Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
File: 6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa (raw, json)
Hash identifier: JXPm4Kwm9Xwm0H0lNB2VOZMTf3XoPEugz2z0LvjoZvw=
Subject key identifier: 15:8C:94:6A:06:E2:03:29:9B:A4:E5:60:DC:9A:79:2C:FF:86:44:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61A8673280F26367DE7D9C25B374DA10E2B255CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
Signing time: Thu 13 Nov 2025 00:41:40 +0000
ROA not before: Thu 13 Nov 2025 00:41:40 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a8:67:32:80:f2:63:67:de:7d:9c:25:b3:74:da:10:e2:b2:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:41:40 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=3519b54ef3a99cb2f74ffcc432e680517eaea3934d2070a63aefcf334fd5fbf6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:42:69:23:08:73:34:5b:5c:76:2f:ea:27:
a1:31:5a:a0:0f:a5:8c:e8:8c:b2:00:53:27:45:76:
4b:c5:26:83:25:f7:81:14:cb:4a:1f:7c:9d:df:b5:
31:8a:7f:ed:88:c5:c9:d7:25:d1:66:77:d4:28:4b:
6a:31:cc:92:b6:8f:af:39:36:e6:0c:d6:b1:fc:34:
c4:84:02:09:d7:35:d3:88:29:a6:61:80:2a:77:d4:
0e:39:3b:3c:4e:d4:17:ae:72:04:6e:7e:be:4c:bd:
b7:8c:b7:ad:af:d4:10:4f:5b:93:85:95:82:a4:98:
40:be:cc:6a:cf:54:91:5c:9e:00:f4:e5:dc:62:e0:
ba:a4:54:55:ad:83:29:c0:23:50:d4:1b:80:ee:11:
20:66:22:fe:04:6d:2c:ba:55:6e:fc:43:18:5b:05:
cc:bb:d9:66:a7:0b:9d:21:ac:cb:bf:76:e9:ab:48:
fa:84:c9:ef:48:ca:bc:13:d4:3c:a7:7c:64:98:13:
ce:d9:f2:9c:52:71:29:76:e3:84:29:b7:33:d6:f5:
50:38:84:5f:b9:a9:44:8d:a2:4d:5b:22:4c:fb:b0:
64:46:42:ce:c0:f2:c0:2f:96:aa:c0:b1:76:b1:cf:
96:31:2a:10:48:4a:43:ee:9a:4c:ab:6a:11:16:2b:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:94:6A:06:E2:03:29:9B:A4:E5:60:DC:9A:79:2C:FF:86:44:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c1:da:ab:17:cd:d2:49:c6:43:e7:cc:4f:29:f6:76:98:48:31:
64:63:a9:1d:08:38:a7:88:c9:00:77:68:db:f5:a5:54:5b:04:
29:2f:a5:8a:99:71:e0:af:6f:64:f4:8d:42:57:f9:56:32:5e:
02:b4:b0:d8:0c:44:fd:a6:52:43:d9:35:e4:07:6f:1c:3c:4a:
3b:37:bb:77:f3:58:0f:2d:c6:a3:50:6e:e5:6f:8a:38:cf:a6:
66:9b:e9:f6:fb:fb:a9:1a:cb:35:09:5b:a2:0e:bc:b7:59:56:
fe:6a:fd:f7:bb:2b:ca:22:af:17:4e:e8:65:65:a9:08:d6:9f:
df:30:e5:dd:b0:e1:fb:84:59:3c:71:1e:f8:3f:6d:2f:d6:c6:
a0:db:3a:77:6e:0d:60:85:c0:27:59:1d:33:8e:df:4f:9d:35:
86:d5:d6:0b:cb:fa:66:a7:f4:37:3b:af:a1:b2:fd:aa:8e:d0:
1a:41:61:88:13:21:0b:7d:d5:9f:9c:9f:9e:e8:06:54:04:55:
e2:ac:5b:da:06:7d:9b:10:9e:7a:d7:36:bd:2d:69:f8:02:87:
1f:c9:6b:5f:82:a9:64:34:55:69:2d:22:19:3c:47:c0:fa:3a:
89:4b:57:c4:9e:ef:30:b6:3b:06:55:bd:fa:c4:67:5b:88:f1:
a4:8e:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:17 2025 by rpki-client