Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b401d04b-cdc8-4264-95f7-fa0df2caa160.roa
File: b401d04b-cdc8-4264-95f7-fa0df2caa160.roa (raw, json)
Hash identifier: cMJdkuIJuA2nieSseU2y2rWWZ0t3XGbrDmkyhkf+CCI=
Subject key identifier: 57:B5:CF:C7:39:CB:33:46:E3:D4:C9:E4:C2:12:87:4A:F0:F2:25:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F36660C28CF92A23ED6267B1296DD97EBBDD0AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b401d04b-cdc8-4264-95f7-fa0df2caa160.roa
Signing time: Wed 29 Oct 2025 12:06:31 +0000
ROA not before: Wed 29 Oct 2025 12:06:31 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 114.56.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:36:66:0c:28:cf:92:a2:3e:d6:26:7b:12:96:dd:97:eb:bd:d0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 12:06:31 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=6bb3eb335306855ebf95fd68eb1ca0cf7f98e8b641cbd20cdddfefc9398a413a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:02:62:ea:23:dc:fd:b7:70:c9:7c:9c:dd:
fc:db:e0:fe:33:94:61:ad:3e:c4:47:a6:ae:b5:ec:
60:80:bd:92:b6:6a:eb:4e:db:0e:e1:74:12:0d:9b:
00:79:02:6f:1a:af:29:7a:cc:8d:62:42:8f:e5:28:
cd:8d:41:92:57:96:c7:7b:16:d0:b3:22:ca:55:3a:
94:dd:87:ef:e6:68:3b:7c:94:d3:3b:39:0b:8f:b3:
91:91:e5:0a:67:a9:99:c5:57:bb:f4:5e:a2:2e:66:
ce:0a:9c:de:7d:22:e1:ea:fa:32:4f:cd:af:36:4a:
20:3f:c1:c2:e0:bf:db:88:71:c2:79:21:bd:b0:9c:
06:c6:2b:4b:26:8a:ce:93:bf:c2:7d:ec:94:96:77:
1e:15:ae:ad:88:cf:f4:a9:99:18:ae:f3:f7:4f:fc:
ca:5c:37:f0:d8:ed:da:fe:cf:6c:be:ba:c5:61:1f:
aa:25:b0:11:22:17:cd:cd:bd:39:1c:32:64:86:41:
0e:19:07:08:38:ea:1f:cb:f6:56:ed:42:96:a6:6c:
91:7e:78:cf:c6:55:92:d3:d3:c7:8c:ba:d7:e8:48:
43:05:69:ba:51:36:ce:e4:26:9e:6b:a9:10:fb:e7:
df:aa:a9:d7:ac:5a:32:1e:44:82:25:54:15:b0:a3:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:CF:C7:39:CB:33:46:E3:D4:C9:E4:C2:12:87:4A:F0:F2:25:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b401d04b-cdc8-4264-95f7-fa0df2caa160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.56.52.0/23
Signature Algorithm: sha256WithRSAEncryption
65:f0:c1:84:b4:f3:2e:c6:de:c6:82:40:6d:72:d8:2f:bc:2c:
85:e0:ef:cd:0e:ec:d7:6e:07:e7:7f:96:94:3b:8e:3e:a1:b3:
12:43:e0:5e:68:45:99:58:c1:b5:7f:26:88:13:67:e8:61:f5:
69:4a:22:cc:5b:5d:1d:5a:5e:17:c6:ea:6c:76:72:48:78:ca:
8c:c6:64:71:11:77:93:c7:90:c8:c1:b0:da:7b:5e:0a:01:8b:
be:d1:b2:d7:1f:4b:ee:35:60:57:97:32:2b:1d:f1:c3:cf:ac:
28:b8:c6:7a:01:35:b1:8c:fd:71:2d:f9:8b:1e:29:a9:72:5c:
3a:a0:09:51:4a:32:ab:f0:aa:a3:e6:6f:eb:16:43:9f:b0:54:
ed:03:15:71:75:be:1e:fd:e2:a0:79:8f:66:b3:a5:eb:43:22:
b8:cb:eb:40:8f:45:f3:c6:87:4b:06:53:cf:d8:c9:fe:f2:70:
f6:e0:9e:f8:9d:12:11:5b:e2:f5:ed:43:8b:77:26:19:da:09:
66:12:d6:a0:13:8c:c5:33:5e:13:12:80:d7:9e:6e:bd:f0:92:
f0:46:63:7d:02:b8:9d:60:cd:e3:e3:28:2c:20:6b:7c:de:6e:
7e:63:dd:94:89:eb:b9:4f:c1:75:8f:5b:85:91:c0:34:8e:1c:
a9:51:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:39:10 2025 by rpki-client