Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
File: 6263649d-0385-48a2-aed8-fbedb2b248b2.roa (raw, json)
Hash identifier: HxjJ7XIoOqLWPA3SYlCJcrN7gv3A8OHtLquyVaHk0f0=
Subject key identifier: 3F:2D:73:C0:89:59:81:D7:F4:AF:0F:6D:B6:59:0F:0F:0D:81:CB:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55D5ADF8A277392781B28AE717BFD3D970918D60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
Signing time: Sun 26 Oct 2025 00:30:50 +0000
ROA not before: Sun 26 Oct 2025 00:30:50 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.198.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d5:ad:f8:a2:77:39:27:81:b2:8a:e7:17:bf:d3:d9:70:91:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:30:50 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=e96ecaecbcdc8016eb33d47b19f1339748efd35aca764c5a38a9721ed96b873d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:7c:73:c7:4c:ee:f8:32:7e:eb:64:2b:8f:
04:48:13:82:19:a3:ee:59:b1:cd:a2:85:1a:90:a5:
58:2c:ac:f6:b6:2d:ae:ec:00:fb:71:ab:46:01:65:
1e:cf:e9:99:39:ed:41:f0:6e:a3:1b:ab:0e:b1:ab:
e3:aa:ed:fe:13:59:ee:91:bb:fd:45:22:ee:c7:c1:
97:b8:d6:e5:62:d9:f5:20:3d:74:8c:cb:05:05:13:
e2:dd:e3:bb:50:0d:5a:73:eb:99:5c:35:6e:04:95:
c3:b1:bf:23:f7:69:47:72:f4:9a:10:be:27:d5:b4:
3d:ca:08:6a:9e:b5:0c:b0:5d:46:23:0f:ac:f7:c8:
6c:dc:32:24:54:88:18:4c:01:73:9a:c8:2f:91:64:
b6:72:8b:0c:10:46:29:4f:a5:94:8d:8b:0f:0b:6c:
78:23:a5:7f:15:e2:38:4d:ca:f1:a6:6a:a2:c9:48:
8e:30:f5:bd:9f:3f:5e:de:8c:9d:cc:95:71:2a:64:
37:a2:75:e0:9a:3d:e9:72:6d:06:38:5d:1b:ed:fd:
6d:4a:5a:0f:fc:21:a6:31:51:8b:f6:60:8d:37:5a:
59:ce:e5:70:fe:40:15:66:4c:3d:5f:2b:35:0f:d5:
b2:8e:4a:3d:00:7b:b0:6a:fe:cc:4d:de:90:c3:fa:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:73:C0:89:59:81:D7:F4:AF:0F:6D:B6:59:0F:0F:0D:81:CB:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.198.192.0/18
Signature Algorithm: sha256WithRSAEncryption
91:4b:b2:87:18:30:54:2c:d9:8c:00:89:0c:90:71:46:f4:5c:
74:c8:9b:2a:df:ec:52:b7:3b:5f:7d:54:f1:15:fd:64:c1:b6:
4b:92:15:e4:19:01:7d:6a:e7:06:54:5e:54:63:4e:ae:4d:b8:
b0:7b:01:03:62:5f:44:47:df:e1:1f:68:b3:15:35:da:56:e4:
02:a1:ac:ad:25:c0:fb:3e:07:e1:e8:2f:e7:b1:8a:69:6c:06:
d4:5e:d3:4d:1e:d1:aa:88:0e:7e:5b:d7:c3:ab:9f:9c:33:24:
b1:f9:b2:24:c1:84:cf:d6:3d:7a:fc:40:c7:ae:00:6a:9f:60:
01:56:a4:6d:7c:e7:7e:7d:8f:f1:04:bc:10:21:a4:66:2b:73:
9f:d9:13:7b:d5:09:c1:18:08:85:c3:cd:f7:a0:c9:cb:18:a5:
36:7a:31:89:9b:a4:cd:d2:d3:9f:73:25:5f:ef:36:08:f0:bb:
7e:0c:b6:b7:04:b9:5f:ed:bd:89:c5:6b:ce:0d:48:f5:e8:28:
a5:ed:6b:ee:34:03:d1:88:41:3d:3c:d8:55:bc:5c:23:21:de:
99:03:27:5e:d6:07:f2:9e:12:bd:ea:c1:db:d1:2f:ac:01:b4:
bc:99:47:6a:06:08:c8:11:84:69:40:81:68:12:0a:ed:07:d2:
97:2b:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:25 2025 by rpki-client