Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa
File: 66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa (raw, json)
Hash identifier: kpmt3A8Fr/dDzCekPSNUM/cfjyOZvTNC2+Gdecsxg8U=
Subject key identifier: 7F:FE:0E:65:A7:92:1B:E9:9F:DA:A6:9D:52:4C:04:AB:EF:ED:91:5C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A378D344A4B4038C3F1CBF1352247A9B2D03C96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa
Signing time: Sun 16 Nov 2025 00:00:34 +0000
ROA not before: Sun 16 Nov 2025 00:00:34 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.240.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:37:8d:34:4a:4b:40:38:c3:f1:cb:f1:35:22:47:a9:b2:d0:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:00:34 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=0746c55633681648c9f74e9800e7f5a6df76614f8651f0163c7dc47917f62160, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:a0:91:5d:c3:bd:7f:57:45:f9:14:a1:67:
1c:60:1e:37:4f:b7:a6:30:3b:41:4f:68:f0:e3:65:
eb:0d:e9:0d:3d:eb:4a:f0:94:95:c7:b7:b2:40:e5:
12:7c:6e:8e:af:62:72:d0:46:4d:e9:8e:6b:20:4b:
cc:5f:93:b0:a9:ae:69:ec:2e:b9:91:f9:06:d6:db:
4e:da:f9:d1:00:3a:0a:d1:cd:c3:6a:ae:53:90:86:
6b:32:5d:18:b6:74:84:9f:c2:92:dc:50:e7:65:5f:
b3:35:a5:e7:18:a7:4e:17:9d:8f:3e:cc:e6:e9:67:
1e:11:4a:b9:5c:8f:0f:ad:2f:9f:9a:cb:e0:e1:57:
36:da:5c:0c:c1:69:97:68:08:dd:55:a4:3d:42:b0:
0f:48:5c:ba:52:73:f0:48:f3:a6:27:14:41:10:90:
85:0e:d0:7c:c3:d3:e6:3a:2a:e8:81:1e:fe:2e:14:
98:d2:bc:cf:b1:55:b4:1b:c3:fa:8e:85:f8:52:f3:
85:17:2c:fd:fc:6c:7d:e7:2b:86:02:0b:4b:05:2c:
98:c5:9b:33:99:ee:be:37:d0:62:1f:e7:cd:b1:20:
7a:d7:a5:e0:7d:36:c2:e4:61:e7:b8:0f:84:36:5a:
f7:27:fb:a9:c1:a9:ee:73:26:33:4d:4f:d9:19:94:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:0E:65:A7:92:1B:E9:9F:DA:A6:9D:52:4C:04:AB:EF:ED:91:5C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:3f:c1:fc:0e:2f:70:54:d0:f9:16:94:a9:9d:73:8f:71:3e:
f3:a7:09:69:40:14:03:5e:c2:ab:04:82:21:aa:9a:6f:b9:73:
56:73:3a:50:d4:87:28:56:01:8b:ed:15:42:24:57:76:04:79:
95:ef:8d:66:6d:4e:1e:3b:71:c4:84:e5:59:5f:c3:e7:3d:88:
27:90:0c:a9:52:b8:ea:51:b9:b6:22:fd:f6:06:07:dc:76:a3:
b3:fa:46:4d:3f:60:0f:c7:08:80:67:4a:29:b6:70:35:0c:99:
96:d9:de:bb:a2:23:8e:7f:b7:f2:d1:0e:a8:42:c9:33:74:71:
50:03:5e:d4:30:31:2a:4c:66:ec:44:b8:1d:e3:95:b5:67:e7:
a5:a4:ee:9c:95:db:ce:7b:5e:be:76:d5:f4:44:1d:c6:72:fd:
1d:2a:04:52:37:b5:23:75:89:f3:72:2b:fc:e9:93:78:b7:da:
30:07:60:4d:65:59:01:fb:f4:7f:3d:48:09:aa:79:10:d9:56:
12:ba:50:52:4e:d9:8c:c2:f3:0f:5d:a1:5b:47:40:fe:49:69:
1c:0b:16:d7:3b:66:60:2c:dd:5a:e6:9c:fd:5a:b0:45:f3:9b:
62:02:86:40:54:a0:23:15:81:a3:1f:2d:a7:03:62:36:57:5a:
3e:bf:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:20 2025 by rpki-client