Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a90b50e7-2729-47d9-b938-a8bafbfa8fdc.roa
File: a90b50e7-2729-47d9-b938-a8bafbfa8fdc.roa (raw, json)
Hash identifier: 24DdBrT5g9CQdSEpB01dTxUCbQj74Yf35ZJ/jm8rtXo=
Subject key identifier: 80:8F:2E:C2:3B:06:F5:D6:05:FA:CF:19:C1:6F:48:77:62:58:04:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B88E5199B50499BEA21C92D936C9F07B05DDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a90b50e7-2729-47d9-b938-a8bafbfa8fdc.roa
Signing time: Sat 25 Oct 2025 00:20:48 +0000
ROA not before: Sat 25 Oct 2025 00:20:48 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:88:e5:19:9b:50:49:9b:ea:21:c9:2d:93:6c:9f:07:b0:5d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:20:48 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=c130c16b04f6cecbf12f816abdcad80f5934500aab6e8856792606b34aeb7e20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:82:ab:5c:68:42:8a:a5:26:66:e0:74:62:
0a:e2:f3:66:17:5d:14:ac:93:31:d5:eb:7c:5b:c5:
db:43:47:43:3e:db:59:94:6e:87:28:a3:4d:87:b4:
8a:36:79:5d:69:ee:72:3f:ad:a2:8f:74:93:25:1c:
1f:f9:f1:41:37:fe:a4:ff:dc:b9:81:9e:32:ba:85:
cb:25:14:1d:7e:c0:0f:19:f1:cc:50:ea:f3:cb:ea:
4c:1b:2f:9c:d5:93:79:9f:a4:da:b1:2f:8b:b8:14:
e7:31:19:64:ac:af:5b:43:4f:76:b0:84:fc:62:64:
ce:8b:4b:9c:de:cc:8f:d5:ba:16:9a:4a:cf:dc:fb:
ee:ae:10:a8:38:a1:0d:a3:a2:9c:5b:f3:eb:88:be:
34:70:8a:2b:eb:d6:7b:8e:7e:63:fb:b3:b4:06:f9:
9b:48:89:61:e7:31:fe:17:e5:49:24:87:d3:23:a9:
dc:0d:46:4c:71:69:c2:c7:64:ac:95:96:b4:3b:c5:
60:58:b5:77:b0:17:f4:fd:3b:81:8e:61:4c:dd:6d:
b5:ea:d8:95:60:3d:9b:82:ec:d7:dc:10:fe:62:9c:
be:4b:4f:59:bf:c4:02:ea:ff:07:05:09:8b:99:00:
5b:6a:ca:1a:f2:00:65:13:a6:1c:84:e1:c9:5a:25:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:2E:C2:3B:06:F5:D6:05:FA:CF:19:C1:6F:48:77:62:58:04:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a90b50e7-2729-47d9-b938-a8bafbfa8fdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:26:06:d5:e5:aa:5a:fd:02:65:02:28:41:cd:2e:9d:60:a8:
40:a4:38:e3:04:1c:39:24:19:eb:cf:48:a1:28:16:8b:68:16:
cd:67:22:13:9a:f1:c9:c4:f3:c3:3f:d4:0d:25:6b:1a:54:20:
15:e7:58:86:cf:4c:55:67:46:c9:ef:4f:cd:58:ed:a8:3e:6e:
25:e6:fc:79:63:1e:38:06:fe:1c:1f:84:7b:be:1f:0a:07:66:
6a:32:59:72:99:c8:6e:cd:37:79:52:f9:34:15:9c:03:1b:ca:
98:89:83:83:5a:9d:ea:c8:c7:b7:ec:01:d1:95:ff:38:ff:bc:
75:10:0f:8c:39:05:1c:c7:c7:22:12:b1:9f:7f:8e:23:68:7c:
e1:66:5a:94:5f:65:96:6b:bb:ba:0b:ee:29:06:54:dd:c6:a5:
f9:81:b8:14:49:30:70:a2:f3:df:af:b8:33:ab:8c:6e:5f:c9:
5f:79:28:49:6b:23:78:2c:e1:74:ba:e4:bd:d1:21:3b:ae:5e:
86:46:f5:a3:7e:cd:3c:83:e7:a2:c1:87:ef:77:92:cf:5d:08:
e0:2e:ae:1d:ae:87:3e:a8:82:af:cf:1c:40:53:d8:de:63:75:
5d:41:30:0a:7f:45:7b:96:91:66:6c:d1:9d:27:50:0d:8f:a8:
fe:6c:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:09 2025 by rpki-client