Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa
File: 424f8ace-0502-433d-b305-08ed3d55c9f5.roa (raw, json)
Hash identifier: F2B9dI++kAst2oU4/gZF8FnOalH/YwyWhbdoFbBEfpk=
Subject key identifier: 65:38:DC:51:3C:1D:6D:A0:E0:68:39:C4:99:16:FE:B6:43:F6:9B:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5750AEEBDEB11C41C788A5B3EAD021702A288E4F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa
Signing time: Thu 13 Nov 2025 00:21:32 +0000
ROA not before: Thu 13 Nov 2025 00:21:32 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.21.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:50:ae:eb:de:b1:1c:41:c7:88:a5:b3:ea:d0:21:70:2a:28:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:21:32 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=ba84a6364c57ec6e79b1f2b66efe73b1ced2e3a3ed60ea0f60c0703e73ec6176, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:09:c1:03:d6:05:50:88:df:58:60:01:72:
15:cf:30:39:60:5e:83:b7:60:91:a0:d2:70:34:e5:
84:3e:28:13:3d:a6:fb:64:16:9f:f4:ff:46:78:1e:
5f:94:6b:fb:52:23:e6:f9:67:e2:87:29:43:16:71:
0b:df:91:a7:6d:4a:8d:48:89:c9:a1:93:8c:05:c4:
28:13:14:46:eb:61:04:4a:a8:d1:80:f0:9e:39:67:
b2:4b:ee:61:5c:06:3f:0a:87:cd:0a:b0:e3:97:c5:
d1:2e:9f:30:86:e7:a5:80:14:4a:ea:f5:b3:6f:3f:
8a:a4:49:fb:91:5d:16:ff:30:a3:fb:20:79:e7:c2:
56:81:27:9b:67:2b:9a:58:0d:0d:b5:18:16:a9:d1:
38:eb:03:1a:68:b6:9f:61:15:43:3c:1c:40:ac:5e:
16:e3:ff:f4:6a:20:84:7d:00:9b:42:a5:ee:bb:53:
60:d1:f8:0d:c8:88:02:15:3f:c4:0b:9f:e2:b8:1c:
87:a5:1e:f5:5b:61:77:24:e7:40:cc:80:59:73:11:
61:45:9e:2b:9f:56:26:97:16:e8:e3:9e:be:c3:7c:
9d:8c:80:4d:36:cf:9f:96:41:0f:ce:83:92:5a:1f:
44:ed:22:79:62:e1:b8:c5:7d:ef:ba:1f:36:65:d1:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:38:DC:51:3C:1D:6D:A0:E0:68:39:C4:99:16:FE:B6:43:F6:9B:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.21.204.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d1:22:38:43:f1:7a:95:79:25:58:a4:36:ff:38:72:3c:74:
ea:56:e7:06:ec:4f:74:29:6f:3e:59:ea:01:94:30:14:e4:d5:
6e:48:46:99:9c:d9:b9:52:c0:10:19:11:b4:cd:96:a9:ec:e4:
8d:6b:e6:f0:f0:42:c1:a8:d4:d3:a2:64:be:1a:28:42:dd:78:
5a:32:a1:b4:fc:83:ea:aa:45:b0:f5:d0:95:37:13:c6:2a:6e:
a7:3f:66:75:88:64:60:45:55:1c:62:68:51:40:b3:54:0f:0f:
06:20:6e:03:34:cd:f4:87:b7:82:bc:10:84:01:93:ef:cc:47:
41:a7:7d:57:ba:ca:0d:9a:47:d0:29:73:ec:b5:08:f2:c7:9d:
bf:68:50:65:45:25:bb:38:61:6d:9e:36:d6:f2:58:f8:fa:81:
15:0e:d4:f2:81:c0:9a:8f:c5:e2:4e:b5:67:a1:c4:11:42:4a:
b3:37:7c:19:a1:20:6f:fb:bc:6d:c2:ff:80:43:22:a5:37:70:
fe:30:1f:20:ff:85:6b:61:16:7e:b9:1c:ad:e7:d9:85:6a:35:
f8:3e:40:ab:2f:5e:8e:8b:e5:ed:e7:09:ab:a8:25:23:91:31:
8f:9f:4f:32:92:c9:bb:7b:d2:8c:40:f9:79:01:3c:5f:1e:d7:
c2:e6:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:22 2025 by rpki-client