Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f807005c-df45-4e93-8b61-e9ea0d823e87.roa
File: f807005c-df45-4e93-8b61-e9ea0d823e87.roa (raw, json)
Hash identifier: ORZwG/u/lq5rQUn9Ki94yMFQQgLdr5TaDIAbwdwUa98=
Subject key identifier: E0:25:83:0C:77:11:74:EB:52:E8:10:80:BC:14:93:07:86:3F:5F:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72A7B87282DA417D5B27C1C00CF0BB3252C2A889
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f807005c-df45-4e93-8b61-e9ea0d823e87.roa
Signing time: Mon 27 Oct 2025 00:00:07 +0000
ROA not before: Mon 27 Oct 2025 00:00:07 +0000
ROA not after: Mon 01 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 195.4.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a7:b8:72:82:da:41:7d:5b:27:c1:c0:0c:f0:bb:32:52:c2:a8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 27 00:00:07 2025 GMT
Not After : Dec 1 23:59:59 2025 GMT
Subject: serialNumber=ff2bf8352b8cd9df06ac3ca88e4ad32d1de6a6543948d620ac0ad8cf1473b3b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:ef:1d:81:d1:45:77:0b:d1:ef:d6:d5:29:
09:8b:ac:c7:57:86:f8:ac:f3:30:9b:f3:bc:95:11:
ca:8c:1c:6a:ce:2b:15:9c:a3:15:8f:7d:94:7a:c7:
0b:43:6f:81:01:f5:33:1c:e6:ff:38:7d:b3:2a:03:
3e:8e:cc:04:f9:af:5b:1c:be:1d:bf:41:b9:1f:a9:
5b:51:37:17:be:d6:63:7a:13:dd:97:ab:bd:57:a3:
b6:58:28:47:8f:27:fc:8a:58:b6:61:b1:f1:a5:56:
92:b7:c4:9a:88:fa:7d:e6:8b:5d:68:21:74:70:3d:
32:ac:61:91:96:40:bf:77:d7:f6:a6:11:11:0b:24:
c8:92:5d:ac:cd:f2:a9:59:88:cf:ac:f7:ac:ed:1e:
ce:67:13:e9:e5:94:27:6a:34:2b:0a:33:bc:da:b3:
bb:03:ea:12:2c:ab:12:d4:9d:13:f2:d6:28:6a:c6:
51:75:15:ad:0c:78:c1:7b:85:27:fb:c0:a4:6b:ea:
e0:10:09:48:83:0e:71:20:47:0e:55:ba:df:54:6a:
25:69:8c:48:f1:a2:5b:3f:0e:01:a9:31:cc:ed:c0:
97:f3:32:96:10:6b:d9:0c:c7:48:f4:ff:bf:30:f5:
88:15:81:2d:5c:0b:ff:47:97:f2:f1:20:8c:86:75:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:83:0C:77:11:74:EB:52:E8:10:80:BC:14:93:07:86:3F:5F:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f807005c-df45-4e93-8b61-e9ea0d823e87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.4.64.0/20
Signature Algorithm: sha256WithRSAEncryption
71:4d:96:0d:68:42:6f:eb:91:94:e7:5a:8a:73:34:a2:a1:27:
dd:c9:c9:6d:cb:f3:46:4d:82:2f:25:4b:19:ff:3a:b6:20:eb:
27:a7:64:be:31:e9:7a:fe:02:f3:34:d3:37:70:55:e0:38:5e:
58:88:df:7c:15:8e:c2:d3:02:f6:17:ab:c7:f1:10:bc:f1:f5:
b4:3c:ad:20:1c:cc:eb:91:14:64:da:3b:8e:8f:97:4b:62:6e:
d0:de:b6:0f:5f:22:ed:c6:a6:20:b6:2c:77:14:d3:91:2d:1f:
74:9c:9c:82:17:69:cc:0a:d5:af:bc:fd:91:c9:32:ea:14:6d:
cb:b2:97:89:23:ac:b8:35:9b:41:6f:d4:c8:25:ba:d5:c6:80:
76:29:58:77:ec:23:e7:ad:58:56:17:6a:14:77:46:79:d8:c3:
91:20:41:89:86:7f:0b:b3:f1:d7:0a:aa:54:3d:e3:32:7f:aa:
5d:fa:7b:40:77:05:d1:a8:d3:b5:5f:b7:da:19:2b:3c:7e:c1:
fa:52:a8:2d:eb:5e:1b:f4:85:5f:5c:70:a2:24:bc:6f:7d:13:
ba:a2:24:3f:6a:be:ac:2f:b7:92:79:2c:2c:04:ed:69:11:3d:
25:6e:7c:4f:59:01:19:d5:8c:58:f4:eb:76:52:75:15:17:aa:
3a:9d:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:25 2025 by rpki-client