Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9dd697-4cf9-4962-86aa-5815f3f52bca.roa
File: de9dd697-4cf9-4962-86aa-5815f3f52bca.roa (raw, json)
Hash identifier: QZVPDaizrP+ANCiLxI5MAEdHmnZr1oiaRW841njZA0A=
Subject key identifier: C5:B4:74:44:2D:8D:1E:ED:ED:BA:D7:E7:3C:75:28:67:B7:F7:3E:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30A3D9A257D61F20D469992960399E5B3B8A8298
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9dd697-4cf9-4962-86aa-5815f3f52bca.roa
Signing time: Sat 25 Oct 2025 00:21:25 +0000
ROA not before: Sat 25 Oct 2025 00:21:25 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a3:d9:a2:57:d6:1f:20:d4:69:99:29:60:39:9e:5b:3b:8a:82:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:21:25 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=f8f1170c0b175969e50bd73041715e0c1ff503ab48e1da3e919230e438d94555, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:50:2f:e6:6b:72:cf:f7:8f:89:f5:a0:dd:
0f:4a:66:c5:e4:09:35:0b:be:53:a1:98:90:f9:bc:
e5:03:50:17:13:8f:db:98:5d:80:49:f0:82:64:5f:
a7:bf:d5:d0:03:f8:9e:a8:02:f3:10:eb:52:12:31:
0a:df:6b:6f:a0:6a:cc:42:a7:97:95:df:4c:18:b1:
c5:19:3f:50:b9:f0:d8:fd:b1:cf:c6:8c:73:b9:ec:
df:20:c7:09:b4:7a:f2:2c:d9:54:b6:52:6d:34:4e:
a0:f1:12:18:f0:9a:3a:4c:58:21:74:72:72:a9:28:
d5:4e:23:88:96:35:4e:4d:ff:4c:40:8c:b1:eb:f6:
1c:69:7e:92:6b:94:d1:28:6c:ca:a3:d5:13:26:31:
b2:b6:54:f7:0c:88:9c:83:16:a9:34:f7:3a:1b:dc:
5a:f9:1e:0f:33:54:fe:f9:06:4c:1b:05:e3:47:0e:
de:4c:2f:f1:50:5d:c9:30:84:a3:64:45:78:a6:66:
8c:52:02:2a:bb:39:51:a7:d5:95:c5:3f:87:08:7a:
15:93:19:69:f7:9d:44:4a:64:64:d9:34:b7:10:4c:
1d:29:12:8c:99:3d:a5:e7:e2:92:59:6b:41:bd:d0:
95:a3:13:8d:22:19:d8:19:7a:87:6d:d3:4f:88:de:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B4:74:44:2D:8D:1E:ED:ED:BA:D7:E7:3C:75:28:67:B7:F7:3E:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9dd697-4cf9-4962-86aa-5815f3f52bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:08:08:26:c6:01:a9:78:b0:00:4d:3c:89:05:6c:f2:52:97:
31:05:d6:b0:fc:0c:64:b6:c9:e6:e9:12:3c:1e:a8:3a:61:b4:
88:27:50:b7:ae:01:d5:25:b7:2c:f7:a0:39:49:65:e9:08:6f:
e1:13:0d:8a:a0:22:56:aa:c8:45:10:61:5e:40:0d:d0:98:a5:
ee:60:53:6d:04:cb:81:c9:40:40:f6:72:53:1c:2b:00:75:e5:
c7:19:5a:15:73:78:09:3d:da:7b:4e:cb:9d:db:ce:de:01:f2:
9c:89:32:3d:85:29:84:ab:09:86:77:15:ff:04:4f:1c:a9:5f:
e1:4f:25:56:f2:c0:0e:40:da:08:21:a2:c3:7f:7b:5e:13:55:
3c:39:49:18:5b:10:5b:03:7a:07:38:b8:70:82:69:97:29:4a:
bd:96:0e:c1:4f:a0:07:83:9b:ea:b2:ce:a8:05:cb:8f:68:e1:
63:18:72:27:41:a9:09:09:32:6a:c3:2c:09:12:9b:c2:cd:08:
89:99:e7:06:16:7a:03:79:bb:ee:04:69:aa:81:71:d0:30:60:
a4:6c:e2:66:8b:f1:d4:87:71:c3:9a:69:f8:22:9a:d2:d0:35:
0e:ca:84:16:a7:a6:e4:61:2b:3a:16:53:19:bb:b2:d3:35:82:
30:06:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:11 2025 by rpki-client