Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa
File: 2685e722-0e36-4c7d-81cd-710122343f21.roa (raw, json)
Hash identifier: yTl6dm8/sJsTMNbagnEgjgO4XNsL4UQ9So/mNHt9OyU=
Subject key identifier: AB:51:4B:19:E7:E6:D5:95:26:22:7E:48:CE:B1:41:26:6F:F1:EE:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20FD48985FA56BCFCDBAA136A35CDF71E69155F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa
Signing time: Wed 12 Nov 2025 02:21:41 +0000
ROA not before: Wed 12 Nov 2025 02:21:41 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.252.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fd:48:98:5f:a5:6b:cf:cd:ba:a1:36:a3:5c:df:71:e6:91:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:21:41 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=c5cae57af802aa19bb971475cee6f94e3f92a18602e88fcc134d57b336c5335c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:53:e2:b9:7f:07:f6:c0:ff:99:e1:b8:7b:
80:b8:f6:e5:be:86:d8:03:bf:87:ee:b1:00:84:d8:
e9:be:9c:9e:eb:32:01:dd:9a:4f:16:5c:3e:8d:fd:
49:c8:52:4a:74:d8:c6:57:88:e3:bf:0a:10:33:f4:
d1:07:e5:47:51:91:d5:a8:d2:e2:74:0e:94:29:53:
40:aa:05:0f:f0:a9:04:0e:96:6a:27:37:af:61:2e:
4d:b2:a7:61:60:02:8f:c2:89:9f:b6:40:83:92:03:
d3:99:17:5f:f1:b2:36:41:2d:f0:ca:38:cd:e0:23:
97:51:0e:c6:e3:29:e2:f0:1c:11:9d:b6:15:f0:68:
a1:64:5c:81:11:06:e4:f6:1b:73:f7:b4:c0:bc:c7:
98:4b:73:f8:00:80:e6:77:19:4c:ba:6d:25:9e:ad:
3c:d6:ea:6c:8a:a6:63:4c:31:c6:23:99:cc:5e:c5:
27:e0:8d:ef:1e:65:30:f5:7c:85:3a:29:b4:91:c4:
c3:b6:20:89:8f:6e:fb:0b:fb:22:4c:12:4c:e2:67:
eb:f2:75:fe:9f:2a:fe:7f:d0:33:a8:c6:1d:22:23:
f6:97:ad:46:63:41:d9:b8:86:b6:71:e5:64:bd:65:
db:5c:8c:32:d1:45:e6:b2:67:25:39:0f:ce:7c:46:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:4B:19:E7:E6:D5:95:26:22:7E:48:CE:B1:41:26:6F:F1:EE:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.252.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:bb:78:af:2c:b4:d2:b2:c2:fd:f9:c3:16:57:ee:39:76:49:
d0:e5:30:08:aa:5a:a6:90:b8:e7:35:5e:1c:6e:d9:55:4e:20:
21:6a:dc:70:ce:c2:02:f0:08:22:44:5f:a2:82:e6:7f:a3:4d:
7a:0f:0e:3a:53:71:2d:24:df:34:62:75:d1:8a:ac:ff:69:8a:
cc:a5:23:9c:63:a7:db:ba:d9:ec:fb:7f:06:a2:7e:14:46:63:
e0:40:33:77:f8:89:37:af:93:dc:f3:46:38:37:45:10:e1:37:
f3:11:a7:1c:36:93:69:a2:c8:10:30:66:3f:4b:89:5d:50:80:
8d:0e:dd:2e:dd:ed:85:f6:b8:88:e2:74:17:e5:6e:49:d3:cf:
ea:fe:46:24:5f:25:76:f2:22:a6:cc:bd:b9:73:c4:c7:f2:a0:
18:a9:7f:82:01:43:6e:bf:6b:b7:a2:3c:9f:23:46:d6:1f:7d:
0b:da:bb:7a:bc:98:2e:28:d2:c8:c8:0f:2c:39:27:f3:90:e3:
16:90:3f:47:d3:db:81:60:ca:2d:35:25:81:3a:50:e5:e4:50:
be:64:31:72:ec:a3:00:f3:b5:5c:ba:02:c3:fc:34:65:5e:cc:
cc:aa:dd:5f:a9:f3:23:32:2b:d1:5f:ca:f7:2a:bc:cd:21:35:
0e:05:dc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:18 2025 by rpki-client