Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa
File: 5aeaa84d-4555-408c-adfb-7243b9469a8d.roa (raw, json)
Hash identifier: vhlmJyLERoAGAxJCUztE0S25LANgli+7Uy8ilVYIYfA=
Subject key identifier: 88:71:FB:8C:7A:4D:CC:63:F4:4A:F3:A9:A9:1A:94:B3:37:D4:7D:71
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62E058B55B7F534C935DE8A0DAD703AEC30B0D13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa
Signing time: Thu 13 Nov 2025 01:00:57 +0000
ROA not before: Thu 13 Nov 2025 01:00:57 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 220.157.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e0:58:b5:5b:7f:53:4c:93:5d:e8:a0:da:d7:03:ae:c3:0b:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 01:00:57 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=7057a3a3b0c6adcb176f370c6e6b5fdfcd9b936cc797e4ae4b128389a0441447, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:9e:9c:e8:17:25:ce:b7:97:0f:4b:58:89:
dc:50:be:84:66:74:ee:4d:40:f7:cf:01:2f:bd:84:
9b:07:7d:be:a5:86:ea:76:2e:15:8a:6f:11:eb:97:
a3:f0:d2:61:df:a6:18:f1:15:5f:86:a1:f1:54:b6:
f9:03:97:ed:f5:47:31:01:68:a6:2d:6c:5f:d0:33:
a9:88:9f:a6:ba:00:db:34:56:5a:f5:dd:4d:be:29:
48:86:46:66:de:ff:70:97:15:42:90:fe:b7:68:57:
c3:b6:60:2f:55:bd:44:44:4d:bb:c7:ef:83:76:d6:
f1:bf:e2:64:6e:21:4c:ac:52:91:1b:4f:0e:f9:2e:
a0:98:6b:8c:17:18:07:9d:6e:8b:c4:59:5c:20:4c:
16:6a:da:da:0f:df:52:40:6d:6a:ba:46:80:1c:dd:
59:89:f0:90:c5:c2:5c:7b:1f:2c:2e:2e:a5:70:b7:
d6:5d:83:e0:fb:8a:b5:32:87:b0:81:e9:b0:90:ba:
6a:5f:93:69:b0:10:7b:41:24:9d:49:cb:22:18:65:
dc:c9:b5:c5:da:5b:a6:19:9c:ea:75:2b:3f:0d:45:
29:30:b7:ce:6d:ba:8c:3b:94:36:45:7b:b1:c1:91:
84:d8:22:cb:ec:9b:e1:3c:29:f6:ce:1e:27:30:fb:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:FB:8C:7A:4D:CC:63:F4:4A:F3:A9:A9:1A:94:B3:37:D4:7D:71
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.157.78.0/24
Signature Algorithm: sha256WithRSAEncryption
27:68:f5:2e:15:4c:2a:b9:87:28:e4:71:71:95:43:48:8f:56:
c8:18:5e:d3:e6:aa:3f:6d:59:48:f5:43:e9:43:9b:5e:58:47:
fa:80:0b:0f:dc:2f:26:7b:f9:d9:43:41:2d:c1:56:3c:64:e9:
35:15:b9:04:fa:bf:3c:e4:40:30:16:23:41:47:bd:87:dd:40:
15:a0:ed:ac:12:99:fe:b0:76:45:0e:a4:b1:ac:5b:75:f6:23:
33:a2:9b:00:23:ac:99:1e:0b:59:5d:7b:d6:a5:50:9e:14:85:
4e:6b:5f:07:9a:bf:dd:1a:e3:7b:9a:5e:71:92:0f:d8:cf:4c:
99:be:5a:a5:9d:84:85:12:4e:c5:f2:16:75:0e:6c:e6:66:10:
2a:54:91:9c:78:40:48:88:88:0e:3d:3d:e1:99:4f:da:25:73:
d5:e5:df:dc:2f:ba:55:6e:ee:17:24:4e:a2:00:ee:51:5a:74:
c5:ff:ae:ff:5e:bc:b8:7f:f3:97:3a:5f:6b:a1:6b:0b:55:98:
10:d9:c4:f1:78:11:01:4f:df:4e:48:d2:b1:95:16:2e:94:b8:
26:5b:bf:46:7d:c7:aa:36:61:f6:d8:76:bb:c0:9a:a8:bc:85:
66:a0:19:17:d6:6e:49:1c:34:f4:bf:8e:73:64:0b:62:94:85:
a5:b5:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:47 2025 by rpki-client