Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92951763-fea0-41a4-8023-3920146a2b6c.roa
File: 92951763-fea0-41a4-8023-3920146a2b6c.roa (raw, json)
Hash identifier: tSF4a9JOVNUgsAD3SE8RGt46TTZ3W6oo1Z0G2JFZ5Nw=
Subject key identifier: 25:0F:F3:E6:ED:27:D1:73:4A:F6:88:79:55:5D:E8:1E:E5:13:4A:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5353B2CB9D1C7E80007B5E41E3CFE8C4857A6F90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92951763-fea0-41a4-8023-3920146a2b6c.roa
Signing time: Fri 07 Nov 2025 01:00:08 +0000
ROA not before: Fri 07 Nov 2025 01:00:08 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:53:b2:cb:9d:1c:7e:80:00:7b:5e:41:e3:cf:e8:c4:85:7a:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 01:00:08 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=dd918ebe1031392103260c6d6b07fb1f9fdb4e6aa9281db05d76089c44597bef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:f9:91:41:e0:4f:95:36:4d:92:f6:7e:d9:
a4:47:c3:ee:dc:79:80:3f:8a:6d:47:f5:18:38:45:
5f:e6:cb:ab:4d:a2:74:e0:53:69:e0:c7:f0:15:cb:
89:e3:8e:29:44:38:07:d6:c5:b9:33:e9:7d:5f:36:
b3:60:2b:6b:48:d8:4d:a8:07:0c:c4:04:ca:7b:b2:
c8:f6:35:32:8c:4f:b6:48:67:11:31:d3:23:7a:f2:
fd:9e:19:4b:1b:0f:8b:db:b8:ec:37:e8:e5:ea:8c:
78:9c:8d:ed:15:62:c2:0c:ae:79:a4:79:46:84:b4:
c2:64:4e:86:66:62:c1:7d:44:d5:87:07:f7:0b:91:
b7:56:a8:61:24:1a:03:d6:0e:5e:63:77:8f:c9:c2:
e6:23:9e:6b:0c:05:5c:35:6a:47:52:3b:f1:d5:82:
18:55:e8:ab:3e:33:2f:d8:14:12:4b:ed:ff:21:89:
ac:65:f0:ca:a4:99:f7:29:74:0a:80:9b:ee:14:2c:
08:6c:fc:f8:dd:38:32:b8:7a:ff:7f:38:83:d5:1b:
a6:03:1a:44:ba:fd:ac:18:77:07:b2:bf:ba:78:4c:
69:f4:10:6a:eb:e6:4b:c0:ee:92:7c:a1:14:a3:d3:
0c:be:bf:09:fd:15:7e:1f:0d:23:ae:45:2e:c9:48:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:F3:E6:ED:27:D1:73:4A:F6:88:79:55:5D:E8:1E:E5:13:4A:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92951763-fea0-41a4-8023-3920146a2b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.21.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a6:60:9e:d0:cb:14:58:7f:91:7b:e6:75:12:82:ec:17:d6:
4f:65:cc:43:5f:d2:59:80:ee:c7:9b:75:bb:d5:a7:f2:cb:35:
50:6e:54:56:cf:de:32:b4:79:7a:41:8a:3f:02:1d:24:c3:d4:
81:86:15:d9:aa:82:24:b5:c2:17:05:ee:60:18:fb:8f:b0:32:
57:ca:c0:c8:69:6c:ab:27:79:73:51:a1:af:b1:63:ab:e9:4f:
23:72:7b:24:7b:6a:69:5b:62:32:58:ec:c3:4b:79:07:e2:dd:
1e:62:1b:c8:53:1c:20:d9:03:46:b9:37:7c:34:41:3d:42:0d:
98:a2:09:c2:a0:89:a2:08:23:56:ff:a2:a2:c8:f7:a8:36:92:
76:d9:31:3b:04:26:4a:04:23:75:98:5c:83:31:d8:b2:f3:c0:
b6:3d:18:89:80:9e:3a:d1:7b:c1:4c:8e:38:65:d9:f9:b8:4d:
6c:2d:75:43:42:11:e7:47:6a:c6:51:59:a3:08:79:6e:ed:48:
af:75:73:11:93:b3:8e:b3:d5:7b:a1:0f:19:a1:19:bf:02:e1:
7d:16:13:c5:0e:32:65:67:00:be:c8:f0:fa:9c:6f:06:a5:18:
89:7d:4b:56:36:57:16:e2:78:85:90:e1:82:ec:c6:02:53:d5:
8a:a2:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:36 2025 by rpki-client