Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa
File: f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa (raw, json)
Hash identifier: LxVo52tW0Vm8mDnkXqtUYLWWk0WyGKc0+mQ6ex0UlpM=
Subject key identifier: 4C:4D:71:16:4F:78:13:CE:CD:97:7A:80:59:F7:C0:98:C6:62:47:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E021B31CED98660CCE13EBD568AF3B0C26B02F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa
Signing time: Wed 05 Nov 2025 00:40:49 +0000
ROA not before: Wed 05 Nov 2025 00:40:49 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.190.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:02:1b:31:ce:d9:86:60:cc:e1:3e:bd:56:8a:f3:b0:c2:6b:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:40:49 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=e1f430a359e08cd810c05e8a38f5928254291d63f0ad5aac48e7532b3ed99744, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:fc:c2:ef:2c:b3:b9:4c:6d:66:fe:e8:e8:
59:c6:fb:06:7a:ef:f9:e5:50:45:b7:28:0d:55:61:
1d:d2:9f:87:32:04:61:f0:be:67:21:5b:30:de:c1:
6b:3b:ae:0a:b9:92:0d:9b:d2:2c:dc:0b:e2:4f:f2:
d8:2b:2e:46:5e:26:f2:50:35:80:f9:4e:e7:37:13:
95:ce:22:52:ba:da:28:33:d0:ee:57:51:ec:6a:25:
3d:0a:f8:7b:98:0d:af:a6:29:06:39:6e:e0:2f:d3:
05:a5:99:23:39:81:6b:c6:65:66:80:06:18:15:ed:
05:fd:80:63:59:7b:06:f1:59:61:d0:31:87:6b:1e:
18:08:e5:8c:8e:00:d4:cf:3e:a6:f4:f4:a5:bc:da:
ec:65:57:5b:89:0d:b4:2b:34:7a:aa:81:9f:bc:55:
a8:1e:e0:35:c5:f2:2a:99:68:1c:db:e3:90:0c:4b:
1c:ff:e3:00:ee:08:93:0f:9f:6f:3e:b6:52:43:7f:
9d:3d:48:9b:ec:30:a8:1c:fd:b0:5f:55:da:56:0c:
9f:8c:a3:d4:c8:20:5c:01:49:e9:2a:07:6f:a7:13:
b4:00:85:94:72:62:18:64:da:a9:56:ab:99:43:f8:
b7:53:95:7d:a3:6d:a8:c4:86:4f:5c:04:72:c3:9e:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:71:16:4F:78:13:CE:CD:97:7A:80:59:F7:C0:98:C6:62:47:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.121.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e4:10:d2:ac:da:62:2a:59:cd:e4:21:18:1e:12:e1:67:85:
a4:22:89:24:9b:8e:b0:49:80:f0:b6:71:8a:12:d6:c3:51:82:
76:51:36:a6:6c:b5:24:04:2e:0d:ff:86:fe:7f:14:b4:7e:33:
36:b4:a7:e6:c8:69:4d:52:a9:cf:78:b4:d5:64:fe:7c:7e:64:
f8:7f:9e:33:67:2e:49:56:3a:6d:15:e8:ff:af:d5:8c:f3:d0:
fe:0f:4c:b6:83:5d:2a:e8:bf:49:48:12:c7:bc:8b:d4:a5:a5:
41:01:76:e0:d5:2a:ca:16:c6:c4:02:49:ca:ae:52:19:68:79:
ff:a9:a7:bf:26:f2:72:54:35:e1:ee:33:01:50:96:82:69:ae:
03:52:0b:9c:fe:d8:b4:5b:0b:e6:94:9e:ae:5d:fa:f5:23:cd:
b4:e7:81:71:b8:f5:56:b2:53:d3:fc:cd:b8:5c:bd:26:f4:45:
99:73:be:e6:3a:98:e9:f0:d7:d7:f1:00:f2:8d:91:de:1d:e9:
85:26:f0:22:85:9c:ea:5c:9b:dd:36:7c:9e:79:96:5d:cb:8b:
a2:99:9f:4c:5b:65:f7:b0:f7:6a:1e:f2:d2:bc:c7:4d:76:62:
fd:41:28:56:ce:ad:17:fe:45:35:95:bd:0d:89:ae:25:dd:4b:
f6:1d:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:53 2025 by rpki-client