Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f31560-1f77-4723-98ea-9af688a74f3f.roa
File: b3f31560-1f77-4723-98ea-9af688a74f3f.roa (raw, json)
Hash identifier: q3hjhqHPRH+8E42xdGmUNTnhX/42Gt3jORnzPK0+728=
Subject key identifier: 11:E0:51:11:A3:D0:CA:22:B0:00:66:1F:7E:29:C2:2B:96:21:C3:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 23527E84283C1AAA7FD5CBDF283B1D3E71EE82EE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f31560-1f77-4723-98ea-9af688a74f3f.roa
Signing time: Wed 22 Oct 2025 00:00:57 +0000
ROA not before: Wed 22 Oct 2025 00:00:57 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:52:7e:84:28:3c:1a:aa:7f:d5:cb:df:28:3b:1d:3e:71:ee:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:00:57 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=37e4b8ed52a735c15c650aad1e23ffa8f35ed1d1f6e37be5e061618c68efc05d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:36:ee:70:00:40:c2:eb:72:ec:bd:68:74:
a6:44:6b:0e:c9:5a:fb:e4:75:95:71:b9:c2:b5:72:
d0:c8:d0:a1:30:7c:ce:b2:0d:47:09:bb:cb:ac:c7:
40:88:8f:09:a9:90:51:1a:2c:ce:7e:79:23:1d:be:
1d:e4:3f:d3:3b:84:f4:05:b8:4e:ea:51:31:b8:87:
11:bd:84:ed:0e:fd:cf:0e:08:a9:cd:5c:d8:60:51:
ed:17:cd:9f:a4:36:27:d6:7f:26:69:a9:7c:b0:be:
ca:ef:16:64:4f:04:56:1b:c9:d7:75:5f:0c:e1:e4:
23:75:d3:2c:c9:b4:35:7b:0b:2a:88:a9:86:39:e6:
0f:e4:4e:8f:ca:7d:f8:1c:25:64:10:26:b8:5e:ea:
07:f7:c0:20:f7:e2:c2:ab:ce:06:8c:e6:16:c0:92:
a6:91:20:23:92:f7:d8:82:dc:55:a1:ab:21:ae:3e:
23:c3:97:21:8d:72:c5:65:2f:20:e3:a5:e2:ae:14:
a8:90:4f:29:32:50:ce:86:58:3a:f5:81:93:76:58:
2e:f4:94:58:3c:65:f1:1f:d3:fc:63:ca:64:73:17:
08:27:bc:ba:3e:ed:63:9d:64:c4:d4:5d:45:90:67:
cc:0f:0b:89:43:43:73:43:e2:d2:a2:ae:9c:03:a3:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:51:11:A3:D0:CA:22:B0:00:66:1F:7E:29:C2:2B:96:21:C3:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f31560-1f77-4723-98ea-9af688a74f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.100.0/23
Signature Algorithm: sha256WithRSAEncryption
75:73:db:cb:2d:2a:7e:9c:8c:16:4b:4c:fa:9a:19:ae:f0:a3:
a9:b0:99:63:dd:4d:94:ff:eb:a5:75:d4:61:35:28:33:33:54:
56:17:de:be:07:4d:df:3f:15:95:02:4d:2b:86:74:d5:7b:dc:
f1:72:c7:44:a4:f3:f5:01:16:17:e5:ba:5c:b7:7b:d3:f3:91:
d5:ac:45:1f:23:0e:b8:e7:f8:c7:cc:e0:02:bc:b3:f3:50:e2:
67:e2:2e:8d:f0:32:39:ba:82:02:18:68:e0:c0:2a:7a:99:0e:
9b:9d:2c:9c:e6:31:4d:f6:88:8c:28:6c:20:38:a3:ea:58:e5:
c0:d9:f0:04:fa:ea:c1:48:7a:8b:3d:8e:11:25:97:d1:d7:bf:
f0:b3:04:59:0e:fe:ff:8d:e4:05:bb:e4:c1:7b:28:18:cc:00:
6c:a5:e7:cd:9d:a4:fc:1c:88:ae:8b:70:4c:fb:90:ad:3c:75:
4c:36:0e:a7:80:42:33:c5:a1:35:90:34:9b:46:56:b5:22:88:
b7:55:47:ee:b1:15:e0:97:31:e3:d2:ae:1a:3c:1c:92:ff:da:
2c:35:26:6b:27:8e:ec:67:00:68:dc:58:27:6f:fc:16:99:d7:
fd:1d:4a:7d:55:7d:34:52:2e:7a:6f:76:15:fc:d5:8e:ac:b5:
85:1a:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:31 2025 by rpki-client