Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa
File: a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa (raw, json)
Hash identifier: J+RmAO2UVrjAmuleepaPkII8UeDJW/U5RwhGkfFSvr0=
Subject key identifier: 88:F7:83:64:3A:D2:AE:D1:73:D5:4A:11:27:16:E7:87:5B:59:D1:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B121BD200609FD1D62E6BB3E6F2D0B1B60D2079
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa
Signing time: Sun 02 Nov 2025 00:20:04 +0000
ROA not before: Sun 02 Nov 2025 00:20:04 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:12:1b:d2:00:60:9f:d1:d6:2e:6b:b3:e6:f2:d0:b1:b6:0d:20:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:20:04 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=98e14d811d52bcfbfbab4849a6b253827502b156657f1c76fcc9aa0a265f1fd3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:d6:a2:fb:17:ef:3d:d6:57:b1:38:9f:de:
44:b7:d9:a5:94:6b:ff:2b:d8:e9:7f:14:f3:d4:78:
7d:7f:eb:c0:3f:a4:dc:7f:6a:de:e9:c4:67:9f:f8:
44:66:7c:ab:7c:b1:fb:66:ee:da:e8:ad:a2:f8:e7:
05:4d:ba:86:4f:13:17:9c:29:4a:31:52:5f:c0:b8:
7d:03:93:af:7c:88:a8:72:80:b9:75:51:52:1a:cb:
2d:e3:ea:37:1a:a9:b3:dc:60:21:87:46:b6:7a:a8:
a3:10:14:73:e8:5e:30:8a:25:d3:2b:f2:fb:e2:9b:
27:67:0e:86:7f:79:60:da:b3:95:5a:e1:fd:b4:8b:
18:86:f2:09:ae:a7:81:34:04:a5:44:d4:11:6a:e5:
bc:2a:11:c9:f6:29:c1:59:18:25:57:e0:a3:cd:9d:
6c:99:63:3a:bc:f3:00:f0:e1:27:d1:e3:3e:06:10:
5f:34:24:46:1e:86:27:11:ab:65:3e:bc:9b:c3:02:
89:13:ab:1c:fc:f2:c6:aa:2d:c7:69:75:6a:1b:7c:
5b:21:47:3f:51:61:2a:a0:f6:af:56:a8:9d:69:14:
85:94:d9:d6:89:e1:86:77:39:ad:f2:fd:71:ae:8b:
38:d2:07:22:dd:07:8d:00:88:eb:24:08:57:5f:dd:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F7:83:64:3A:D2:AE:D1:73:D5:4A:11:27:16:E7:87:5B:59:D1:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:3a:be:b0:9f:6a:3d:e2:3f:25:38:c2:0a:c5:01:88:62:53:
cb:be:42:2f:6f:7b:f4:a8:3d:f6:a9:fe:0c:4e:d8:8d:65:3a:
f3:ff:cb:61:ea:06:f6:21:2f:61:a9:b5:38:25:80:55:be:72:
ca:a6:68:19:07:fc:a3:ca:09:81:8c:2f:1c:49:16:56:c9:46:
ed:eb:7e:ea:eb:7a:dc:24:a9:c5:80:b5:b9:f6:c4:23:0e:7f:
a4:5e:a2:78:52:b1:6d:4a:dd:ca:32:b6:1f:8c:99:84:2c:74:
f0:9a:96:b5:8f:96:5b:09:b4:e1:9c:85:7b:5f:17:75:50:f2:
e5:e0:63:31:36:47:90:26:fc:5b:f1:ce:81:f2:26:56:9f:fb:
67:a2:49:d6:5b:3a:0f:17:3a:9c:6d:31:a7:21:e4:6e:bd:d3:
e0:d3:39:f5:c4:46:01:27:3f:ef:f9:dc:c8:91:6f:28:4e:7a:
d9:8e:a2:2a:62:a8:d1:be:53:ac:63:80:10:48:3a:bf:71:db:
24:be:93:1e:e1:a0:fc:63:37:98:19:0b:b2:be:2d:e5:20:d6:
28:57:2d:f9:1e:7f:06:cb:82:2c:4d:10:1c:96:3b:a8:72:29:
9a:47:7e:2a:8e:93:07:a2:69:01:d0:26:f4:17:52:8e:84:91:
00:85:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:00 2025 by rpki-client