Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00825ca3-d709-4b9c-b837-7b1c6bc09b28.roa
File: 00825ca3-d709-4b9c-b837-7b1c6bc09b28.roa (raw, json)
Hash identifier: SzO9H5REBywSzK02QTq2IqtjDwTpVM/IA6UjgxpgSc8=
Subject key identifier: 55:E3:4B:3B:08:5D:0D:61:7F:E4:61:A3:E5:82:6C:A6:28:80:17:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43BA60143D937B9FBDD3404F5DC8A5673D696BB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00825ca3-d709-4b9c-b837-7b1c6bc09b28.roa
Signing time: Wed 12 Nov 2025 01:30:47 +0000
ROA not before: Wed 12 Nov 2025 01:30:47 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 119.13.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ba:60:14:3d:93:7b:9f:bd:d3:40:4f:5d:c8:a5:67:3d:69:6b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:30:47 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=3c6a98577365c447177bcc55ebff60a27753553e6030a8556fe91d2e0e491041, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:0a:59:7c:27:95:09:74:a1:b2:fa:e8:9e:
41:3e:c1:ef:ff:e7:f7:57:62:f1:a1:c5:6a:a4:5c:
77:0a:6c:ca:ad:fa:df:78:4b:cb:4c:8c:ff:66:63:
7a:48:92:b7:0b:2b:61:7a:24:c0:da:5d:3a:cc:5d:
20:96:d5:bf:f4:f6:58:2a:ab:5b:74:76:13:74:b9:
c2:9f:14:93:d5:0d:37:91:94:2c:46:b1:4e:04:44:
f1:c4:76:cd:96:17:25:fc:8d:d5:06:a5:f2:0b:be:
a1:84:69:a6:df:ad:37:ac:c1:a5:88:44:f8:bd:96:
f7:86:b9:97:e8:ce:82:7f:7e:a8:5e:31:b0:17:b3:
de:bd:fc:aa:46:8d:a4:f6:5b:34:ab:4a:e4:6b:4b:
c3:ba:b5:03:85:29:d1:17:c0:6b:0d:ab:4e:c3:39:
b4:a2:88:70:3c:b8:c3:03:be:6c:30:90:45:5e:89:
75:7a:99:83:7d:bc:da:ed:c5:15:60:07:9e:17:a2:
1d:40:36:18:8d:3c:7f:c9:3b:cf:97:66:9f:23:57:
ad:5e:ae:97:9b:52:20:06:c3:62:a2:83:7f:ac:ea:
b2:4f:b3:bb:45:17:ca:26:39:52:b5:a9:1b:4f:3a:
36:b2:24:1d:e7:52:c1:53:1a:42:91:bf:2d:93:b7:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E3:4B:3B:08:5D:0D:61:7F:E4:61:A3:E5:82:6C:A6:28:80:17:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00825ca3-d709-4b9c-b837-7b1c6bc09b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.13.50.0/23
Signature Algorithm: sha256WithRSAEncryption
52:d6:44:83:59:00:d0:b7:4f:38:2c:b7:85:36:77:c9:e2:51:
bd:2b:e7:85:e9:c0:a9:ac:01:73:0c:db:cd:6e:98:89:06:4a:
1f:69:3d:c0:5e:de:45:9a:ce:4b:f0:6a:9e:cc:40:60:7f:65:
72:74:dd:73:2d:70:97:20:3c:a6:52:9f:42:e5:8d:4a:10:80:
93:3c:33:66:d9:6a:8e:ca:75:00:de:f2:ea:ac:04:8c:99:30:
ef:49:71:f2:be:b9:33:d0:35:a6:1e:d4:a1:d8:98:8a:54:3f:
66:bf:fb:91:f8:1d:95:f3:8e:ee:a4:ab:87:6d:ba:cf:0f:b0:
87:12:a8:da:8b:e6:f8:22:f3:12:89:58:b8:2b:b2:95:46:3f:
a2:d2:a3:46:8f:82:da:b1:c4:92:17:e5:aa:0a:46:62:17:9d:
da:bf:92:4f:2d:69:0b:95:77:ca:75:a4:8d:cd:a3:b9:68:ea:
57:91:bb:c2:e7:26:6d:91:f1:1b:bb:52:da:9c:68:e0:90:b0:
af:ce:d1:93:d5:c5:d0:9c:5e:34:5d:ac:02:3e:a3:af:fc:be:
c2:12:77:d5:a3:c2:11:7c:57:4e:61:e0:93:8f:cd:8f:ad:c5:
fa:d1:07:fb:86:45:9d:07:ef:96:b7:5d:d6:e7:a0:09:51:17:
75:f2:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:47 2025 by rpki-client