Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68a24b5b-7350-4b9e-9e54-e1da8bc9177e.roa
File: 68a24b5b-7350-4b9e-9e54-e1da8bc9177e.roa (raw, json)
Hash identifier: B3nVjAgnVBr/LXS/EStwRDqWHQwQtZSGPjUfaarZS68=
Subject key identifier: 92:B5:24:20:B2:CD:BB:9E:49:B2:2C:31:94:EE:32:39:37:28:C6:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7CF5A72D2749BD09708B478517A4B93E43E74109
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68a24b5b-7350-4b9e-9e54-e1da8bc9177e.roa
Signing time: Tue 28 Oct 2025 00:00:13 +0000
ROA not before: Tue 28 Oct 2025 00:00:13 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f5:a7:2d:27:49:bd:09:70:8b:47:85:17:a4:b9:3e:43:e7:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:00:13 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=bce15fd1694c000d03e6d1341b67ce59a83bd411cf6b190c05455a4aadc01299, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:07:89:95:fb:4c:a4:37:50:e5:d5:22:56:
0e:cf:c5:3a:f6:7d:a6:5a:43:ae:00:5c:6c:2e:88:
3b:47:64:8a:7e:ac:d7:dc:e1:1c:27:58:b4:a5:18:
b2:d7:5b:ff:a9:d1:e2:0c:ae:7d:78:45:33:af:6a:
76:77:2d:fb:0a:bd:f1:ab:f4:2d:a7:5c:0c:85:51:
0c:87:d1:d1:1c:0d:d7:44:71:51:12:53:01:0c:a9:
39:b0:e8:68:d9:99:d7:a0:ae:94:dd:44:71:74:47:
bf:f9:24:59:ea:51:24:fa:8f:e7:aa:ce:20:c2:75:
0b:42:49:d1:85:5c:0f:c1:ca:a6:e8:cf:c6:c2:4c:
73:ac:4e:78:14:13:e2:e4:97:5d:49:32:65:56:c5:
0f:dd:ae:d0:4a:d7:52:3c:3f:5d:17:d2:0a:33:6d:
13:de:fc:ba:67:57:93:60:37:40:c2:9a:76:7e:ee:
66:49:9f:c6:97:b7:95:62:c9:3c:e7:43:fa:11:c4:
1e:d3:18:5f:fb:a2:3f:87:0f:1d:c8:40:25:f7:69:
b6:2e:57:79:ef:9f:71:f7:46:70:33:85:5b:78:c6:
8c:f5:c9:a6:88:74:74:aa:4f:e9:fd:95:92:0e:26:
0b:05:f3:5c:ca:24:e8:49:01:d3:c1:9c:4d:fd:bf:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B5:24:20:B2:CD:BB:9E:49:B2:2C:31:94:EE:32:39:37:28:C6:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68a24b5b-7350-4b9e-9e54-e1da8bc9177e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.152.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:5e:d8:80:fb:a9:4e:40:33:0b:0f:bc:4d:14:e6:84:18:13:
e8:9e:6c:d0:bd:91:e8:27:f6:da:3f:8a:58:df:c7:e8:83:c0:
30:a8:a0:b7:20:58:39:da:c3:e5:de:15:92:5d:9a:d0:8c:a4:
b6:38:91:ad:48:55:9d:4a:ad:64:8b:79:ee:2b:7b:d4:8a:79:
cc:ce:50:90:72:f1:1a:d8:08:cf:1b:45:90:96:00:cb:75:40:
d7:13:6b:7d:f3:fd:1d:e3:b9:de:78:2b:db:8f:f7:3a:fc:e9:
f4:b1:76:72:b2:91:8b:d0:db:5c:50:69:43:ec:19:1b:14:35:
d4:05:6c:4d:16:3d:fa:8c:3b:ea:25:e1:12:f5:d7:0e:46:28:
26:9c:1b:d8:6b:17:0e:2c:d2:5d:29:bc:9a:6d:2e:7f:ef:09:
85:c3:f0:ad:e6:64:4f:e6:8b:d7:4a:55:f7:4e:4f:83:2a:0d:
9f:40:95:f0:ac:d7:51:87:4f:b2:d3:7a:d9:85:83:aa:69:02:
ba:d5:84:5b:13:df:d9:60:00:7e:ed:fe:cb:74:ea:7e:50:92:
2e:5d:02:13:2e:20:f6:56:8d:db:24:b0:cf:02:9c:75:e5:d1:
4a:f3:9b:17:ea:6b:ae:5a:c3:8d:5e:dc:66:ca:ab:58:a9:af:
53:a3:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:05 2025 by rpki-client