Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1619d0e7-4e79-4136-ac39-2148c9d5e013.roa
File: 1619d0e7-4e79-4136-ac39-2148c9d5e013.roa (raw, json)
Hash identifier: u3l0M5gFZsT4jkUgfTO7D9P55NIP3RupjgfMIPCgQBQ=
Subject key identifier: D0:4D:22:B1:2A:56:6D:C4:90:61:D2:7A:70:CB:B2:A3:E9:E9:48:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 267E92D717DF3B1C9BCA2FFDFF83CD4879D4A7B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1619d0e7-4e79-4136-ac39-2148c9d5e013.roa
Signing time: Tue 11 Nov 2025 01:00:06 +0000
ROA not before: Tue 11 Nov 2025 01:00:06 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 174.129.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7e:92:d7:17:df:3b:1c:9b:ca:2f:fd:ff:83:cd:48:79:d4:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:00:06 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=1a937a470ae724532d8ce71e512093a97012401be7707623315834e193dc81e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:de:31:4f:b2:22:34:59:0b:c8:e7:ee:08:
51:c2:a2:5f:a2:09:bf:41:f7:6b:31:24:f8:c6:06:
49:2b:67:a9:07:9b:94:8f:c9:5d:85:21:59:06:e5:
75:12:a3:ae:9f:4f:2d:c5:32:35:e6:35:1f:53:4a:
fc:5e:9d:b7:7c:d2:0e:99:78:33:d8:a9:a7:dc:1a:
64:d0:50:a3:86:82:2b:af:a0:aa:4e:37:6b:0c:a7:
78:77:e6:93:cc:6c:a2:2e:fe:9b:d9:c3:fd:f2:fa:
70:ef:f8:68:81:65:38:b1:a1:4b:f2:b6:0e:f2:be:
74:6c:08:de:2a:3f:34:13:15:37:91:88:0a:ed:0e:
0f:95:a1:3f:63:f1:ff:90:9e:7a:7b:dc:42:30:83:
1d:63:87:4e:65:84:66:41:bd:1f:5f:6d:87:ec:eb:
6f:31:f8:17:bb:9e:c7:c5:e7:bc:eb:2e:5c:a6:cd:
7a:0a:9f:50:41:47:cd:70:7e:7d:d7:c7:f0:c1:8e:
39:3f:97:40:46:7f:55:2f:b9:cf:dd:13:85:4b:fe:
03:bc:44:f6:0f:66:12:76:e2:e2:42:dd:dc:ea:bd:
f8:a9:3e:ae:00:53:31:a0:0b:f0:f5:3f:75:71:3d:
57:d8:b4:03:34:7a:5b:8f:73:06:8e:31:85:fb:fa:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:22:B1:2A:56:6D:C4:90:61:D2:7A:70:CB:B2:A3:E9:E9:48:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1619d0e7-4e79-4136-ac39-2148c9d5e013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
174.129.32.0/21
Signature Algorithm: sha256WithRSAEncryption
46:5e:4b:48:b3:61:39:71:86:0e:13:f2:84:ca:b3:d6:f8:36:
20:1e:51:72:27:97:dc:47:c7:9d:b1:03:d3:7a:70:75:77:43:
42:59:ea:7b:3f:c4:02:ff:2f:84:7e:01:0f:db:01:76:e9:97:
a6:81:5e:29:f3:38:93:cd:ab:e9:e8:7b:6a:91:91:4b:d7:df:
7f:25:df:c9:0a:e9:b3:3f:57:41:ad:95:d2:52:b1:e6:2d:1f:
c5:26:8e:db:e0:f8:c8:3a:48:07:10:28:ab:d3:5e:b7:5c:dc:
6c:b7:97:b1:7e:8a:e1:d7:81:91:95:cb:73:87:85:d4:d3:77:
d6:f1:6a:df:9f:f8:84:94:30:02:7b:c6:bf:85:b1:da:e1:57:
67:50:a3:5c:13:c5:49:71:9b:e3:51:3f:75:d0:0a:2b:f1:b3:
ae:58:f1:d4:ca:41:58:7e:90:d1:e2:9e:f2:69:d9:57:f9:b7:
1b:e7:df:f7:a6:de:f5:05:b8:41:dd:fe:aa:b9:e4:3c:9c:2e:
90:99:5e:75:19:0e:db:20:af:52:cd:bd:26:58:1d:4e:7d:50:
33:8e:e0:01:24:6e:0b:de:cf:07:98:02:b0:7e:c9:9d:71:c2:
60:f9:94:df:68:07:3e:1b:8f:6e:dd:f7:d8:92:0a:e1:34:20:
6c:19:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:43 2025 by rpki-client