Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa
File: ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa (raw, json)
Hash identifier: d1Wx3PHIHOZ7cnWLEqyKqbr0/6x2pCIVkDBrP1nc+gY=
Subject key identifier: D2:05:06:28:EE:98:2F:F9:BD:1F:50:FC:F7:14:F9:B5:E2:6E:AD:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 194240BA2CC03E699BEBB1AF2CC77B102F9469C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa
Signing time: Mon 03 Nov 2025 20:21:49 +0000
ROA not before: Mon 03 Nov 2025 20:21:49 +0000
ROA not after: Mon 08 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.140.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:42:40:ba:2c:c0:3e:69:9b:eb:b1:af:2c:c7:7b:10:2f:94:69:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 3 20:21:49 2025 GMT
Not After : Dec 8 23:59:59 2025 GMT
Subject: serialNumber=a36df5be31506bf500ed2e28514f223bee1b97c2630ee54dea17e82c271b01fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:49:d6:4c:ec:36:6f:ca:8e:f2:11:06:c0:6c:
fd:ee:43:99:d1:6c:46:20:b7:6a:dc:e4:47:f9:13:
af:9c:3d:79:da:fd:16:ef:8c:7d:9a:b6:17:1a:fb:
ee:0c:ea:58:ed:3b:06:30:6f:8d:c9:53:54:12:5d:
c3:1a:2a:b9:bf:b2:56:31:fc:da:20:12:37:1a:59:
d2:61:a2:80:a3:62:f6:37:0b:57:30:ce:c0:66:5f:
a7:5c:d6:09:b1:4a:0b:6f:54:ed:bf:29:0b:cb:69:
06:0c:33:49:76:33:f5:e3:a8:eb:be:87:b1:57:c0:
3e:c4:ce:63:55:51:03:9c:d3:0b:c8:a2:a2:d6:c4:
82:9c:9f:1a:45:96:b3:17:1f:dd:f1:92:bf:50:c4:
ba:c8:04:cc:1b:3d:66:4d:7b:b0:8f:1e:f6:5c:1e:
ab:46:99:c4:b8:9d:54:b6:c9:f7:4b:1b:b4:78:2a:
48:34:6a:aa:6f:56:de:5e:b2:a1:d4:3d:de:9b:b1:
42:80:d8:ff:77:b1:39:5e:e6:a6:76:04:c5:29:66:
20:5c:9f:43:7e:2e:08:11:7c:3d:e9:5f:14:71:b7:
bf:79:9d:9b:42:b2:3f:d0:43:0c:c9:d0:c8:d5:13:
79:99:04:ae:f5:de:7d:8d:10:2f:fe:cf:34:7c:ef:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:06:28:EE:98:2F:F9:BD:1F:50:FC:F7:14:F9:B5:E2:6E:AD:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.140.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:91:04:34:17:d2:1d:13:1d:c6:91:1d:84:19:c0:92:7b:04:
66:42:6c:3c:cd:2c:8f:86:f2:20:e9:4c:42:bd:c4:51:0b:2c:
4c:0a:41:ba:22:6c:86:2d:6f:a1:cd:58:c2:7e:de:da:3a:19:
74:47:7f:49:8d:de:44:9e:ef:bf:f1:0f:2c:f8:cc:c9:df:4a:
89:0a:f6:1b:3a:3c:e2:44:3d:1f:72:9c:0a:35:d9:62:e0:ce:
c3:33:f2:2f:ee:31:19:c8:d1:e2:60:92:79:af:ca:b0:54:25:
bb:58:b9:f3:35:2f:cb:fb:43:6d:b6:a7:1a:0f:af:e2:71:16:
96:7e:57:1c:a1:43:c0:e5:53:05:79:0d:6f:bf:3e:96:1b:bf:
07:d7:d7:c2:09:06:0f:27:3d:3e:bf:35:c2:76:24:2a:c0:10:
cd:21:d3:7d:72:fb:43:0f:8f:1b:e3:13:f4:83:42:3a:e0:04:
00:4b:02:72:4e:08:ce:03:f3:8a:05:bf:19:b7:e1:53:d9:8d:
b2:25:ff:53:0d:69:bf:23:35:df:78:18:49:ce:e0:d4:ba:14:
cc:b0:11:0b:61:8b:67:17:b9:95:c8:c0:9d:5f:18:2f:fe:93:
8d:1a:44:3d:16:95:aa:4d:34:cf:93:a7:a7:fe:06:fc:9c:21:
90:9e:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:46 2025 by rpki-client