Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be4ecaa1-13a5-4df4-99f4-b0a3939301bc.roa
File: be4ecaa1-13a5-4df4-99f4-b0a3939301bc.roa (raw, json)
Hash identifier: eFU39chlv079NfRXsXrHMfRWZBc4fTtokDexhmSKwzM=
Subject key identifier: 47:E1:13:8B:6B:A3:3B:39:E0:8B:50:AF:BD:1A:6A:5F:0E:89:FA:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07A6EF61FC09FC861090DE13F79374CA088EC5C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be4ecaa1-13a5-4df4-99f4-b0a3939301bc.roa
Signing time: Sun 26 Oct 2025 00:10:09 +0000
ROA not before: Sun 26 Oct 2025 00:10:09 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a6:ef:61:fc:09:fc:86:10:90:de:13:f7:93:74:ca:08:8e:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:10:09 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=de0ad148274a808c8a67a1b1dee3b5cd05c46083b6b8e0ba473066cdb92518d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:f3:54:5a:5b:56:c0:40:65:30:ad:4a:ea:
1c:7b:c4:da:0f:b1:75:a9:53:6c:13:63:63:45:e9:
23:53:12:59:46:5b:f1:11:67:ea:bc:9d:56:ee:9f:
7f:42:17:e7:23:d3:b2:65:c2:e3:76:df:4a:14:fc:
db:d7:60:ae:9f:50:2b:ce:42:20:23:ee:f2:be:df:
2a:47:d9:88:72:77:4e:4b:4a:54:96:61:22:20:42:
29:95:3d:ca:e2:cc:a0:cc:93:72:b0:ac:e6:77:37:
b5:43:79:c5:ea:40:ba:dc:70:73:1a:2c:85:ff:1f:
a4:47:8b:e8:04:b5:15:ab:3a:45:a6:83:6b:38:61:
dc:49:f9:69:82:d4:56:a9:0c:dd:f1:be:bb:86:6a:
0d:cc:37:12:e8:88:30:55:ff:83:e6:f3:b7:80:5f:
b3:ee:b0:36:b4:59:ce:b4:a8:ff:5f:54:d9:43:8f:
b0:a8:5d:38:29:66:94:6d:e4:f2:a1:22:d8:69:b8:
ea:ed:4e:60:0c:09:2f:0b:1b:42:e7:49:f7:6e:e5:
33:cc:50:a6:e3:9a:5d:76:0b:f4:eb:4c:8f:96:98:
bf:6c:34:c0:0c:1e:74:89:cb:f8:eb:9a:03:ce:c2:
ed:2f:a9:56:ea:2d:4b:80:43:ca:58:c1:23:cb:4f:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:13:8B:6B:A3:3B:39:E0:8B:50:AF:BD:1A:6A:5F:0E:89:FA:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be4ecaa1-13a5-4df4-99f4-b0a3939301bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.102.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:3d:ac:d2:29:ba:17:d9:25:11:c3:62:c0:b0:62:66:a8:ea:
27:0f:c7:e8:5e:89:81:47:ae:b9:16:8d:56:21:de:2a:61:13:
75:84:62:5b:34:c2:a9:3d:50:d8:fb:d9:9b:0d:99:f6:b0:2e:
4a:9b:96:de:48:21:78:20:f0:86:cb:bb:ea:34:80:43:be:38:
d7:14:11:83:7f:10:96:ab:dc:f7:1b:22:ba:59:1e:02:31:1b:
8a:3a:82:d1:9d:20:7e:47:8e:c6:5a:5c:81:2f:15:ec:ab:30:
da:1e:df:84:91:3a:45:ad:bc:51:2b:18:af:18:41:54:c8:d6:
ab:2d:eb:9b:fc:b5:47:35:ea:f8:2c:7b:ca:8e:5b:f0:b7:73:
42:c0:1e:17:75:c4:be:99:16:da:5d:02:a2:77:78:95:78:c0:
da:b9:13:8b:2e:9d:0a:bc:92:1f:6a:1a:d6:f0:47:a1:21:ac:
03:54:dc:27:ab:8b:f2:b2:e5:cc:42:62:f0:b6:bd:8d:81:04:
a3:49:10:fb:cf:94:72:68:c2:63:8c:87:76:1c:33:7e:cc:bf:
7f:88:e0:d9:ed:e7:de:de:11:c1:67:20:81:d0:c7:12:c5:bf:
5b:61:5f:3a:d1:ab:07:af:4f:3c:ce:38:b7:04:0f:ed:ac:57:
f5:26:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:14 2025 by rpki-client