Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
File: 5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa (raw, json)
Hash identifier: RPER7D9AKu2cQmstyh8gqExRx0vEmkpnbyTVgVZEs1c=
Subject key identifier: BE:78:72:BE:6B:CE:8D:C3:3D:05:D5:45:A6:86:08:AE:CE:5B:42:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 101817E2656CC4812F9EDAC54DC0959780E89A27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
Signing time: Sat 25 Oct 2025 00:01:14 +0000
ROA not before: Sat 25 Oct 2025 00:01:14 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.210.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:18:17:e2:65:6c:c4:81:2f:9e:da:c5:4d:c0:95:97:80:e8:9a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:01:14 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=653c4ba82a327ab6c16b634664c550899bffc7a564eaec422240ca0dcc015f6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:82:be:db:a1:09:fa:d5:a0:04:3a:47:63:
6e:63:40:2a:1d:d4:c9:41:4d:7e:58:94:64:db:52:
20:60:40:8a:df:61:af:54:10:76:1c:5f:19:a7:3e:
c9:de:cf:32:e4:0a:58:5d:0e:b0:f1:e3:e1:8a:16:
0c:75:e4:03:f3:6f:15:22:51:45:88:1e:a8:aa:11:
b6:e8:2a:c5:6f:1a:c6:1f:80:e8:67:dc:79:81:8b:
91:33:9a:59:0b:ec:43:c4:5e:50:fb:39:45:27:4a:
fc:0f:03:1c:a3:5d:ec:3a:0a:e0:dd:10:68:9d:69:
f1:22:b0:fa:50:a6:3d:ce:6c:09:eb:57:8f:cd:ac:
ef:9b:93:f1:7f:ba:f5:23:5e:d5:52:69:aa:c0:64:
a4:be:73:cb:62:3a:32:bd:5b:25:a8:a3:f7:e4:72:
e5:b9:eb:74:8f:a3:49:e8:13:2c:60:1b:43:50:c8:
78:09:e6:c1:48:dc:3b:e5:3b:86:4d:fb:bc:fd:e8:
04:4b:c4:9d:26:e7:48:1d:bf:11:00:19:50:31:40:
48:5f:d6:57:68:fd:76:49:d9:71:2a:e4:bb:90:0f:
e4:1b:b5:56:1f:61:79:51:6c:51:58:bc:90:95:f6:
0c:b1:99:8f:bf:06:ef:70:4c:42:0e:c5:f0:66:42:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:72:BE:6B:CE:8D:C3:3D:05:D5:45:A6:86:08:AE:CE:5B:42:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:a5:a7:3e:f7:99:b9:24:a7:34:a6:0a:5f:06:4f:03:75:81:
b9:b5:00:c2:08:22:6b:ac:fe:aa:40:af:4c:9d:88:63:65:15:
f5:a0:c0:e5:80:34:ca:33:26:e3:4d:88:2f:ef:94:f0:7a:7f:
91:f2:b5:c8:ac:d6:de:2f:01:10:53:5f:50:05:a9:fe:ee:1a:
b4:36:ad:f8:c4:62:ce:25:87:93:d2:61:90:d0:4e:e6:4d:b6:
1c:db:20:4f:37:ba:7b:68:8f:2f:c3:98:eb:50:c7:ad:92:1b:
25:6a:90:00:30:93:db:43:cc:c5:02:30:c4:70:f0:3a:e8:27:
26:fd:5a:eb:fa:47:07:26:b8:69:cd:ae:10:01:a6:98:e9:93:
be:a4:c3:14:e1:3d:e6:2f:ca:9c:03:7a:76:9e:8b:43:3d:31:
2c:be:36:6e:25:58:16:c5:f1:46:49:e7:32:df:41:b5:42:b6:
5f:24:0a:9e:3f:ec:fe:36:0d:35:50:38:23:17:dd:3b:48:4a:
13:a1:a0:e3:b8:e7:68:34:32:ce:28:6e:21:22:b6:fe:7b:d9:
a7:ab:cc:7c:da:82:56:5a:16:1c:f7:e5:da:61:f4:87:ae:32:
66:c2:d7:d6:ad:4c:51:84:7d:22:ba:21:41:69:be:34:d5:e9:
d6:e1:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:41 2025 by rpki-client