Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d955b49-53bf-486d-8b46-c91c98ad9581.roa
File: 5d955b49-53bf-486d-8b46-c91c98ad9581.roa (raw, json)
Hash identifier: jokKCeG0iAwWwlPaodsuwOijoGWAHXyx+3X6QDlsu2g=
Subject key identifier: 50:92:4F:EB:F6:FE:06:83:88:FB:28:40:7A:78:A9:B1:6A:BB:E9:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71D7EF4116BC8B80EE6523772C85968BBC0FF47D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d955b49-53bf-486d-8b46-c91c98ad9581.roa
Signing time: Fri 07 Nov 2025 00:50:11 +0000
ROA not before: Fri 07 Nov 2025 00:50:11 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d7:ef:41:16:bc:8b:80:ee:65:23:77:2c:85:96:8b:bc:0f:f4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:11 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=8bd40af0cb04dcad79bc30fca353903dd16b4c1ad0f670684d86a25ed149695a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:3b:ec:20:a0:68:30:3c:c1:62:c8:05:2c:
96:bb:33:5f:81:0a:61:b5:35:03:39:54:26:fe:f1:
85:9c:b9:03:b3:95:55:93:2a:a0:c8:b7:11:45:a9:
33:1f:83:04:81:23:85:ae:6d:75:cf:9a:ca:67:48:
2a:56:13:c5:94:0a:1c:53:6c:9c:72:f0:6f:74:0f:
86:75:fe:56:3d:b3:b3:32:8c:35:39:40:7f:01:8e:
cd:4f:05:3a:7e:97:2d:ec:d9:57:47:87:41:52:4d:
2d:f2:30:07:24:a5:fc:40:12:e6:97:04:78:48:a1:
73:e3:c0:21:fe:01:02:59:77:5f:b9:cf:36:90:11:
bd:41:d3:c8:90:98:40:0b:7b:ea:f2:fa:af:13:8a:
8b:b4:1f:18:15:9c:98:62:1c:a0:7f:4d:fa:44:b5:
ba:0f:59:3c:cc:f6:74:80:73:fd:78:fe:3d:82:60:
44:fb:41:7c:5e:05:67:4d:1c:bb:56:82:4a:05:95:
b2:9b:8d:b6:80:15:4b:e2:23:04:71:c9:65:8b:0d:
46:6f:1c:57:19:23:27:b8:6b:c0:ff:27:1c:e9:a8:
c7:0f:2a:6e:e6:8a:1b:53:a0:ce:e9:fd:04:78:c9:
1d:38:92:1f:f8:58:8d:f6:2c:f4:6a:89:be:2e:b5:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:92:4F:EB:F6:FE:06:83:88:FB:28:40:7A:78:A9:B1:6A:BB:E9:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d955b49-53bf-486d-8b46-c91c98ad9581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:6c:d1:92:f4:ac:bc:e3:dd:4e:b9:5b:94:23:71:01:3d:23:
2c:33:63:04:5c:4d:ec:44:46:32:15:ed:4e:ed:54:a0:d5:f9:
9f:56:12:fa:ec:2c:01:e5:33:2b:41:f8:4b:fb:bc:20:4b:81:
8c:69:c6:87:99:37:0c:fa:76:df:f9:0a:4c:54:e3:82:e1:48:
ac:82:9d:16:95:4b:89:a1:7b:47:e6:cb:a8:8f:09:9a:a8:0c:
90:99:55:e4:fe:0a:e5:11:b0:e2:60:fd:70:f6:66:e8:3a:48:
7a:43:11:79:6c:89:5f:fe:ec:4d:8c:05:75:8e:63:bc:fb:76:
2c:da:a5:19:b8:fc:6a:e3:82:d0:7c:ff:76:69:c0:14:2c:fe:
56:74:c4:a4:df:28:37:4d:1b:1f:a3:fd:39:1a:41:47:68:2a:
2c:04:16:07:a9:18:f2:e7:53:bf:b4:45:46:4b:53:32:69:c3:
b0:f8:cc:48:cb:af:7f:21:e6:ce:93:e3:35:d3:73:77:ef:bc:
60:eb:f5:c7:2d:18:b9:03:bc:00:23:8f:2a:c5:f0:33:59:89:
d5:9b:ae:b9:0f:dc:09:ab:43:1a:6f:5c:da:19:3d:c3:e9:af:
59:11:e5:b8:5f:ba:19:44:77:f9:03:04:81:90:95:e8:47:5e:
b4:48:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:50:41 2025 by rpki-client