Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5b534b8-3846-4c8b-a440-ed032897a123.roa
File: d5b534b8-3846-4c8b-a440-ed032897a123.roa (raw, json)
Hash identifier: qZnmuDFKLPUNlvxRR3wWnf+T1kYzNNSWoOEN2GTcHYA=
Subject key identifier: 9B:6E:69:6D:17:67:57:48:C5:2E:FF:8D:99:0C:26:0A:D7:B9:10:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24E14B53D96309688A76F5CDC64239CC8D3337EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5b534b8-3846-4c8b-a440-ed032897a123.roa
Signing time: Fri 31 Oct 2025 21:21:55 +0000
ROA not before: Fri 31 Oct 2025 21:21:55 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 93.77.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e1:4b:53:d9:63:09:68:8a:76:f5:cd:c6:42:39:cc:8d:33:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:21:55 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=f3c27f4a6ddd2690e68e9d2d2171d8fe4122198984cade9a67e395f3b4b511e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:b5:83:68:be:37:d8:fa:31:c7:72:46:13:
5f:c2:88:3b:fc:f6:0f:72:ba:60:75:be:04:ce:1d:
e3:84:c2:8c:4a:7f:1b:5c:32:ca:d0:bd:18:f8:39:
ce:b4:8d:6a:bd:bd:93:e9:27:a5:34:6e:eb:4c:6f:
98:56:1d:83:1d:5b:e8:58:5f:d4:59:af:94:b5:b8:
b4:cd:2c:cd:8d:cb:50:29:25:f7:7b:7c:e8:8d:e9:
97:37:2d:4d:56:2b:71:0f:8e:b0:98:b1:49:38:9e:
e2:75:57:55:4d:c0:3b:f0:e3:07:55:25:3b:da:38:
61:80:35:01:9e:4c:73:67:3d:35:cf:38:35:94:a3:
1e:53:cc:f2:70:b4:72:fe:39:11:b4:9e:83:70:28:
3a:33:25:22:6f:ec:07:e7:2b:48:0d:c7:62:ea:50:
54:0a:13:a7:62:c6:83:6c:bd:01:69:9b:6b:04:53:
23:73:8e:35:9d:fb:c0:51:44:88:db:0a:65:52:d9:
e5:59:2a:80:bd:e6:2e:f0:c9:3f:a4:c2:8d:a5:c8:
bb:38:73:9f:88:59:7f:17:e7:aa:dd:be:06:0a:40:
0f:a0:e9:4e:d2:9d:57:4c:15:e1:e6:30:e8:46:eb:
5e:df:23:80:d3:c1:db:4b:b3:7b:c3:83:ad:b3:16:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:69:6D:17:67:57:48:C5:2E:FF:8D:99:0C:26:0A:D7:B9:10:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5b534b8-3846-4c8b-a440-ed032897a123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.77.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e8:9b:7e:31:5f:a4:c1:45:99:a1:22:c0:d4:ab:9a:1a:0c:
a4:d1:d2:99:5b:35:23:66:ca:02:4a:53:c9:34:4b:0e:e3:ad:
4a:60:66:a9:06:cc:0c:a5:04:71:12:01:8c:2f:5d:f5:50:06:
20:98:d7:d3:dc:68:81:5d:d0:c5:36:36:28:3d:75:f9:7b:90:
4e:53:14:ae:ee:e5:c5:24:b2:c7:42:9c:15:fa:b8:26:7e:81:
51:00:43:df:f1:10:29:a8:53:29:e1:7b:07:2c:89:76:15:b5:
be:da:3c:5a:74:97:ac:86:ec:dc:c5:2c:83:9f:a2:b0:2e:cb:
d1:b1:54:a2:8e:83:c5:ad:9b:2d:4f:c9:43:99:02:80:01:21:
8a:10:d7:96:1c:75:45:8f:43:05:d5:cb:26:be:b1:19:a2:37:
d6:b9:69:49:a9:e7:3d:9f:a1:09:54:ab:79:50:e8:a4:83:40:
d2:e5:cb:50:9d:db:ca:ba:b4:70:93:6d:12:3f:c3:be:ac:f8:
9e:39:57:a3:13:6f:0d:f9:e8:bb:51:84:f9:8c:d8:c5:f1:75:
3d:65:5b:cf:cf:98:e9:18:46:a3:9b:9c:9f:fb:36:a5:0e:38:
11:d6:4c:62:71:4c:58:90:0f:f6:16:4b:bd:dd:ae:d3:0d:17:
0f:ab:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:58:57 2025 by rpki-client