Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98d88ba5-4974-477a-aab7-643f31122ab0.roa
File: 98d88ba5-4974-477a-aab7-643f31122ab0.roa (raw, json)
Hash identifier: lJkkgcuxkwcM0WMZhxV1F89OCZMHq3DSGfHQt6hvtGc=
Subject key identifier: F6:EC:13:4C:D4:51:A6:FF:F8:18:10:C6:4A:D5:A0:34:1A:43:95:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E73C696FB38BE632BFF9750554A4B96F9CA3324
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98d88ba5-4974-477a-aab7-643f31122ab0.roa
Signing time: Tue 28 Oct 2025 00:51:32 +0000
ROA not before: Tue 28 Oct 2025 00:51:32 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 65.176.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:73:c6:96:fb:38:be:63:2b:ff:97:50:55:4a:4b:96:f9:ca:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:51:32 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=8eece15f6a2c3b543a2fcd3693bfd1ca1913cbdd002eea817d11ef08174a6bab, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:1b:42:a5:e5:25:94:c6:f3:af:7d:63:19:
5f:0f:d5:f0:40:20:ab:62:9c:b3:37:b6:4b:e0:d9:
75:1e:23:a1:08:2d:ca:ce:5b:72:59:36:ea:c4:06:
71:25:60:7d:ea:fa:91:2b:6d:cd:8f:49:aa:31:31:
61:d7:28:b7:55:eb:5a:d8:8d:89:78:a0:50:67:f3:
af:7c:a0:47:71:6b:6e:e7:79:74:3d:bd:f1:51:44:
80:e8:20:0c:fc:cf:6a:77:15:7c:7d:e0:ff:33:ba:
c6:b9:55:09:51:91:0c:01:dd:e7:54:ad:38:fd:ac:
bd:f3:84:c3:bc:25:12:50:40:20:a3:6b:19:61:77:
3b:9a:0d:b2:b6:8e:a4:60:0f:5f:8a:f1:0d:48:6e:
a8:30:db:27:49:de:a4:bb:4e:f5:63:3f:bd:c2:60:
20:65:7d:0e:3a:50:96:80:06:6c:4f:bf:f1:c8:c7:
da:d2:09:36:62:fe:17:92:5c:68:b4:81:02:14:ff:
cd:f9:58:28:2d:96:3a:ab:a0:27:f0:f0:63:ab:7e:
f0:55:c6:83:e5:41:26:a7:2b:63:8a:1b:33:d6:36:
48:8e:67:af:f0:a5:a6:c3:10:78:a2:a1:40:d8:02:
c0:33:5f:21:00:db:8c:c3:c1:25:6b:b8:1e:7e:b9:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EC:13:4C:D4:51:A6:FF:F8:18:10:C6:4A:D5:A0:34:1A:43:95:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98d88ba5-4974-477a-aab7-643f31122ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.176.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3b:2e:50:4d:18:94:72:8e:a4:0b:2b:c1:bc:89:07:57:89:fa:
a8:33:fe:a5:26:ca:5d:d9:3d:e0:f0:92:15:9d:9d:15:ea:4e:
09:6a:f9:07:dc:28:0c:69:02:e6:da:f5:76:1a:2e:01:a7:ef:
d3:c1:70:7f:25:38:5a:44:4c:c3:96:34:7f:f2:c7:93:9c:42:
fb:7e:c5:7f:5d:8c:1f:25:71:bd:78:e0:f9:6b:c1:97:f5:ea:
f3:d3:ec:5f:05:3d:b3:7a:eb:a6:b8:8c:7e:66:e3:58:20:8c:
78:b3:b1:c5:46:40:57:d1:2a:81:02:16:f3:ba:4c:46:fc:10:
9d:ce:e5:c2:55:3a:56:e8:3d:2d:04:92:e8:bf:d0:95:ef:c9:
0c:5b:57:4d:da:65:94:02:b5:b4:40:47:6e:4a:31:c4:0f:65:
60:9d:9b:93:05:85:69:6e:62:10:35:38:59:aa:7f:dd:54:88:
ee:3f:93:eb:19:ca:1e:8a:60:ec:d5:bb:e8:85:df:89:b7:02:
70:5b:10:ef:0f:b3:ef:19:96:b7:02:fc:bf:51:ea:09:23:0d:
7e:9d:80:16:61:c5:d9:99:d5:ba:b6:cf:51:fc:8c:d5:ea:54:
41:d6:26:08:27:5b:79:df:7d:81:24:78:01:b5:cd:55:b3:50:
86:1b:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:57 2025 by rpki-client