Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa
File: 81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa (raw, json)
Hash identifier: XRQhqUWU1Pv85gFtq8zBK12xKj+rqRZUkRtK9Ex9tuI=
Subject key identifier: E1:EF:52:25:5D:92:3C:67:E9:B0:11:75:25:D3:63:71:A4:64:EA:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D49674ECF4F58F55141CE176A370FC38685AE1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa
Signing time: Tue 28 Oct 2025 00:30:48 +0000
ROA not before: Tue 28 Oct 2025 00:30:48 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:49:67:4e:cf:4f:58:f5:51:41:ce:17:6a:37:0f:c3:86:85:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:30:48 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=30e0e2c8a2d9a28565e7a3b9a9c2b0c1448cb74a07090ba8a9cb8d15de885f0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:83:36:ad:1b:c9:5c:31:2a:43:68:32:3a:
3c:e7:b5:fd:12:77:2d:90:be:16:b0:be:e1:00:43:
8e:99:5e:51:58:38:f9:b6:e5:7e:63:a4:5e:78:b2:
63:81:60:da:2b:20:9e:70:ac:54:49:fb:14:ce:78:
c2:ae:b6:84:2b:64:cd:0f:2a:08:94:70:f0:13:c2:
4d:06:61:ca:bd:44:de:01:18:f2:0e:90:1b:6c:5b:
96:79:8a:cb:62:d3:1c:08:38:fe:3d:10:50:a8:b0:
4f:da:34:4b:37:61:33:38:81:17:f1:f2:7f:5c:f2:
0f:98:cc:88:c6:93:26:60:8e:58:cd:76:58:32:d5:
9a:4f:80:4e:5a:08:ba:21:99:60:84:88:1b:0c:d0:
98:17:35:f8:38:10:52:17:2a:67:19:27:b0:7d:be:
7d:54:4e:c9:b2:0d:e1:59:0d:5c:ea:26:7d:5e:3b:
76:24:ce:32:0b:2f:92:31:3e:59:a9:b4:b0:07:c5:
24:45:16:a7:8f:6b:28:b2:53:9c:fe:69:1d:be:53:
7d:9b:c3:9e:a3:07:9a:9d:ec:df:40:bc:6e:19:3a:
37:96:02:42:1e:ec:59:99:12:3d:c1:9e:55:10:c8:
b0:31:73:a9:1e:be:17:5a:b6:83:7f:dd:ad:d4:15:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:52:25:5D:92:3C:67:E9:B0:11:75:25:D3:63:71:A4:64:EA:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:a1:59:80:1a:f5:b8:7f:1d:3a:c2:57:09:c9:13:d4:0c:1e:
8f:1e:cc:2d:e4:c4:94:92:c8:e3:0d:64:ab:50:64:aa:c7:d0:
fe:18:c1:01:b9:78:f1:4c:16:41:2f:7c:91:6f:3f:66:31:c4:
f7:db:04:5c:c3:d0:f3:9b:7a:91:f2:f5:d2:a6:7a:87:3f:e9:
ee:75:0f:3a:ea:f3:35:58:e1:ba:9f:23:f3:a7:7a:e7:61:c4:
07:e6:67:51:55:c5:0f:71:41:d8:e7:ac:60:1f:58:d9:3b:cd:
72:26:95:7d:9d:6c:12:7e:e7:4d:c5:7f:6f:fa:bc:81:02:ef:
07:ce:c8:52:c1:b2:54:82:67:1b:72:e5:14:60:45:b2:9c:5b:
35:39:59:d1:0e:08:c5:d1:5c:67:8d:0c:6e:23:b4:c2:6d:a3:
05:a7:c5:68:e6:cc:fd:b9:e1:32:01:d2:32:c2:41:7f:df:6e:
5a:a5:8f:99:e4:f9:7b:9d:0f:a3:ad:fc:63:9c:59:ee:6e:2d:
92:86:c0:e2:0c:07:ab:76:8f:4f:86:71:18:69:73:74:f0:ce:
a9:db:0c:eb:49:59:44:38:19:b0:1f:d9:d5:66:e9:98:d0:51:
f0:ef:c9:7e:a7:60:b2:fc:2c:a0:1d:38:f9:b7:5d:60:95:9c:
3d:3a:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:11 2025 by rpki-client