Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa
File: 929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa (raw, json)
Hash identifier: bJOttBNbHaS8fPOLmd7jr6Ij6eW3IUyaDVYUUVLKey8=
Subject key identifier: 13:E9:BD:87:4A:4A:FB:2D:EC:B8:B2:EA:AC:6B:15:B9:E1:B2:7F:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A0942FF8D44CBE0B4B9FBA016A15A349418944C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa
Signing time: Fri 07 Nov 2025 01:00:10 +0000
ROA not before: Fri 07 Nov 2025 01:00:10 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:09:42:ff:8d:44:cb:e0:b4:b9:fb:a0:16:a1:5a:34:94:18:94:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 01:00:10 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=a321de4ff94fdfc45a947682a760ddffa1cb1f1b32ebe888c2d9762c3662150c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:01:a3:cd:76:2d:f8:67:aa:c8:a7:b0:79:
6d:13:47:58:ea:ca:1a:3c:ee:fd:ee:0f:e9:cf:ab:
e8:0b:0b:b1:92:aa:2e:ab:75:60:1c:69:76:69:3f:
70:d7:61:c9:3f:b7:34:c5:6b:be:ed:bc:db:72:a7:
5d:7b:06:6b:fb:74:92:38:8c:f4:85:24:5c:56:c3:
d4:ff:97:21:83:1d:88:71:19:c2:64:03:eb:c4:45:
78:45:3b:10:e8:9c:a8:4b:af:0d:90:bd:b8:0e:a2:
3e:79:fc:c2:d1:4c:a4:bb:00:27:6d:23:bb:71:8f:
3f:55:54:7f:bf:4f:21:0c:fe:4e:3f:0e:ce:bf:e6:
3c:b2:8b:ee:88:96:e0:cc:85:c2:aa:36:22:ec:e8:
1e:0b:73:ab:6b:ac:45:a5:94:fb:5b:76:7f:c1:bc:
c5:cb:26:b9:11:18:08:80:f0:14:50:ff:05:4b:01:
bf:70:08:1a:c7:3f:6f:8b:ba:f7:90:90:54:dc:1b:
4a:66:80:68:01:2c:6b:bd:a0:91:0e:4a:7c:72:62:
4a:17:39:e2:8d:56:43:90:41:ce:f0:a6:1d:f6:7b:
16:3d:e9:8b:8b:4c:cb:37:0d:d7:f1:65:38:4e:c5:
02:ab:86:89:f4:c7:cf:f6:9e:80:27:35:a2:1e:1e:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:BD:87:4A:4A:FB:2D:EC:B8:B2:EA:AC:6B:15:B9:E1:B2:7F:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:47:e1:03:5f:98:72:ee:3c:c6:03:9c:d6:4b:fd:3e:df:a0:
85:02:d9:55:e5:15:08:b3:21:40:9d:16:c3:3c:ff:47:7d:9c:
38:f7:b0:8a:a4:b0:c6:c2:b0:0f:30:03:ee:2f:16:45:08:12:
e3:89:61:56:ad:83:0a:1c:e8:79:cd:2f:12:38:15:97:d0:a1:
39:62:bd:25:54:f3:ca:59:e8:aa:81:11:ee:40:32:08:44:31:
65:65:10:4c:0d:ea:3f:8a:e3:ee:9b:ea:59:eb:41:92:a0:47:
e1:24:e4:c3:a3:7c:02:7a:95:63:d9:e7:10:d5:98:bd:6b:2f:
86:d8:ce:a4:14:36:0b:31:8c:e9:8c:15:3b:ce:32:9b:18:c3:
1e:d3:a0:e7:2c:7e:44:b6:9c:51:f6:20:3a:53:92:09:57:58:
8f:f2:56:55:c7:38:ef:86:79:03:66:b5:10:25:9d:47:a4:08:
b6:4e:2b:06:a6:e4:db:0a:2a:41:48:b0:df:48:8b:da:ab:94:
03:fe:71:7b:6f:50:50:c7:11:c7:5d:fc:ef:b7:8a:5d:fd:85:
20:33:51:d3:48:55:c4:a8:25:ac:d0:eb:8f:24:b1:50:de:4b:
bc:9b:49:50:3a:23:c6:18:47:fc:e9:92:a3:23:4f:56:da:ef:
36:4a:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:03 2025 by rpki-client