Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa
File: c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa (raw, json)
Hash identifier: NfcHFAIMBN5US1i0WSK6Af8rh+CR3BI5ZqKtr5Ypd7k=
Subject key identifier: C6:86:20:B6:55:7B:1F:BE:9A:9F:AC:05:9C:45:EE:E8:0A:15:A0:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 780FFD4DF66E510CA0DB9FDC20C3C7C57D1E90E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa
Signing time: Wed 22 Oct 2025 00:30:58 +0000
ROA not before: Wed 22 Oct 2025 00:30:58 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.234.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0f:fd:4d:f6:6e:51:0c:a0:db:9f:dc:20:c3:c7:c5:7d:1e:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:30:58 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=15f6eb0cff694fdcd9442b541ff19f1cea36b8456b8a28e59475ae472c6aec4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:cf:bc:33:0c:18:9e:f0:4a:5c:35:51:4f:
8e:9e:34:75:22:18:43:db:99:ab:f8:ac:61:f3:06:
c9:1f:66:8f:72:5d:6c:f3:7f:5e:0a:c5:dd:90:c7:
5d:15:16:e3:fa:57:1e:51:3f:52:b4:25:cf:f7:e8:
30:c2:22:99:19:3b:7d:25:32:20:26:9c:82:79:9e:
92:a9:d3:64:0d:fb:26:07:82:32:7c:53:37:b1:05:
e5:49:6b:45:92:16:5b:92:fa:88:26:b2:19:cc:57:
8c:2b:07:3c:c0:11:73:b4:77:43:21:7e:85:b3:f3:
ce:1d:75:67:de:ca:60:c6:0a:37:7b:d7:5f:b3:86:
f3:42:48:a0:93:81:7c:d4:b4:bf:1b:4f:87:0f:04:
b5:50:64:57:e0:50:11:4c:88:60:83:6e:16:62:56:
b2:26:69:c7:21:b6:31:f2:35:cd:4c:a6:62:ac:08:
d9:ea:5c:ac:24:f8:be:36:db:7b:00:6c:ad:de:77:
86:3e:a4:e1:9f:83:35:62:1e:f5:d5:da:d4:3e:57:
2e:72:c3:9b:82:a4:d4:fa:ef:72:4b:7b:7f:dc:83:
15:bb:4e:a1:a8:5e:3b:e1:b6:84:d1:f7:5e:22:06:
a9:4b:bb:5f:a6:11:9e:4f:64:b5:4f:64:a6:2e:21:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:20:B6:55:7B:1F:BE:9A:9F:AC:05:9C:45:EE:E8:0A:15:A0:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.234.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:08:c7:9d:4b:50:87:49:b6:96:a6:2f:6c:41:04:01:fb:ab:
e0:09:40:a0:65:1c:02:ad:f5:e3:fa:47:71:6c:c3:6e:50:e2:
0c:22:32:83:a2:34:c3:9b:2c:fd:5d:df:54:e6:ea:f0:d5:3d:
64:12:b5:a1:05:29:a8:0d:46:60:2e:51:03:da:64:0c:a2:ae:
b9:b9:84:16:45:f5:36:1e:87:18:50:46:43:62:3c:07:0d:ca:
b2:a1:49:1b:5d:35:23:1d:ab:f2:8d:01:c6:8a:98:e1:e1:e2:
ed:a6:d4:98:54:24:8e:6b:dc:00:ec:5c:fe:f0:bc:d5:8d:44:
6a:6c:d0:00:22:eb:d5:62:37:7c:9c:8a:0b:66:86:f6:a4:d7:
e7:6c:fc:15:ba:65:24:b4:7d:21:43:e0:dc:c2:f8:f4:44:f5:
90:54:db:e9:20:9e:a4:dd:06:a3:99:5c:f2:c0:72:40:00:c9:
bd:17:e3:45:57:ef:69:65:b8:7f:ad:3c:d9:3c:ac:23:4a:53:
e9:c4:76:5c:e4:61:06:82:63:7c:2a:b3:18:b0:69:9c:d1:70:
7f:21:2e:13:6d:48:80:0d:20:41:4c:20:24:43:71:85:8a:99:
5d:a4:a7:8b:b6:04:32:ca:bc:26:6f:4b:e6:86:ea:7e:ae:53:
5a:a1:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:33:33 2025 by rpki-client