Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ddeb352-141f-467b-8491-f45b959c60b1.roa
File: 0ddeb352-141f-467b-8491-f45b959c60b1.roa (raw, json)
Hash identifier: vgG0HkDsPM6UywLrLECbBHqhE8CZ11T1teo2J8d4Qww=
Subject key identifier: 8B:AF:E8:27:21:A2:CC:6A:4F:20:BE:4B:B9:D0:C3:C6:32:7A:AE:FD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 043DDB741D41E2A58B316CB8616775097A4C07DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ddeb352-141f-467b-8491-f45b959c60b1.roa
Signing time: Wed 01 Oct 2025 00:11:19 +0000
ROA not before: Wed 01 Oct 2025 00:11:19 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.54.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3d:db:74:1d:41:e2:a5:8b:31:6c:b8:61:67:75:09:7a:4c:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:11:19 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=a5499fb292fc7df72856611f771d84439ef570aa4e50660c39f1959eedb07bdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:44:35:26:2d:b3:3f:b0:56:32:2a:44:df:
d5:1d:9b:e5:96:ff:a8:b6:e9:12:14:e2:1c:d3:b9:
91:54:d7:66:ee:27:52:a4:6d:76:b8:d8:49:61:6a:
bc:74:62:cf:2c:a2:39:c2:dd:72:d7:4b:e0:a9:db:
c2:96:8b:ff:66:be:8c:92:01:4b:ce:a9:5b:b2:57:
24:81:c9:4d:b0:ad:1e:3e:f5:1a:e1:eb:98:6e:47:
72:83:13:8f:7c:a4:6d:c2:e9:04:3e:90:b8:3d:a9:
75:a0:36:7a:85:93:f1:67:f6:7a:9e:e2:00:e0:4e:
66:b6:e4:6e:e7:3d:be:6d:9f:d4:e6:79:fc:68:a3:
17:ee:7f:d7:ff:8f:91:7a:7e:ba:33:2b:1e:97:7a:
02:a7:16:33:65:05:6a:95:a3:50:15:dd:da:8a:90:
ca:86:28:f0:d8:c5:3b:19:c3:96:a3:89:d2:bb:56:
53:9b:5a:af:8b:17:50:cc:7c:82:a2:fe:36:88:9b:
cf:46:c7:1a:be:5e:92:81:90:0a:54:12:a2:e6:3a:
6c:3e:2d:30:29:b1:69:8b:98:3c:95:41:aa:37:39:
ea:2c:b8:91:04:f2:a1:c1:ad:38:70:c1:71:d3:ad:
5f:c1:2b:62:48:c6:5f:ce:bf:d4:a5:fa:5f:43:fd:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:E8:27:21:A2:CC:6A:4F:20:BE:4B:B9:D0:C3:C6:32:7A:AE:FD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ddeb352-141f-467b-8491-f45b959c60b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.54.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:9c:48:17:77:8b:f6:da:38:4d:7d:13:57:bc:42:f6:ad:0b:
61:90:fa:eb:15:9d:d8:70:51:85:43:08:3e:67:04:e2:1a:ad:
0d:6f:a7:a4:cb:c4:0c:7b:5b:d7:dd:41:e9:ba:e3:17:02:06:
ce:a4:fd:4d:24:6d:a7:ae:ef:64:d7:b1:11:d3:c2:07:0a:d4:
23:71:3a:bb:4d:73:a9:c5:3e:4e:ed:a8:91:77:1d:7e:82:c5:
61:f1:57:76:e7:6a:4b:46:4a:1f:b5:7f:68:86:b0:1c:c9:c5:
d9:02:01:0d:bc:9c:68:90:f0:90:d3:05:b9:66:dd:19:dc:3e:
eb:8c:57:9e:3c:a2:16:dc:fc:87:b5:ff:09:87:be:27:26:70:
a5:f3:37:d5:21:6a:24:d9:99:8b:f0:7a:c0:72:23:3f:58:8b:
7b:d5:a1:4d:94:03:5d:29:07:c1:13:64:d1:80:91:36:fb:8e:
7c:ce:97:28:88:4f:30:20:87:3e:08:79:b9:a2:5e:88:0e:88:
dd:44:94:ae:0c:2a:2a:63:54:14:33:56:0c:5b:18:62:b6:23:
7b:8e:fb:39:c1:42:a4:e4:60:bb:21:17:10:30:9a:46:ca:bd:
cb:3f:33:72:47:ab:00:61:b7:c2:ea:63:f9:b2:6e:b2:fe:65:
a3:67:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:38 2025 by rpki-client