Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69260764-a69d-4cd9-bd2c-c9458e9a194b.roa
File: 69260764-a69d-4cd9-bd2c-c9458e9a194b.roa (raw, json)
Hash identifier: SSdoNuYHTehUH7mBJeGvU0SIFzPGr6wqtX6jbHoUxR8=
Subject key identifier: 09:CC:AE:C0:6B:C5:6C:D0:57:49:0C:D2:28:2A:3E:53:50:13:8A:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B444E310509DC688D7550B670469D0BF9A5B5F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69260764-a69d-4cd9-bd2c-c9458e9a194b.roa
Signing time: Fri 07 Nov 2025 00:50:45 +0000
ROA not before: Fri 07 Nov 2025 00:50:45 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:44:4e:31:05:09:dc:68:8d:75:50:b6:70:46:9d:0b:f9:a5:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:45 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=e6d62753b0c4a9bbf9a18a11a8322cd43f4fe3ef6485313c8cfff50ec6a13bf1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:dd:7b:fe:d3:7d:f2:9f:7d:f6:56:91:c8:
2b:a0:72:8f:67:be:de:eb:e8:e9:d0:dd:be:59:8d:
94:e7:ba:d8:60:99:2f:04:35:1f:ce:68:26:4d:67:
ab:d3:91:0a:15:d0:9f:51:04:a5:48:dc:cd:c8:e7:
d3:0a:da:67:68:16:73:e1:c1:e2:16:70:ee:07:d3:
96:1d:0d:e1:84:b4:57:55:5e:78:b6:29:19:8b:f3:
75:cf:57:13:45:06:89:39:b0:1c:43:37:3e:7d:53:
35:be:e3:99:54:d2:d8:ea:80:06:26:37:ce:f4:5b:
69:41:b6:65:c0:78:3f:d3:e8:6d:e2:33:12:21:4a:
2a:a9:64:58:e4:bf:94:02:29:36:75:8e:85:5e:76:
f4:82:28:88:5a:b0:d2:13:b2:a9:48:85:46:fd:89:
01:4b:b2:9c:3c:c0:53:c3:03:fe:c4:c1:54:13:a2:
d6:01:e5:26:37:db:ca:f2:65:0a:ee:0b:3c:a9:22:
a1:0d:d7:99:5a:ec:22:48:fd:00:ae:14:e5:23:81:
d4:3d:1a:d3:65:f6:3f:e5:16:dd:04:62:89:f2:74:
0a:85:51:ad:5e:1b:89:4f:15:84:53:70:5e:49:c5:
b8:4b:f7:bc:27:46:38:c9:ff:99:9c:e2:74:10:fd:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:AE:C0:6B:C5:6C:D0:57:49:0C:D2:28:2A:3E:53:50:13:8A:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69260764-a69d-4cd9-bd2c-c9458e9a194b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c2:51:4a:26:fd:bf:6a:7d:9c:e0:9d:b0:fe:76:4d:89:14:
a5:4c:57:c0:63:20:72:72:b0:08:35:11:f2:0c:bb:d4:bc:51:
42:6d:7d:41:64:0c:06:4d:78:72:d2:56:af:bb:e5:4a:31:7a:
61:10:d6:79:c3:26:14:d9:19:2a:48:fb:d7:6f:2c:24:5d:66:
3e:d7:66:18:8d:e9:0d:b2:06:66:69:f8:72:49:21:15:86:a4:
b3:ef:2b:17:ec:b5:95:54:c9:94:ee:79:8a:4f:5f:1b:f4:fe:
8e:06:5c:01:36:ce:83:45:f6:81:10:6f:36:9b:07:61:9b:56:
d8:ec:96:e6:df:77:68:40:b7:6a:03:e0:05:ef:6a:3e:7a:69:
da:d5:86:c3:d0:c5:df:0f:bf:a0:d9:f9:79:20:35:95:1b:e9:
a0:38:27:a8:f0:d4:20:8d:e3:76:be:ba:ff:d1:86:a8:9f:fa:
9f:26:d6:93:65:7d:f1:b8:da:34:0b:8d:03:ff:26:c9:2e:d1:
29:5f:e7:65:e0:3c:36:38:80:93:cf:43:8f:5f:c1:bf:ac:34:
8b:14:99:ca:46:56:e6:af:28:39:fd:c6:d2:65:4d:06:f8:be:
3a:ea:58:e9:27:b2:e2:92:56:6d:f2:26:b3:9f:24:6a:37:46:
3a:55:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:41 2025 by rpki-client