Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa
File: 5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa (raw, json)
Hash identifier: X+X5hU9LZsJiODhci9JCtHppIvYITohJ/G/TZMmWHGE=
Subject key identifier: 39:E1:32:FA:45:82:B2:47:79:80:35:20:7F:53:03:4A:93:85:F2:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3087E001DA3B118B52A922DD6598D5CD6CD8A84D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa
Signing time: Sat 01 Nov 2025 00:30:55 +0000
ROA not before: Sat 01 Nov 2025 00:30:55 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.92.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:87:e0:01:da:3b:11:8b:52:a9:22:dd:65:98:d5:cd:6c:d8:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:30:55 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=d47313ee655d7aa82368a0167be68f1c08535db959fc1adebf9d7f940bdf07bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:17:94:ae:8a:2c:ad:80:05:f8:41:c9:d8:
4b:d5:16:70:81:b5:bf:2d:d8:a8:cc:82:d4:b0:15:
95:5f:4f:38:eb:01:5a:23:3b:62:eb:dd:c2:ad:90:
ed:5f:3b:92:83:15:2d:7e:f6:ee:21:04:3e:8c:87:
27:d8:95:38:b1:3d:0a:0e:73:15:f3:2d:69:ca:bd:
72:91:bd:c1:86:ee:07:2d:ca:f3:1f:aa:26:e6:bd:
74:34:3d:02:06:c1:9c:d1:72:a6:98:e9:af:5d:04:
de:b5:58:61:cc:2a:5b:43:bd:db:46:36:fc:59:b6:
3a:f2:de:2f:18:a0:d0:f5:c1:55:5b:17:03:77:e3:
8a:b4:ce:b9:f7:5a:43:a6:a6:4d:3f:82:d7:4a:e6:
4d:f9:78:85:60:64:c3:2e:a1:84:3d:36:b1:9c:41:
c8:ef:e7:be:15:67:9f:dd:c8:db:b9:6b:cb:5c:34:
de:13:b5:9d:c2:59:a8:34:c0:80:8a:79:7c:e7:e0:
d3:82:08:c7:3f:9f:78:41:5d:95:39:a3:52:aa:7e:
85:00:ca:8a:2b:65:69:e4:a6:81:5e:05:9f:2d:e7:
9d:b6:c6:4e:e4:df:b7:5f:72:10:d4:eb:fd:d8:bb:
02:08:9d:cf:15:e5:6b:29:63:58:82:29:65:46:82:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:32:FA:45:82:B2:47:79:80:35:20:7F:53:03:4A:93:85:F2:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
23:2c:3f:bd:3d:67:76:fa:df:e7:60:a5:1e:01:99:91:6a:d5:
90:70:2c:c8:d2:8a:cc:d5:0d:1e:f5:5d:f8:08:be:e3:d1:cf:
38:a2:99:3f:c9:e2:89:c2:2c:a5:d5:d6:24:cd:77:c2:3f:07:
d0:20:99:b4:79:75:41:c2:06:11:05:15:37:b5:57:73:cf:e1:
d2:93:77:f9:6d:4c:ae:27:45:c8:f2:a7:6f:2a:1a:03:8c:df:
34:8d:a3:e2:bc:96:1d:d9:e3:4b:a4:e7:6e:e5:9f:3a:8a:d3:
2c:79:a1:66:57:e9:44:32:7c:98:5e:ee:76:dd:6c:54:ee:3b:
80:a8:44:4d:cf:ef:79:0c:f5:08:37:00:c5:df:0a:90:43:9f:
21:b5:df:c6:21:53:4a:75:f7:b9:63:1d:c8:ec:19:cb:56:c5:
97:95:e9:59:02:6c:32:b3:e4:cc:f1:3c:29:9d:79:6e:06:91:
7a:13:b9:25:01:c3:47:b5:81:4a:8a:32:52:03:aa:c2:ea:ea:
26:87:31:2a:af:cc:ec:cc:70:73:cf:1a:07:6e:cc:3b:b0:e8:
f0:04:91:3e:d4:0f:96:c9:87:b8:45:e3:bb:0f:b4:57:53:63:
18:9f:3c:bd:f9:61:59:a6:dc:82:95:77:85:5b:ce:ca:64:d3:
56:df:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:50 2025 by rpki-client