Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa
File: 8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa (raw, json)
Hash identifier: qOFwBRxDKF9rN2+ayThEcXU04QVFukO2PhDgRGpPRuU=
Subject key identifier: 52:20:A0:D9:31:EF:01:66:E3:E2:9E:51:24:9F:A9:3C:ED:53:CF:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4023BF270938A2BA28E5845CF0ADB72939539558
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa
Signing time: Sat 01 Nov 2025 00:50:57 +0000
ROA not before: Sat 01 Nov 2025 00:50:57 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 184.73.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:23:bf:27:09:38:a2:ba:28:e5:84:5c:f0:ad:b7:29:39:53:95:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:50:57 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=5745f11f501978413daf7286c2ff65734dc783526a5397d17dde6292cfe06e41, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:3b:05:8d:1e:41:16:9d:af:36:14:e4:70:
60:a7:f3:81:41:5a:86:f2:1b:ac:85:a3:9c:cb:ed:
90:fc:aa:a4:90:41:18:e0:a4:d2:70:02:b4:fd:18:
57:d5:39:36:3b:29:b2:8a:4f:7f:f1:10:13:57:c1:
4b:b1:44:31:64:2a:6a:94:30:82:bc:9b:93:eb:96:
b7:35:9b:06:a6:6c:73:a1:60:e6:7f:ca:a0:c5:d3:
69:cd:56:94:58:ce:6d:28:78:31:10:ea:b5:90:2c:
0c:2f:30:e1:e3:ab:b1:7a:4b:16:45:a4:7e:57:92:
6b:09:43:f1:cc:cb:e1:de:54:9f:eb:4a:54:14:22:
4e:eb:c7:55:ee:79:5c:a7:62:df:0d:38:b8:05:3f:
d3:f7:82:e8:46:a8:c9:29:02:0a:7d:93:17:9e:44:
76:d8:4d:f6:44:5f:e6:9e:7e:b1:08:50:62:af:4c:
2b:f3:d0:79:f5:0b:94:ab:d6:fb:97:94:f8:c5:b9:
ad:ec:0b:79:ef:2c:4b:a9:fd:b3:19:08:1b:05:55:
c3:8a:28:6c:27:87:9d:f8:6a:af:65:ef:5b:57:31:
e0:7e:5e:14:6a:a1:35:f1:ab:36:dc:ee:f9:85:83:
42:9b:4b:97:11:de:43:77:da:54:d0:d9:11:e5:2a:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:A0:D9:31:EF:01:66:E3:E2:9E:51:24:9F:A9:3C:ED:53:CF:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.73.192.0/18
Signature Algorithm: sha256WithRSAEncryption
73:c5:03:7e:e5:fd:a6:a9:fd:72:13:e4:d9:9f:2d:61:f9:84:
3b:93:1c:b1:9e:38:81:6c:30:e4:d4:fd:e0:18:ef:95:9b:c7:
74:c1:8a:10:4e:ca:20:ac:d4:04:55:b4:85:a4:53:3a:19:f3:
51:90:4b:24:36:50:12:fa:43:ea:0e:d8:f8:35:83:1a:5b:b3:
27:b5:31:7a:b9:c8:23:22:ea:1c:73:04:8e:43:aa:4e:5b:36:
d9:d0:9b:9d:d3:99:6d:40:41:5f:de:08:a4:fb:56:0f:a2:31:
d5:82:eb:d4:9a:20:1c:72:b5:4a:32:df:a6:06:df:b4:91:20:
aa:30:61:ce:cc:3e:34:bb:04:0b:d4:96:ac:de:d9:f0:61:1a:
e0:19:94:53:f4:f2:c4:64:9d:b6:c6:4a:f4:27:c9:1c:1b:8e:
2c:dd:18:2c:18:da:dc:68:85:18:03:2e:fe:42:7b:80:81:11:
f2:e8:35:ef:1c:2f:87:31:dc:49:67:d6:3e:26:2f:8b:36:96:
80:ed:e5:e7:37:61:92:3b:c4:f3:e4:7f:cc:17:aa:87:94:3e:
77:9f:c2:ca:8b:7d:92:ca:4d:a7:7d:f0:57:13:96:8b:88:ea:
fb:c9:5e:88:1e:f8:4d:4d:8b:e5:a1:64:8f:e1:ed:4e:74:8c:
37:2d:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:35 2025 by rpki-client