Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c3dc35c-cfee-43f3-8216-45c4d0187c88.roa
File: 7c3dc35c-cfee-43f3-8216-45c4d0187c88.roa (raw, json)
Hash identifier: dP33uUq/KOdyU1dzbwqKzVrJsFry89dqGAYqWgeCYO0=
Subject key identifier: 01:3F:B8:32:33:38:97:69:C3:FA:3D:C3:93:FB:0A:43:43:25:14:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CC64709B437CA15E72B596BAFDABA0AF424842D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c3dc35c-cfee-43f3-8216-45c4d0187c88.roa
Signing time: Thu 13 Nov 2025 00:11:43 +0000
ROA not before: Thu 13 Nov 2025 00:11:43 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.87.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c6:47:09:b4:37:ca:15:e7:2b:59:6b:af:da:ba:0a:f4:24:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:11:43 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=8227fead46741dca9d4f3988ae202f3af9ce633d9730599e9e75eac32c7491a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:2e:b4:55:d6:e8:5e:e7:d1:41:7b:22:15:
9b:f4:ea:ee:b6:78:4d:8e:37:14:a5:c9:50:d5:4b:
d9:04:61:a0:5d:59:0d:46:b2:4f:c7:b5:c6:ed:05:
df:9d:38:42:2e:fd:38:78:06:15:43:cd:78:80:94:
7c:b4:19:22:7a:71:ce:43:49:5e:1d:3a:0c:5b:6d:
98:dc:cd:5d:76:48:ce:bd:bc:f5:bd:d6:ab:b9:52:
f8:f9:00:24:d3:eb:e9:1d:d5:19:64:37:47:01:80:
0d:47:7e:5e:30:b9:93:31:d7:a3:c0:64:61:f4:bd:
10:20:de:34:7e:3d:c3:87:65:ea:51:59:69:33:99:
7e:0a:b0:ed:41:1d:08:7f:80:f1:7d:db:3b:d2:ab:
94:79:6f:ef:5d:84:ca:54:fe:9c:2c:79:ad:af:48:
e1:02:d3:6f:e4:dc:73:c6:1f:66:fb:04:94:03:2d:
2e:7b:d7:53:8c:6c:61:08:96:5a:5f:98:79:c5:d7:
b0:48:66:1a:36:de:4b:fd:35:dc:47:ba:fb:43:79:
8b:d2:9d:c6:dd:03:cc:5b:f0:3c:e4:f0:59:41:39:
82:80:7b:78:44:40:2c:14:a5:f1:25:ed:67:1c:d0:
91:0c:5f:30:a0:b5:68:38:ab:2c:d7:a4:9b:9b:c6:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3F:B8:32:33:38:97:69:C3:FA:3D:C3:93:FB:0A:43:43:25:14:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c3dc35c-cfee-43f3-8216-45c4d0187c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:af:63:84:c7:3a:f5:d1:8a:91:e9:ef:34:00:ac:a4:50:67:
b6:75:33:f0:ff:ca:09:64:c1:55:5a:ee:ca:b9:76:2b:38:47:
a4:3b:ad:e4:77:c8:a5:92:fb:d0:1b:cb:82:fa:5d:c4:c2:16:
6f:14:3e:e4:4d:43:f4:5e:be:00:28:28:98:10:9d:56:29:64:
7f:a7:04:f6:ed:ad:7a:f7:8c:20:46:2b:2d:53:48:f9:30:b0:
d1:f0:80:28:6c:3b:d1:14:03:99:11:87:99:96:42:98:c1:08:
6d:32:f0:1c:a6:c7:97:e1:57:e8:f7:f1:91:cf:1a:fd:2f:ca:
2f:41:c0:86:6d:96:43:b0:d5:97:e2:de:ea:7d:d4:2d:ef:3a:
1b:7e:d6:95:ea:a5:65:46:95:7c:42:fe:b8:88:a2:ea:74:73:
36:c6:04:c4:9a:91:56:de:e0:c4:e5:08:bf:d3:cb:63:b2:97:
cc:42:b6:f5:fd:f4:9e:a0:d0:67:3e:b0:da:ad:79:d6:60:10:
7e:4f:5d:c5:1c:2a:f8:74:1f:f1:13:b6:4b:5e:8d:ee:44:13:
c9:7a:b5:57:40:83:c8:37:66:52:9d:74:a6:00:c1:ab:8e:7c:
55:19:f8:57:b3:32:50:5d:8c:27:3f:5a:55:32:53:a7:6e:82:
50:2a:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:15 2025 by rpki-client