Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa
File: 0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa (raw, json)
Hash identifier: 6Gv5chsEUMQtwfZ8GVvLut0+yZbb/SeBvwR7aEYhZIc=
Subject key identifier: 02:02:DC:F6:0A:6D:31:AB:9B:DB:31:55:04:2D:A8:97:57:7C:D9:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 630CD2E5186EFAAF8FA9462B1694BE3A2B9511BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa
Signing time: Sun 16 Nov 2025 00:21:35 +0000
ROA not before: Sun 16 Nov 2025 00:21:35 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 203.88.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0c:d2:e5:18:6e:fa:af:8f:a9:46:2b:16:94:be:3a:2b:95:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:21:35 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=850776e12136c876e8205b65dd107e950e700b4f8cb81a7adbdf9e86b3629be5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:ec:ec:e0:f2:17:dc:d1:b6:f1:a3:9a:c4:
46:af:02:2d:bb:f8:01:22:d7:de:f0:a4:cf:2b:22:
b4:c8:f9:51:58:a8:a7:6a:cd:99:3e:92:52:d8:b2:
e1:fd:3f:fc:57:48:8a:7a:ca:17:53:83:e6:f4:9b:
9a:a6:ae:56:e1:b0:98:fd:09:b0:c0:3c:d2:8f:e0:
ca:ed:a7:36:dd:e2:53:ce:b0:44:28:ed:79:07:bb:
be:9a:99:dd:f8:4f:f8:8f:e0:c5:96:c6:18:2b:0d:
1f:70:08:b7:83:b2:c5:97:39:83:04:aa:63:11:0c:
f5:35:e8:0c:8d:90:e5:bf:20:16:2f:2e:70:7d:5f:
d8:20:5e:82:04:94:33:6d:ce:54:79:e1:f6:83:3b:
13:1b:3c:81:22:d0:16:f2:7f:db:12:30:9e:4c:d6:
4c:6c:81:7d:ad:cd:29:8d:fe:a3:e4:15:0c:bc:60:
93:98:81:e9:74:0f:f2:5e:6f:04:8d:70:1e:ee:99:
7c:bc:31:ee:af:f7:1f:50:51:6a:de:27:27:b5:40:
af:a3:dd:97:54:54:31:ce:88:e0:e7:b7:7e:e9:8c:
2d:45:1e:8d:1d:0b:61:7d:96:9f:ad:2f:ad:0a:31:
9b:a2:51:ae:5e:e1:c2:2b:c7:62:c1:cf:b7:a0:82:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:DC:F6:0A:6D:31:AB:9B:DB:31:55:04:2D:A8:97:57:7C:D9:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.88.91.0/24
Signature Algorithm: sha256WithRSAEncryption
10:07:e3:68:05:bd:c1:75:22:10:d4:98:a6:f8:03:a6:5d:3c:
6a:4e:0f:83:e1:5f:0c:ea:92:e2:08:3b:5c:8b:f0:1e:37:9c:
b7:a4:80:37:23:c4:d9:12:4f:93:86:21:f6:d8:4b:65:75:9d:
f3:20:9c:50:ae:85:29:5a:76:be:d4:03:03:d8:42:ab:e9:9b:
a4:6b:a1:ac:4b:d1:2c:10:3e:04:c5:44:e4:14:b3:be:06:40:
70:a6:94:76:d2:bd:fb:30:5f:da:6c:2d:a8:15:e2:71:76:c9:
6d:69:76:c7:49:f7:29:dd:7a:10:91:74:97:ee:f0:bd:4b:7b:
f1:29:eb:ba:8e:49:59:ab:ef:9b:bf:a4:3c:b9:2d:81:cc:ce:
aa:44:a6:1a:7a:cf:9f:12:3f:89:6e:1f:c9:3e:0f:eb:c5:8f:
b6:7d:cf:93:e2:ad:13:25:87:61:36:33:80:c3:a9:6c:a7:11:
cf:b2:14:5e:84:47:cd:02:ff:b9:f6:a6:a2:43:aa:fa:69:24:
39:95:ee:e2:d2:f0:4d:f1:ab:e7:b6:06:ee:dc:fd:06:b6:a6:
87:f7:bf:5a:37:36:3d:ad:f3:b1:72:ea:06:69:8f:0e:68:ae:
e2:0e:3c:7f:b5:b9:9e:8d:c6:c0:6f:63:ed:b7:56:77:b1:4c:
b0:a5:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:50:52 2025 by rpki-client