Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84e6874c-07ac-4922-884c-207aa2ad4b6b.roa
File: 84e6874c-07ac-4922-884c-207aa2ad4b6b.roa (raw, json)
Hash identifier: zGjLI4uSymzpOEEYqXeCZ7IQ35kkb0T2IpNeXmhJQQw=
Subject key identifier: 6E:8C:54:03:E9:88:B6:F6:59:E6:97:64:CB:7C:F9:35:8F:1A:EA:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48FB5C4B6682348CDC2CA690E8D721F3B49B7CB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84e6874c-07ac-4922-884c-207aa2ad4b6b.roa
Signing time: Sat 01 Nov 2025 00:50:06 +0000
ROA not before: Sat 01 Nov 2025 00:50:06 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.72.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fb:5c:4b:66:82:34:8c:dc:2c:a6:90:e8:d7:21:f3:b4:9b:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:50:06 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=cbc95a2f6f0827880bda2477e1d20fc2334a906071fbe98562ea27030a1bd198, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:be:d6:31:ee:6f:ca:bb:e1:ed:88:1c:94:
36:82:32:7a:42:2f:d6:b5:98:75:58:98:75:90:a1:
e8:ac:f5:93:38:1d:86:98:f8:dc:b8:12:2a:fd:54:
d6:81:f8:d8:35:27:ec:b5:60:41:eb:dc:36:cc:38:
c2:dc:92:ec:fd:9c:67:04:49:3c:8b:1d:49:e4:88:
07:e6:ad:0a:9d:81:f7:52:1f:16:2b:91:df:7c:4c:
4b:ff:75:29:70:f9:ac:1b:c1:91:ad:4a:51:dd:77:
7e:7e:13:da:e7:01:a4:52:d0:fd:99:3b:30:71:9a:
14:c2:8c:9b:cd:5c:da:cc:74:6f:94:85:76:d0:95:
28:a2:b1:db:e8:eb:bc:64:8c:da:90:d4:6e:6a:20:
7c:c5:8e:25:e4:9f:b9:70:ba:83:21:39:1b:14:a3:
92:d6:10:8a:51:76:86:9c:a3:62:1d:72:88:6a:38:
b9:d9:96:74:a2:20:b7:d1:0a:c3:57:c5:74:8a:56:
12:bd:5c:e0:6d:bc:bc:5f:67:02:cc:e9:54:46:31:
ff:9c:36:08:12:4a:e9:0a:37:cc:39:5a:5b:04:7b:
c8:e2:e4:8a:d1:17:a2:55:b6:8e:df:0c:0f:ad:60:
a2:95:4d:1b:7c:31:6d:7a:02:25:0e:0e:75:32:a5:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8C:54:03:E9:88:B6:F6:59:E6:97:64:CB:7C:F9:35:8F:1A:EA:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84e6874c-07ac-4922-884c-207aa2ad4b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
69:9b:b5:9a:09:76:8d:3e:4e:08:fe:b6:e1:56:8c:d4:ac:7d:
ec:54:67:85:d6:84:78:db:d7:e8:a8:2c:3a:37:51:48:11:a7:
9f:a7:b7:25:dd:55:e1:67:ab:33:70:01:8f:af:0b:9f:b4:3c:
02:39:da:0e:b9:6e:2d:fc:d4:33:51:19:da:36:77:fd:c2:38:
46:14:f6:a7:f2:20:fa:aa:43:f7:83:2e:6f:bf:30:27:d9:17:
50:56:42:34:95:7a:bb:4b:4c:08:8e:5c:4c:e4:a1:2d:c7:df:
47:6a:6e:d1:7e:6e:1f:4b:62:93:98:9f:42:1a:89:a7:10:42:
b4:13:73:2e:b8:5c:eb:fc:74:93:2f:98:63:77:e6:ee:4c:45:
f1:2a:59:43:8e:0f:ab:1e:15:e0:5c:95:6b:6e:81:6d:64:b5:
7a:ac:2f:49:fd:04:90:3e:a7:11:17:35:98:13:0a:3b:fa:d9:
fc:e7:a2:5c:bf:36:ed:80:d0:30:39:79:9f:dd:3a:a0:88:1e:
5c:d1:0a:9f:be:3c:11:05:b3:f8:d4:96:62:ac:86:cf:30:ca:
61:7a:21:02:c4:f8:80:d6:b8:e2:20:e9:78:d3:57:39:73:a5:
46:b2:4a:93:af:2d:22:8d:52:29:a8:c9:f9:36:39:21:d1:f6:
a1:62:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:50 2025 by rpki-client