Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d4d2f7-1a78-4934-8b97-d3baee111a75.roa
File: 05d4d2f7-1a78-4934-8b97-d3baee111a75.roa (raw, json)
Hash identifier: 7TLQWfqCtvmSSs4wvE96YgvFjhZH4+nKl6+NVbPAHcc=
Subject key identifier: 79:1B:76:CC:67:E2:82:5C:D1:07:E6:A0:16:9D:38:EE:C4:7D:AA:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6608A7A7B625EE9ED72D21A4EF9A9F742F7ADCDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d4d2f7-1a78-4934-8b97-d3baee111a75.roa
Signing time: Sat 15 Nov 2025 00:50:12 +0000
ROA not before: Sat 15 Nov 2025 00:50:12 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.5.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:08:a7:a7:b6:25:ee:9e:d7:2d:21:a4:ef:9a:9f:74:2f:7a:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 15 00:50:12 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=32b1ab47a926d061a009919f8b026e049388306109232588a2e20be117caefa4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:53:64:23:50:b3:7c:82:0e:1c:9d:c0:e1:
6b:8b:36:19:44:a0:b1:58:0c:ae:45:37:40:aa:d9:
fc:ed:8c:61:10:57:b2:8c:53:07:ee:76:8f:bb:72:
e9:51:4c:df:4a:14:c2:6b:a8:22:40:eb:58:51:90:
fe:a6:49:5b:39:17:24:14:a4:73:ff:6a:40:5f:a3:
6e:22:7d:c8:53:96:6c:c7:b7:cb:35:6a:08:26:a5:
ad:41:6d:2e:b1:e8:17:12:d3:c2:06:47:fe:f9:04:
67:b3:50:65:c9:93:a6:70:0d:db:aa:e6:80:96:03:
1d:9d:4e:17:31:9e:39:1a:c3:59:02:71:8d:cd:03:
0f:a0:b4:90:c6:3a:1f:12:af:f0:4f:f6:21:15:5e:
65:fb:ff:f7:7a:1b:03:95:f6:6c:a0:bb:01:ad:d3:
3b:64:7f:61:95:61:23:49:39:43:b4:6c:60:b7:88:
25:f4:1d:5c:0c:f7:76:12:85:54:db:31:5c:c0:c3:
35:87:ab:59:52:2a:20:3b:f7:dd:b0:c3:54:cf:c9:
fe:95:08:e6:02:67:b0:68:52:64:a9:3f:94:e9:07:
fe:7a:43:68:8c:26:00:98:4f:21:b7:ff:92:0d:e8:
b8:01:02:fb:7d:d8:8a:2c:87:3e:a1:c0:75:33:07:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:76:CC:67:E2:82:5C:D1:07:E6:A0:16:9D:38:EE:C4:7D:AA:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d4d2f7-1a78-4934-8b97-d3baee111a75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.5.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:73:8f:47:3f:ff:76:96:f4:98:82:6b:f5:ed:c3:82:78:e5:
30:45:26:1d:99:89:e3:f6:eb:85:26:19:ad:4f:3b:eb:9d:66:
27:f0:77:03:0e:eb:21:16:cf:e7:ec:5d:27:89:51:1d:a4:bf:
63:b1:96:b9:4e:26:82:e8:6b:cf:be:12:f2:6f:8f:74:e9:2e:
4f:fe:e6:6b:2a:f9:45:ae:ef:12:c2:7c:73:51:45:69:5b:9a:
a8:14:31:3c:71:de:b0:22:73:5c:f6:1c:d8:33:c2:26:66:9f:
fe:c7:a1:19:bc:a0:e5:fe:da:83:77:1f:a5:ac:52:75:f0:eb:
7d:59:a5:bf:ab:0b:1f:3d:f3:b0:6c:f7:aa:f8:e9:18:ac:b0:
d9:30:57:15:2f:0b:bb:57:01:0a:b3:1b:0b:20:c1:b4:ed:21:
87:7c:3a:4c:2c:eb:8d:fc:83:70:17:ca:81:e3:0f:21:10:d1:
40:93:ad:2c:9a:d2:fd:6f:c5:4c:83:37:5e:34:b3:92:5f:43:
1d:1e:07:ff:21:ae:8a:6d:54:f9:71:be:63:28:a2:d7:7e:4e:
7c:9f:28:3e:23:44:86:25:88:ef:12:a6:1d:62:91:10:fa:8c:
5a:67:c7:9c:e9:55:fb:d8:c7:62:15:17:2d:f4:f6:47:4d:da:
7b:78:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:51:33 2025 by rpki-client