Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa
File: 2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa (raw, json)
Hash identifier: 4asThlPOzrc6ZZ1UrvxthgGQVQB+fWwmsrsKTn7K1Cg=
Subject key identifier: 70:2C:81:1E:18:17:81:2A:5B:2C:BA:67:79:E7:6E:3C:16:B5:33:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7518E4E5A2ACB16BEF175E94D3490F859E12E0C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa
Signing time: Fri 26 Sep 2025 00:11:20 +0000
ROA not before: Fri 26 Sep 2025 00:11:20 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.23.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:18:e4:e5:a2:ac:b1:6b:ef:17:5e:94:d3:49:0f:85:9e:12:e0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 26 00:11:20 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=b5f6ef5cda59584ada7438a5f06fd884fdc509342218b77cfae04a65474e7638, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:ff:0b:24:e4:39:d0:db:6a:1b:a7:31:7a:
75:25:3c:02:d4:70:7f:e5:3b:08:ee:60:a4:b1:f0:
6c:00:ae:87:6d:bb:8e:2d:79:10:fc:43:dc:9c:26:
95:99:f6:34:6b:0e:96:d1:58:6d:1d:50:b1:f6:ed:
70:8b:2d:62:69:b1:b8:3f:9a:72:de:87:cf:39:36:
25:b5:42:eb:f2:3b:38:45:c9:ee:6c:10:7d:40:a7:
3d:bb:f0:f4:65:d4:56:f6:0b:7d:44:3e:4c:02:e6:
97:82:e1:ba:35:05:d3:f4:6a:22:8e:94:78:73:d5:
dd:3d:05:da:22:95:18:48:0f:cc:ee:e2:9e:78:61:
c0:ce:e6:26:83:0e:d6:f2:1a:a9:4a:3c:dd:c7:25:
2f:a0:81:8b:99:d7:03:e7:e4:52:38:74:42:62:39:
99:8a:7b:c6:2e:ee:f2:31:ef:41:76:f0:3a:c1:32:
7b:d0:a3:e2:78:a5:88:92:37:48:95:16:d2:29:c3:
ca:14:de:36:0b:08:c1:80:30:47:f3:13:14:aa:d8:
8d:49:73:17:22:c0:45:f5:f6:5e:48:d3:d1:8f:a1:
40:61:d4:cd:59:1b:50:c4:2d:41:9c:4c:7f:97:df:
47:30:c6:ea:5b:50:71:aa:79:53:0d:f2:fc:25:ae:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:81:1E:18:17:81:2A:5B:2C:BA:67:79:E7:6E:3C:16:B5:33:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.23.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:be:2a:16:ff:a2:3b:5d:8b:00:f4:06:fc:2c:a2:59:7b:a2:
b1:a8:75:9a:cc:f4:ec:19:bc:b1:0e:74:47:3e:b9:8f:9f:01:
93:b6:62:a7:35:aa:50:a7:a7:60:30:75:fe:f8:72:c5:fc:f6:
8f:85:a1:43:f2:d7:a1:a9:63:30:84:6d:4a:c4:21:f5:c0:7d:
f9:bb:d2:f5:61:1d:f9:4f:b9:e9:66:23:a0:4d:60:c8:22:7a:
9b:55:f1:e9:8d:92:7e:75:91:ca:53:be:93:52:73:fe:10:06:
25:81:a2:1e:8e:2e:55:7f:d1:d4:c1:bc:d5:0f:5e:45:53:f9:
a5:44:f4:ae:b5:bc:9d:46:18:88:67:02:bf:dc:73:c0:eb:e0:
da:74:13:a9:f9:de:21:80:3b:60:ac:66:c2:19:a4:62:3f:6a:
68:d8:6d:15:ca:b9:3a:1a:68:48:3c:bb:61:d2:57:4e:a2:89:
5b:db:1a:87:34:37:7d:a5:c3:fd:cb:76:ce:ac:be:f4:d6:99:
18:06:00:fc:80:d3:f9:c9:cf:c8:99:7a:64:98:af:68:03:09:
14:e4:ca:7d:cb:a1:b1:2d:6f:25:cb:2b:7e:8c:0b:f8:cd:4f:
d0:b2:35:0b:3d:00:a1:8d:6c:14:e0:49:d6:35:c1:cc:8e:f9:
bb:c9:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:58 2025 by rpki-client