Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
File: a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa (raw, json)
Hash identifier: KSP5pN6m9UI9hb5qsZGT8fcdRoj2btxfi/M9WZGooKY=
Subject key identifier: 5D:1E:17:02:04:2B:84:B8:AA:EF:7E:F2:06:95:84:D3:39:94:E1:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 589AF36E91FE399100559A27E1EC74F7D3D60D8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
Signing time: Wed 05 Nov 2025 00:10:47 +0000
ROA not before: Wed 05 Nov 2025 00:10:47 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.246.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9a:f3:6e:91:fe:39:91:00:55:9a:27:e1:ec:74:f7:d3:d6:0d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:10:47 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=257165a241820faaa394f8a13187d251fac58fcdf428833499fc3ec47ec56286, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:47:c3:cb:ad:30:d8:ba:d2:60:ec:b3:e3:
3b:69:11:f9:3c:98:ac:86:4f:be:5c:1e:6f:3d:64:
26:71:0d:45:ea:23:8b:2a:cf:55:bd:98:1f:4c:65:
46:2c:13:b4:59:d7:15:03:1d:16:64:1b:81:8c:2c:
75:60:11:4a:66:8f:3e:b2:dd:b3:49:00:c6:51:14:
e0:49:92:8b:b5:08:4b:db:9a:f5:45:d4:d9:0c:dd:
c2:96:fb:12:b9:20:c0:50:ab:17:5e:69:cf:df:36:
ed:4c:73:5f:3d:d2:ab:9b:7e:be:14:3b:23:c4:9b:
76:46:bf:20:81:f7:e6:f0:86:d7:03:30:ad:0e:80:
82:67:8d:cd:87:f3:34:95:6d:a7:e3:9c:5e:4f:a3:
e3:24:ae:2d:03:06:80:84:39:37:94:05:5a:8b:fc:
e6:2e:19:ab:c1:be:a7:0a:fd:f3:9e:69:81:ba:48:
2a:da:26:e4:38:60:6b:85:ce:cf:49:f1:e8:35:c5:
ea:a2:4c:89:6b:3a:73:6e:06:0a:a7:7d:f9:56:d6:
66:90:dc:47:e9:48:5b:8d:6e:ca:2f:df:8f:aa:51:
3f:78:13:64:d9:fe:f8:05:d4:35:1f:81:21:fd:48:
bc:c6:aa:c6:e3:67:c2:ec:62:9b:00:4b:9d:e6:ba:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1E:17:02:04:2B:84:B8:AA:EF:7E:F2:06:95:84:D3:39:94:E1:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.195.0/24
Signature Algorithm: sha256WithRSAEncryption
36:37:e6:0d:53:d5:4a:7d:69:b4:b3:13:d1:54:de:6b:9d:e3:
0c:0f:d3:3d:81:e0:f1:09:93:e9:c9:c3:98:29:9b:87:4d:8f:
ac:79:74:fe:ef:93:d7:d2:21:5f:16:7f:b5:40:e7:ce:95:26:
d5:c0:66:8e:c3:85:34:32:0a:3e:30:30:17:90:3d:ac:d4:8c:
4f:24:6c:d7:99:43:5e:7e:11:0f:0b:24:cc:38:0f:65:cf:00:
e4:5e:5d:66:68:a8:74:c3:31:1d:7c:de:30:af:66:b5:eb:5d:
f0:40:6e:fa:84:45:59:62:58:6b:80:c1:7e:28:6e:ce:d1:9e:
81:c7:50:94:33:c2:6f:39:1c:ae:62:35:f0:fe:a7:ce:ef:37:
49:46:b8:5a:f2:9b:08:92:e3:74:02:02:84:0d:55:ee:a4:66:
37:c2:71:d1:30:53:0e:1f:da:5e:b2:bf:ed:98:a4:81:bd:06:
8d:f9:87:eb:96:00:bb:50:dc:7c:28:ab:70:58:0e:7d:f2:bb:
27:e4:34:30:d5:e7:0e:4f:4c:bc:31:16:f4:60:4a:19:ba:cc:
84:c6:6e:ab:fd:32:28:0d:94:05:7c:2b:8f:46:6d:a0:ec:46:
f8:78:90:51:80:f4:9f:18:5b:79:78:6a:a6:09:46:5f:20:20:
67:73:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:41:29 2025 by rpki-client