Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/566fa31f-a900-45ea-bf4f-117836ffe61b.roa
File: 566fa31f-a900-45ea-bf4f-117836ffe61b.roa (raw, json)
Hash identifier: 3RmK7aUpO5Ls6O9YGD7oiF+LrF5dk38cGayaO+qn0Ls=
Subject key identifier: 83:BF:F9:03:AE:E5:90:26:BF:45:60:DB:05:84:1F:2D:8C:A0:85:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11B125677C106BF22EA1222A2ED818FDD93F0E2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/566fa31f-a900-45ea-bf4f-117836ffe61b.roa
Signing time: Tue 28 Oct 2025 00:00:12 +0000
ROA not before: Tue 28 Oct 2025 00:00:12 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:25:67:7c:10:6b:f2:2e:a1:22:2a:2e:d8:18:fd:d9:3f:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:00:12 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=11486fc347ff2cf805c4d65dab7675da913ace96fbb5675ccd5b1e6974914357, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:ba:bf:1a:9f:52:24:1c:b8:8a:2e:f5:ec:
6c:60:61:bc:3f:d8:5c:a6:14:67:9c:a3:e7:95:9c:
9a:31:ea:54:ed:c3:90:1c:23:b6:ab:66:b2:43:1b:
c3:51:fe:a4:f5:ea:de:0f:75:f2:20:cf:1a:b1:e9:
ef:79:b5:fc:07:73:63:b1:43:47:28:60:06:67:04:
99:d8:c7:dc:34:8b:2a:e0:08:1e:7b:a4:53:24:10:
b9:03:d4:5f:d9:6c:5f:31:47:11:c6:db:3d:74:21:
ae:14:cd:be:f6:91:af:1c:11:d6:e4:31:74:56:34:
8c:cd:6f:5a:af:66:76:67:fe:a8:f3:9e:a0:7c:75:
6f:a4:a9:62:3b:c0:4f:79:f0:e4:b4:f0:eb:57:1d:
94:2b:e0:65:e8:73:3b:6d:7c:b5:a9:f1:ea:6e:ce:
b8:56:cb:04:44:47:c6:e5:5c:61:23:ac:06:65:44:
8b:c5:9e:06:55:05:d3:6a:24:bc:cb:da:50:02:37:
93:c1:08:bc:ba:26:e7:e4:9b:e0:63:07:23:44:d4:
67:ef:c8:73:06:44:d6:f0:4f:18:d1:99:29:c6:5d:
fe:25:86:6e:d7:95:5f:5b:cb:73:64:d7:3c:2d:c5:
24:33:d5:ed:8e:b7:40:51:40:47:c9:8c:30:51:00:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:F9:03:AE:E5:90:26:BF:45:60:DB:05:84:1F:2D:8C:A0:85:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/566fa31f-a900-45ea-bf4f-117836ffe61b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.136.0/21
Signature Algorithm: sha256WithRSAEncryption
31:9b:73:90:10:85:a9:b9:21:a4:5d:e8:69:7f:00:c5:88:da:
67:3b:ca:3f:0a:df:67:b7:1c:99:53:4e:0e:1a:9b:de:dd:9f:
96:a2:9a:21:e4:7c:c0:ef:db:dc:42:2c:b2:22:b9:47:7d:7f:
b6:9d:3f:0e:77:b1:24:b9:18:d6:12:87:24:b6:47:b3:bb:5c:
0e:15:cb:db:bc:69:d0:94:d4:e2:de:d4:8a:dd:f3:74:7c:fe:
98:7d:04:ce:3a:a2:5d:26:1f:8e:de:81:4c:5b:9a:53:d4:f9:
2a:e6:4c:92:23:0b:23:bc:e4:0e:6d:d6:7a:99:c7:a1:5a:b9:
3a:9c:c3:db:71:3d:82:dd:1e:33:3a:50:c6:31:8d:21:16:52:
70:df:ba:8b:4f:e3:3c:26:6e:d1:00:7f:8d:39:e1:12:9c:1d:
37:59:49:33:e2:b8:7e:d1:55:c2:68:be:ce:60:f7:ea:14:3a:
c6:01:71:f1:82:dc:f7:62:39:37:5b:ef:90:56:a1:da:52:18:
d0:95:99:3f:f4:69:13:2c:f0:30:8e:65:14:20:c8:cd:62:a3:
8a:7b:d3:89:1f:c9:2b:78:5c:e2:e4:32:5d:b5:ee:14:e5:37:
27:97:20:c6:40:1f:08:a9:59:b9:e4:be:5a:36:11:4f:4e:73:
10:32:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:26 2025 by rpki-client