Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c6be0c-7940-4a4f-b9f7-c77b672267e1.roa
File: 28c6be0c-7940-4a4f-b9f7-c77b672267e1.roa (raw, json)
Hash identifier: Rhy4ibB88e1ye/QiiYD21r9DSS3NDLbW4J+ZvhBk7D4=
Subject key identifier: 9C:DB:5E:B4:75:6F:B4:C1:A1:98:6B:B0:97:3A:4F:1D:C9:30:83:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64AA945004C13661EC1C113AB5EA0CCAA21E543F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c6be0c-7940-4a4f-b9f7-c77b672267e1.roa
Signing time: Sun 16 Nov 2025 00:21:16 +0000
ROA not before: Sun 16 Nov 2025 00:21:16 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:aa:94:50:04:c1:36:61:ec:1c:11:3a:b5:ea:0c:ca:a2:1e:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:21:16 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=87a6d7f665d16c546f31c5cde72667c496700a4a940569d2d3d8818f4d9f64bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:f5:da:23:ef:3f:5c:58:9f:73:14:11:64:
53:d4:3f:64:b7:9a:22:00:6d:9a:1f:31:8f:27:cd:
05:b0:30:30:25:d3:2f:b9:1f:eb:47:c7:59:5b:67:
c7:0c:22:19:a9:1f:d8:1c:68:65:de:38:ce:2d:d8:
b2:c0:3b:59:19:0f:25:3b:de:bf:ab:fb:9e:b4:87:
06:d3:31:8d:c7:76:0d:5e:1e:62:c8:16:56:96:f6:
fb:8c:3e:b4:6f:bc:f9:0b:2f:dc:fd:dd:0b:c2:56:
73:98:3e:c7:3f:29:dc:b4:b7:47:94:a9:d5:49:2f:
73:e6:80:ae:c8:7c:fd:a8:b0:fa:85:73:1e:40:31:
67:14:53:e3:f4:a8:00:1d:aa:46:22:61:cc:5c:e6:
68:fc:38:c1:9e:f8:d1:2a:06:46:3a:a7:3f:a3:4c:
78:07:f3:44:c0:d9:72:df:6c:c3:71:db:70:ae:d7:
0e:52:8f:b2:eb:b1:5e:4a:eb:19:9e:26:df:a1:39:
cb:b0:5b:40:ec:8b:dc:c3:56:b2:60:ed:27:5d:ac:
d3:5b:50:dd:81:8d:63:43:e3:af:38:c8:ad:15:d9:
5c:84:81:d4:e3:f7:06:8a:df:c8:dc:66:66:61:0b:
66:51:d2:15:dd:01:9f:00:29:eb:5e:c1:d0:3b:c6:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:5E:B4:75:6F:B4:C1:A1:98:6B:B0:97:3A:4F:1D:C9:30:83:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c6be0c-7940-4a4f-b9f7-c77b672267e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:04:f4:2f:ee:e3:c2:e5:a2:63:66:6a:f7:87:13:12:80:ed:
15:d4:07:78:f7:fa:72:cb:25:d1:a7:40:20:a9:77:e6:db:aa:
cd:7c:36:54:52:d6:b1:a8:61:79:bf:14:dd:60:37:97:99:6f:
1f:14:c9:0d:a7:d9:f1:d4:82:d4:76:b8:f2:1d:f0:02:68:9a:
6c:f1:63:2c:4a:a9:63:97:85:46:4b:b0:8e:6e:ab:43:38:21:
20:b5:e9:1a:48:30:7e:e7:75:44:59:93:f6:34:72:27:b1:53:
3c:43:af:49:eb:07:ab:9f:d4:53:9d:39:0b:da:5b:2f:fc:9c:
5a:cf:a1:35:95:26:22:f1:bc:2b:f3:61:f3:ac:78:dc:f3:8d:
c7:e6:29:d7:b1:82:ea:df:6b:8b:0e:dc:2d:8a:32:4e:8a:60:
3a:e2:ce:e7:fd:9a:51:c8:90:09:36:5a:7b:19:47:09:60:8e:
88:c9:04:95:8f:15:a4:a3:d3:86:00:a2:70:29:41:fa:6c:b4:
3c:1d:33:4c:66:ac:70:14:ff:51:9f:3d:d5:09:15:a3:67:39:
7a:09:61:fe:21:35:0f:74:04:11:f3:a3:7a:e5:6f:ad:e4:df:
78:c1:ad:c3:9e:42:d3:06:a5:b2:d6:77:4e:ef:e5:fb:0d:31:
2c:c6:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:19 2025 by rpki-client