Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa
File: 1ec09901-70fe-41c3-8b4b-3f50242b9056.roa (raw, json)
Hash identifier: SNYpiIMtonmnfrDWM9UC+74R1QkzNvRRa3vFY2mQHoM=
Subject key identifier: 15:AE:97:94:90:8D:9F:40:23:69:D3:80:84:B9:37:68:32:E9:09:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BB117349E7C7A51059C00FAAE7FF9CD45865D80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa
Signing time: Sun 16 Nov 2025 00:11:30 +0000
ROA not before: Sun 16 Nov 2025 00:11:30 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b1:17:34:9e:7c:7a:51:05:9c:00:fa:ae:7f:f9:cd:45:86:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:11:30 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=0590aa04e73ba51df034472e00e414cda661d8f3d12adfe243b02bdcc870c05e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:c8:f7:09:ee:82:b2:69:be:7e:f9:bf:6b:
22:63:bf:cf:c5:51:92:13:04:b9:90:ee:3e:be:19:
58:27:87:36:3e:da:d4:c4:75:ed:f0:9f:e9:4e:8f:
41:04:86:a9:94:95:ac:00:19:a4:00:38:1c:19:f1:
db:2e:79:7c:2d:e3:7e:40:d5:71:9c:be:5b:af:8e:
f7:e3:82:ed:44:25:e2:ac:2f:cb:cc:c9:a9:d3:ae:
3e:9c:6c:7c:ff:01:cb:8b:71:e7:70:bd:14:4b:8f:
ed:7d:6e:a3:0a:9f:30:b0:4f:6e:1b:a1:e7:1a:26:
31:3d:ee:80:ab:e9:a1:7d:50:47:57:a7:f0:94:1a:
db:ca:9a:fe:22:23:25:38:0e:4b:60:dd:e2:2f:be:
60:68:90:8c:b9:cb:77:3b:e2:5c:fe:0a:4e:f1:8b:
aa:11:be:22:10:7d:14:04:37:00:5d:fc:45:34:ad:
c1:1f:74:61:a2:ae:1d:db:18:41:34:66:75:e4:a5:
8e:7b:fd:57:0e:eb:ab:85:40:77:17:09:f5:a2:15:
a8:fc:ba:77:22:3f:63:a8:b8:ba:ea:f0:c6:af:44:
d3:c6:7d:7b:66:f4:2d:5e:0b:3c:21:7e:31:45:5e:
7b:33:81:83:18:8b:da:84:96:44:eb:f9:ee:40:7c:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:97:94:90:8D:9F:40:23:69:D3:80:84:B9:37:68:32:E9:09:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.16.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:28:1c:13:f4:6f:0e:57:cf:82:18:03:18:3f:9e:05:5c:7d:
ad:2b:cd:3d:53:50:ff:a4:dd:23:8b:96:76:81:26:9c:73:2b:
60:eb:9c:55:f8:16:19:a1:3f:0d:58:25:f0:c0:84:bf:25:d2:
cf:32:b7:da:70:62:cd:c9:c2:d2:b9:d4:2d:0c:ab:6f:dd:24:
a0:ac:95:e5:dc:f1:fb:f0:20:e0:5e:ac:6f:86:e2:2a:2d:98:
2f:8d:50:aa:d5:62:07:a5:87:81:63:8b:8a:16:74:ee:59:a5:
49:d6:99:6a:34:85:65:5c:69:ef:8a:6c:62:80:0a:d4:9b:00:
91:f8:97:8f:ce:1e:6c:8a:cd:41:61:a4:68:62:de:65:5b:fd:
02:9c:e4:1d:d6:d4:11:eb:a1:5e:28:5f:ff:1c:34:0e:ed:31:
40:43:3a:e9:c5:39:8f:38:a1:52:6f:9a:31:65:24:8c:66:45:
d4:40:65:9a:0f:bf:9a:80:f1:12:77:b2:c1:e1:92:04:1b:91:
b0:fd:4c:51:50:94:15:f0:dc:99:77:fe:ef:47:b1:b1:b9:a6:
dd:3f:6d:d3:a1:f3:90:ab:82:b2:bc:21:4d:1d:9c:f7:2a:50:
50:db:78:b5:81:3c:33:54:4a:af:88:34:6d:ca:c4:03:1d:8d:
16:c8:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:31 2025 by rpki-client