
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa
File: 4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa (raw, json)
Hash identifier: eNlTfznaapkrV2wIjW6pMlFcqOPfsjuWJFoi/PCDHjk=
Subject key identifier: 07:01:42:D0:F8:A6:E9:1A:DE:C0:50:7F:45:FD:0C:37:AF:A5:EF:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 276B7800AE9776BA49DF4F6ABA0565B8D50C37A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa
Signing time: Fri 07 Nov 2025 00:50:09 +0000
ROA not before: Fri 07 Nov 2025 00:50:09 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6b:78:00:ae:97:76:ba:49:df:4f:6a:ba:05:65:b8:d5:0c:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:09 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=b8528a24e83bd11910f4ccd984ff91d8a2169f92ae0694a20610a84040b46aed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:8d:d0:f4:31:e4:4c:96:9d:99:4e:40:8d:
b9:71:d8:89:77:14:94:9f:04:c3:d4:37:8a:b0:66:
37:ca:a2:75:6b:dc:98:42:1b:de:5b:58:8c:ae:6b:
a5:87:3d:fd:b2:95:92:42:67:87:4c:c0:f5:ac:8c:
07:96:de:e8:27:21:9c:49:48:94:2a:e4:f2:f8:e7:
cb:37:e4:6e:57:8b:0b:61:fb:87:ca:b1:e8:56:2a:
57:88:3b:4c:59:d2:11:6a:25:6e:e9:b6:0f:ec:15:
0b:d8:c7:3b:01:c9:7f:3e:0e:31:cd:fe:77:97:9e:
6f:9e:3f:7f:cf:90:b2:b2:b0:ae:27:8f:95:b8:9d:
4c:38:12:43:38:13:01:77:7a:53:65:51:98:0d:61:
5a:4b:0a:e9:bb:47:ec:44:3f:cd:b2:94:c1:5e:ee:
41:8f:ff:8a:93:25:f7:c8:df:d1:bb:3d:40:bd:78:
bc:ed:2a:96:6b:52:a1:a8:57:8c:98:70:6e:6a:a4:
45:a2:fd:1a:ce:44:2f:af:ed:59:cf:b5:ae:54:9d:
2a:67:01:53:0b:8a:b9:82:5e:99:2c:c9:5e:63:c6:
60:b6:bf:e7:4d:1f:60:21:ff:82:cd:71:7e:d7:47:
23:06:13:fd:6b:fe:51:fd:2c:5a:87:33:9f:1b:04:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:42:D0:F8:A6:E9:1A:DE:C0:50:7F:45:FD:0C:37:AF:A5:EF:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ec:71:f2:7b:25:8c:32:86:67:52:57:e4:fe:95:32:33:4c:
87:e5:28:63:5a:1d:7d:02:e2:e3:9d:34:b2:ac:4e:0b:cc:08:
4a:ee:cc:3e:c5:90:5a:90:bb:e5:36:90:9f:2e:8b:87:7d:22:
c6:fb:f9:2f:e3:7d:43:ce:83:16:04:56:6a:c7:7b:5e:f3:70:
d2:a5:f6:bc:fe:30:04:06:51:0c:64:b3:10:ed:3c:58:af:00:
eb:49:47:0e:9c:21:c7:a9:c7:d7:09:39:2a:ac:b4:f7:7f:28:
2d:61:c0:f1:fd:52:ba:fb:7e:2b:b1:49:1b:d9:ba:19:11:bf:
11:35:6b:7a:be:61:f0:48:e2:e7:23:8c:b8:fe:1f:f2:f2:88:
20:18:21:96:f8:80:50:62:75:ab:0e:95:34:6d:a8:de:0f:7f:
90:85:28:5a:86:df:f7:5c:9c:ce:f6:72:f3:83:0b:43:ee:8b:
83:80:21:47:6d:49:db:07:ff:b5:42:c4:cd:cf:44:eb:b4:cb:
51:27:2e:dc:e3:67:e2:7f:10:19:5c:80:a2:12:a5:8f:1a:94:
af:d5:1b:6f:74:bc:c9:e9:44:d0:82:4d:82:4b:70:9d:5b:61:
a2:7d:ca:c0:01:7e:b6:3b:d7:d5:c9:ae:2e:e5:7c:12:15:5f:
46:54:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:51:25 2025 by rpki-client