Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa
File: 62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa (raw, json)
Hash identifier: EswWiVwP6vSJ2LCi2t5h/JeErhE2RDlJm32xnDXpfmM=
Subject key identifier: 01:FD:CD:0C:76:C7:0D:63:CC:82:D3:27:50:BE:57:C8:C8:E0:CD:32
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 057225069F7580747A49794628270B6FFC9A6D9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa
Signing time: Wed 22 Oct 2025 00:10:06 +0000
ROA not before: Wed 22 Oct 2025 00:10:06 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 203.119.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:72:25:06:9f:75:80:74:7a:49:79:46:28:27:0b:6f:fc:9a:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:10:06 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=82a9dedce84f362b01eaeff39f099be7e9d793ffd229ae2d6ccd160ab047f360, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:64:cf:a2:76:dd:cc:42:1b:b3:be:5a:e5:
33:46:53:1a:b9:20:06:0f:bb:10:96:78:9b:1c:b1:
0c:b9:9c:67:83:a7:5f:38:70:8c:c1:19:b6:97:9a:
27:ae:38:45:ab:c5:6d:73:e8:7a:c9:8d:d5:eb:2c:
82:d8:af:5e:86:5e:36:ca:e8:b2:e3:dc:dd:1f:05:
54:1e:d8:ba:dc:88:70:d8:94:d1:f8:f3:f0:8c:3b:
98:a0:76:56:da:d7:6d:99:b5:b2:44:04:79:17:9b:
b5:bc:b4:fb:06:75:a8:f0:04:64:89:f0:4c:19:aa:
11:6c:78:f3:da:09:ac:46:94:68:b0:03:f5:f0:d1:
41:f1:b1:75:a0:18:ac:6a:59:0b:53:c6:24:cf:a9:
31:4d:76:b5:9f:ba:64:f4:91:e0:92:bf:96:ee:ba:
f8:bd:a6:e6:4e:1c:1a:24:cf:32:04:ff:bc:bf:b4:
98:24:ea:1b:f0:d7:d9:3c:1e:33:fa:18:9d:ed:76:
32:c1:95:e3:c3:c7:29:2e:53:08:e2:b6:b6:b2:11:
e9:7e:37:af:bc:59:63:cb:0d:fc:c9:b3:81:b9:0e:
e4:68:31:df:3a:22:6e:25:da:7a:c7:b7:a6:5e:b1:
c2:3a:6f:fc:2a:df:7e:7a:bb:15:0d:32:11:70:e9:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FD:CD:0C:76:C7:0D:63:CC:82:D3:27:50:BE:57:C8:C8:E0:CD:32
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.119.84.0/24
Signature Algorithm: sha256WithRSAEncryption
85:93:06:aa:19:3c:77:5f:e1:2b:32:e7:52:79:af:45:9a:73:
b4:ab:9a:64:12:df:73:b3:64:56:a4:25:67:ef:5b:fd:11:18:
93:98:14:d2:16:7d:19:2a:5e:41:5b:55:2c:d6:a1:6f:f5:2e:
35:56:fc:45:46:23:b2:95:37:18:5b:3b:ab:10:d4:67:97:8e:
15:5f:cf:17:05:d4:4c:71:ff:29:64:06:22:ef:bb:91:98:75:
1e:04:d8:cb:89:7e:a8:ed:17:49:50:b3:84:ca:83:f8:4d:ea:
9a:26:b8:5c:6c:78:e5:0e:35:c2:18:e5:f3:c0:04:c3:0d:77:
a6:99:c0:5f:d9:15:97:2d:46:ab:57:25:3a:cf:df:f4:62:b9:
cb:eb:6d:25:df:6f:1b:5f:f1:b8:77:5c:0d:6b:a0:e9:dc:87:
58:5a:3c:fc:1b:87:b0:d1:ba:5d:6e:4d:64:76:17:af:16:7c:
a7:cd:67:be:ab:27:01:f5:8e:8a:b6:14:f0:32:ae:fc:90:26:
40:2d:b3:29:44:01:53:66:18:2d:39:3a:95:00:1b:e2:1d:c3:
03:47:88:36:c9:f0:a8:2f:4a:6d:8d:14:23:dc:dd:24:37:74:
37:8e:4e:06:74:89:8a:bd:e4:3a:a9:c2:c2:cf:40:8d:fe:c4:
15:40:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:40 2025 by rpki-client