Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa
File: 9489bef2-0a21-4c24-8378-03322c296a7b.roa (raw, json)
Hash identifier: 9DQ0PYxcLHloPeDvvhyLwKmIdrTTN3pJzBKbmJx+Y5E=
Subject key identifier: D6:3D:FC:28:04:C6:D2:70:C4:56:5D:8A:42:E8:B3:D2:A5:9E:0F:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 725C165420F37EFAF156DC9E57A4A3A15A99F47B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa
Signing time: Thu 13 Nov 2025 00:11:19 +0000
ROA not before: Thu 13 Nov 2025 00:11:19 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.21.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5c:16:54:20:f3:7e:fa:f1:56:dc:9e:57:a4:a3:a1:5a:99:f4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:11:19 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=b03a4bd83d8e0603c997cc3c709ace9a91509cba59381a82beb563168f3d1eb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:b7:f8:03:84:c2:8c:f8:f7:b3:33:23:76:
07:63:6c:7c:98:07:d0:e2:78:97:84:c7:9d:79:45:
52:9a:55:b5:38:c1:5a:8d:ba:8a:f7:99:ec:d6:5a:
c9:bd:57:73:c7:d5:57:8b:d9:83:fb:1a:fb:fa:b9:
11:51:76:be:51:c4:fc:08:8c:56:38:de:3f:b0:6f:
36:c0:67:95:d6:c8:c7:c0:b9:56:31:58:82:6e:bb:
9c:d1:e6:4d:d5:1b:3e:cd:c9:3f:44:37:5f:9d:f6:
f5:a2:d3:d8:25:94:51:a3:6d:86:a3:8a:ec:4b:d4:
52:69:c6:3c:46:93:71:5e:db:1d:11:31:aa:21:42:
20:c0:6e:d6:01:3a:ce:59:5f:58:b0:dc:2d:f9:22:
ef:46:c2:27:4c:dc:48:1d:47:8e:f8:f6:aa:f0:d0:
cc:7f:a0:58:dc:f2:74:b4:c6:b1:9c:ec:02:2b:2f:
16:f3:3c:42:3d:c1:64:92:0c:26:8f:ee:27:17:76:
df:28:6a:b4:65:74:e3:d5:bb:70:e6:62:66:c7:9c:
4a:82:02:1d:1a:cc:14:9d:4d:88:4d:e1:7e:5c:88:
d7:42:e1:98:5a:38:6a:ae:2a:4c:98:f0:e9:96:28:
e4:be:68:1d:69:e9:ef:2f:a8:f4:03:e2:e0:fa:89:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:FC:28:04:C6:D2:70:C4:56:5D:8A:42:E8:B3:D2:A5:9E:0F:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9489bef2-0a21-4c24-8378-03322c296a7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.21.211.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ea:65:eb:13:13:76:0c:b9:73:9c:bb:0f:63:5a:0f:8c:f0:
65:90:8c:89:d8:23:e2:d8:c2:32:68:fe:cf:7e:2a:a8:3b:81:
49:2f:a9:db:86:b4:38:6f:ce:c6:55:71:db:fb:e2:08:e1:ff:
36:c6:b1:fa:6f:62:94:8c:1e:61:83:53:30:9b:21:5a:c8:a7:
68:04:57:fd:d7:29:66:68:d3:96:40:1a:6f:91:23:d8:0a:3e:
09:05:63:e5:6f:b4:60:7b:a0:6c:5c:fb:06:a4:a4:05:23:2d:
b5:dc:cc:02:ee:04:df:9f:2a:21:36:34:b6:64:c2:05:6f:86:
9a:82:8e:dd:7d:98:c6:78:4b:02:e6:06:5c:38:e5:c1:16:b0:
53:3c:fa:f5:c8:b3:e7:81:4a:0a:dd:db:64:b2:7d:46:e9:f9:
2f:e2:95:16:bd:cb:3c:67:0c:2f:c7:bc:e1:a9:fa:d9:99:4e:
46:34:3b:26:0f:69:90:d1:e8:43:84:8d:7b:a4:7f:f8:0f:26:
e8:6c:99:83:1f:72:06:3d:9a:a1:0f:54:80:36:20:64:40:03:
0e:1f:3a:ce:8b:db:52:58:ce:c2:b6:bf:70:19:4f:5a:17:35:
59:6c:3a:a7:1f:89:c7:c5:70:d3:17:06:35:58:96:88:04:18:
06:8f:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:00 2025 by rpki-client