Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa
File: 6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa (raw, json)
Hash identifier: oDmwLrZFjC6uFOuVTKaXpKtkM0RFXHM1hlHicwsynhA=
Subject key identifier: 26:3C:F7:0D:59:05:CF:7C:C7:A4:C2:8F:32:CD:0C:91:B8:E9:77:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20EB24C94738CC41431619DDCD99AE9AC9C23332
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa
Signing time: Tue 04 Nov 2025 00:20:13 +0000
ROA not before: Tue 04 Nov 2025 00:20:13 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 94.38.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:eb:24:c9:47:38:cc:41:43:16:19:dd:cd:99:ae:9a:c9:c2:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 4 00:20:13 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=79e963a7f91cddd02a255b7888644bb6449c7ebc330ab3b9e09f1ea830946b7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:90:7b:8d:d7:5c:94:a4:77:26:f9:36:31:
74:36:4f:9a:32:b5:85:45:9b:43:b1:28:bb:62:cc:
47:1d:af:2a:c9:df:3f:92:16:d0:30:92:06:0c:4c:
55:ed:46:a1:c2:56:39:03:f9:49:94:9f:fa:57:c8:
ed:16:76:94:ff:65:89:f7:01:7d:e1:54:e3:49:f0:
64:2f:de:b8:0b:b9:1b:bb:20:84:be:2e:b2:f9:7c:
f3:8e:58:41:83:b9:e2:ed:b6:3c:40:72:51:81:c6:
46:b1:fc:f4:fb:76:27:40:06:15:3c:92:ec:84:19:
a5:1f:4b:c7:84:8f:d7:03:58:1f:b6:b4:b9:b4:7b:
18:b6:26:f6:1e:dc:51:a9:68:62:12:0b:5c:c6:91:
40:fe:48:c3:d4:eb:4f:bd:fb:fb:c8:bf:4e:a0:0d:
cb:03:ab:ef:8d:0d:a4:74:c7:35:62:6a:85:03:26:
ac:bf:a7:b9:0b:4f:79:bb:48:39:38:1a:48:2f:0a:
c1:ce:39:2a:60:ea:71:3a:94:57:91:0c:0a:b1:75:
be:fe:05:05:48:49:27:7a:44:8e:49:7c:83:e8:e0:
56:90:9b:cd:06:db:62:0f:46:f3:3c:74:27:63:93:
41:ae:88:95:4c:8b:4b:5c:11:71:fe:c1:50:da:85:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3C:F7:0D:59:05:CF:7C:C7:A4:C2:8F:32:CD:0C:91:B8:E9:77:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fce6506-820e-4211-b973-b5e5ac9fcd5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.38.0.0/15
Signature Algorithm: sha256WithRSAEncryption
63:7d:0a:6b:40:9e:1f:59:19:ff:fe:b0:98:7b:2d:83:1d:99:
fa:73:a7:a2:8f:64:d3:5f:95:43:59:45:dd:62:71:6a:c0:b2:
bd:98:bf:a6:3c:a1:cb:7f:6d:6d:47:c2:cd:21:18:56:5f:eb:
fb:ac:81:d8:fd:e7:1d:49:65:ed:c2:e1:57:ef:0a:fb:4f:68:
b5:9c:ca:52:2c:4b:e9:78:9c:96:d3:f2:98:fd:9a:07:4b:eb:
76:41:b8:b4:93:ae:da:88:ca:ab:ac:a3:21:a5:59:4f:da:25:
09:3f:fe:e3:02:90:53:13:63:38:5a:94:52:72:ec:a6:b6:97:
eb:98:81:5d:7b:41:1f:d0:43:95:fa:3d:73:23:96:93:30:0f:
3d:0f:09:38:82:38:5e:94:b8:5c:36:af:a2:8e:3f:75:6a:f3:
99:31:fd:9f:fa:02:f6:9f:56:eb:f7:d1:3c:b5:b1:28:b6:c1:
82:c5:cf:74:ea:40:51:8c:2f:b0:4a:67:fb:5c:14:80:6a:17:
d6:15:64:0f:7a:ea:2b:5d:82:11:84:2a:48:13:f6:c5:ee:d5:
df:58:66:7d:a1:c7:75:73:e2:32:76:de:41:8c:f7:65:36:b1:
9e:99:bd:45:e0:d3:44:36:1c:4f:9c:f4:e7:0c:6e:c0:c8:05:
92:94:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:09 2025 by rpki-client