:52:77:c2:c0:e7:ff:56:0b:28:52:85:a8:bd:
77:da:37:14:66:7e:e6:d9:32:78:67:99:fa:8e:db:
90:d8:5b:85:d9:84:87:71:e8:e9:52:5e:48:5c:fb:
f5:3d:2f:5f:62:47:0d:9a:89:c2:ea:b7:e9:74:da:
74:c2:ab:ac:17:01:02:78:f5:62:62:8b:ec:e9:5b:
c7:55:ce:77:7f:09:53:e4:a1:bd:35:df:ce:60:8a:
25:1e:ba:bb:69:22:14:81:f9:54:ac:6b:b6:b6:9b:
7b:a7:00:5d:26:bc:04:cc:1b:a5:5b:bd:48:0f:56:
d3:99:b2:cd:a7:0b:82:20:1f:47:02:87:b2:a4:d8:
35:b4:5d:fb:a5:8a:7b:42:ca:e0:60:37:ae:af:94:
22:00:eb:f3:2f:27:9c:50:d8:2b:d1:04:28:c5:64:
88:d4:37:7a:ac:45:b8:2c:a3:23:86:63:2c:a6:aa:
fb:f2:a8:b6:aa:b1:0c:ef:92:ff:5f:c6:ff:9a:6e:
62:dc:80:b6:d8:57:08:10:57:e4:ce:46:d5:46:df:
ff:da:3f:54:67:b6:30:0f:e6:88:e0:60:89:83:1e:
be:3f:ff:4b:b1:67:b9:71:88:1d:9b:a1:ba:22:2c:
1b:bb:a1:03:a5:69:82:c0:a9:70:b0:f9:d1:f7:bd:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:B5:3E:90:33:FF:02:01:BA:2B:EB:D2:E5:E0:9F:88:9D:94:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557ead45-b1a7-4106-be3c-6b610ae5759c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:91:48:4e:96:a1:bc:4c:b1:45:cc:9a:0b:73:dc:7a:24:f0:
79:91:cc:70:e4:ac:c7:2e:35:45:05:93:b6:4f:5a:db:1f:72:
d0:b2:8a:d3:e8:7f:1b:04:6b:95:c5:7e:f1:6f:e6:cd:06:8d:
c4:42:79:28:3e:97:ed:40:aa:79:14:b2:47:b1:43:3e:37:5b:
e8:c0:87:f1:40:cb:d5:3b:04:22:8c:68:8d:a7:86:76:c0:8a:
29:fe:d5:dd:ed:d9:f6:85:b8:92:85:b5:51:f0:bf:03:7c:17:
89:25:fa:d7:76:b7:bb:16:94:51:b6:64:13:7b:b0:21:a4:23:
c2:86:26:f0:ff:21:84:c3:7c:27:59:dd:94:98:b7:0c:2a:8c:
f4:f6:07:ee:ab:0a:dc:e8:e5:70:79:3d:1b:86:5a:a9:27:fb:
3e:ad:f6:38:55:7b:81:4c:9b:da:ca:23:e1:68:81:36:1b:ed:
c9:22:84:e1:0d:93:c6:1e:62:95:b9:27:60:3a:23:7d:51:4a:
c9:2c:2f:7f:23:32:1c:b6:50:a9:bb:bc:b5:2d:5e:8f:e2:b1:
31:4f:e4:bf:d9:30:5c:e2:f7:cb:03:6a:8a:4e:61:a7:f1:3d:
e9:fc:8b:f5:7b:3a:b2:70:5b:19:8e:97:0d:73:41:48:d7:a9:
4d:ec:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:55 2025 by rpki-client