Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
File: 5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa (raw, json)
Hash identifier: jJdIftpo5CC67Fe9EFNzT05OmVsFa7CP5MTUTigHkNY=
Subject key identifier: 12:3E:E3:61:B9:7A:03:7D:AB:FA:FF:A8:4B:13:30:2F:04:B7:5F:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76D910C5DD3E7273F2EA38DB60CEC5D6A5AEEDE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
Signing time: Fri 07 Nov 2025 01:00:11 +0000
ROA not before: Fri 07 Nov 2025 01:00:11 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d9:10:c5:dd:3e:72:73:f2:ea:38:db:60:ce:c5:d6:a5:ae:ed:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 01:00:11 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=ab75812ee8f03eeb99959b4926a2768e0c64ee90623aaf9ab671a82e07dd6d9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:2f:75:2b:21:19:de:26:4b:f6:a4:a4:37:
b3:c9:31:5a:7c:52:d0:ca:2e:4b:97:5c:9b:f4:f8:
5e:9f:a3:80:0c:c0:30:46:e7:50:f0:71:0d:df:f3:
30:10:9c:f6:94:0c:28:0f:e8:ac:f6:f7:14:30:81:
f9:29:48:81:59:75:6b:04:b4:43:63:76:60:0b:4f:
12:ef:9f:29:9e:5e:84:9b:c7:a3:c2:fe:24:8f:16:
06:25:bf:04:6f:63:9c:a4:6c:d2:bf:67:e8:a5:63:
0f:c0:5c:7c:0e:8a:dd:a8:f4:6f:60:b3:02:57:74:
70:77:dc:26:51:bd:9f:b5:3a:aa:41:27:2b:51:4c:
26:71:b2:9d:26:b3:be:10:59:b6:e9:99:bd:ef:36:
f8:4d:13:cc:dc:6c:8e:02:03:65:21:63:fb:29:3f:
14:c5:a9:12:e7:3e:2d:48:4e:29:2f:48:1b:cc:11:
10:db:9a:6f:6e:a3:a7:11:34:67:0d:03:01:90:43:
04:3b:84:ad:13:ef:46:93:73:7e:4d:33:3e:b9:be:
eb:0e:4f:ca:48:47:ce:b2:ed:e5:bd:60:4c:8f:96:
54:fd:6e:9f:b2:a7:bc:3b:f5:26:ce:c4:28:08:f2:
a1:6e:e1:b2:3f:24:89:33:e4:eb:d3:74:3c:24:1e:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:E3:61:B9:7A:03:7D:AB:FA:FF:A8:4B:13:30:2F:04:B7:5F:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
77:65:c3:18:78:fb:54:1a:e9:11:d3:a7:71:80:78:09:01:18:
35:63:d0:15:3f:b7:7e:fa:cc:f7:04:f4:e5:43:0e:f0:dc:6b:
0b:d1:d4:44:86:dc:f3:b7:3d:b5:de:ba:a0:6d:ac:4c:1e:2e:
d6:d6:bd:fc:4b:4d:32:f7:03:10:7f:3e:09:fc:8e:8e:c9:df:
71:c4:97:88:09:f6:e0:53:c6:3d:06:9c:a7:84:35:9a:36:68:
91:4d:37:45:43:41:67:70:00:47:89:bd:aa:3e:94:5c:ad:a4:
f7:a0:ca:91:b0:96:39:74:ec:a4:65:dc:00:24:cf:5c:5d:5e:
de:cb:f7:56:5a:6a:b8:58:5f:8e:de:ba:5f:89:f3:1a:40:64:
b5:36:03:7a:14:47:51:b3:46:d3:94:1a:79:a8:e5:3a:22:b3:
62:50:c8:94:f4:d4:69:88:a2:35:9c:52:2e:ac:2a:2e:d0:03:
c2:ee:29:4b:76:1a:2a:e5:5e:ba:3f:74:57:c6:11:42:2f:71:
55:e8:de:9f:8e:c4:73:a0:ea:bc:08:a9:da:d4:ea:bb:1a:ff:
e1:19:48:13:99:64:92:26:6f:c8:9b:f5:d3:76:26:d2:79:a7:
c8:d2:92:22:ff:18:bf:18:35:bd:32:85:b3:5d:29:ad:99:0b:
27:2a:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:22 2025 by rpki-client