Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c67465-806a-43ab-97ed-8188212ae7b1.roa
File: 48c67465-806a-43ab-97ed-8188212ae7b1.roa (raw, json)
Hash identifier: Yg+1N9FVnjfO3fpplX9A5HPxOrXPCt/2kVBMOLDY1g0=
Subject key identifier: 78:76:B5:22:85:6C:2D:F7:34:C1:A8:DD:AA:FE:4F:0D:8C:9C:D2:40
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 330F2CAEB0482BFFD9553E31944EEB7F599A21D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c67465-806a-43ab-97ed-8188212ae7b1.roa
Signing time: Fri 07 Nov 2025 00:50:42 +0000
ROA not before: Fri 07 Nov 2025 00:50:42 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0f:2c:ae:b0:48:2b:ff:d9:55:3e:31:94:4e:eb:7f:59:9a:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:42 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=031f13a24909e7b10e331022c5095437ce5593ed7c379b7622fafa689d0e6a29, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:b4:d9:7e:ed:34:f0:9a:b7:d7:aa:5c:dd:
04:56:d8:24:f8:25:c4:40:e9:e1:3c:22:97:41:cd:
8e:7c:e5:e0:dd:18:4a:10:cc:3d:2d:70:af:c7:58:
9b:f8:6d:85:b2:ee:c8:3c:da:3c:88:65:74:4e:d4:
d9:76:d7:67:de:d1:09:de:35:0c:fe:21:d2:cd:22:
c4:28:a3:1b:4a:76:2a:f1:0c:c1:de:f1:00:31:e4:
5a:8f:ab:64:36:81:72:30:ba:7d:66:a2:4e:a4:d4:
3c:3e:59:04:fd:1b:28:e0:23:36:75:f1:54:e5:df:
af:b6:da:b1:b8:22:1e:29:19:f4:cd:ff:bf:c1:d9:
19:fb:bb:f7:db:8a:bb:78:7e:be:c0:65:5f:ea:3c:
65:f7:17:b8:b0:9c:13:8c:f8:ec:75:4e:b0:a6:a9:
01:9f:9a:3a:ef:59:b0:36:eb:1e:43:33:97:6a:87:
1e:09:01:3a:d5:12:13:11:70:a6:7d:42:c1:ae:84:
38:4f:6d:c7:6a:8e:92:c6:db:f8:d6:fd:62:0f:52:
b5:40:97:92:83:36:e2:8d:03:1d:91:0f:98:54:f6:
e0:0e:0f:71:75:6c:e0:7e:61:cc:9e:bf:39:04:fd:
c2:f8:8f:3e:6b:0c:fa:63:0f:44:e2:8f:a7:ab:75:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:B5:22:85:6C:2D:F7:34:C1:A8:DD:AA:FE:4F:0D:8C:9C:D2:40
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c67465-806a-43ab-97ed-8188212ae7b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:05:fb:3e:48:2d:77:a0:03:ac:6f:a0:42:8c:5c:ca:22:51:
47:a1:80:b1:ec:e2:ab:56:76:1c:2a:0c:76:ca:cd:14:66:5c:
a2:4a:59:5c:af:53:54:bb:c5:de:e0:30:fa:f6:22:dc:92:b8:
03:5e:47:d0:39:74:ed:c1:a9:b3:21:5e:2e:48:c4:7c:0e:cc:
c5:59:e9:e3:1a:9a:3b:91:be:a5:6e:c9:b7:3a:00:09:53:c9:
44:7d:e7:49:e9:8e:4c:a1:37:ca:c5:a9:73:cc:9b:6c:0d:81:
46:43:ef:ba:24:e9:fe:98:37:0a:64:af:18:a6:27:a7:41:eb:
c0:61:4d:25:fa:c5:f0:96:e8:12:cb:48:4a:64:91:2d:bf:02:
b2:df:12:13:0b:8c:d5:3b:75:8e:10:0f:a1:7b:a0:f4:52:29:
f6:0b:88:92:a4:a9:38:c5:d3:73:0a:5b:bd:f8:da:b8:ae:4a:
94:8b:40:bb:af:5f:77:15:f6:2f:98:40:1e:0f:2e:f6:c4:63:
ba:01:77:90:ba:26:51:9c:07:49:8f:e7:42:30:1c:75:68:d4:
8b:c8:b7:0b:ce:48:ec:6b:40:ff:54:16:b0:18:5b:e9:10:93:
d3:e4:8a:dd:28:99:e3:75:ee:1e:4a:57:f5:69:ed:f1:d9:c0:
50:45:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:00 2025 by rpki-client