Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a00a5225-7aba-45f5-ab16-fd62fe46ec1a.roa
File: a00a5225-7aba-45f5-ab16-fd62fe46ec1a.roa (raw, json)
Hash identifier: Vl0cuYxDIgbUC+xMWR7U9X5kbLZDeDscTdaRiyEP60w=
Subject key identifier: 9F:B8:17:66:45:69:A2:6E:0F:23:27:17:2D:9B:91:19:13:7A:60:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 561C8910EF40F2CFA5B0EB5A16426DB09EA879C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a00a5225-7aba-45f5-ab16-fd62fe46ec1a.roa
Signing time: Tue 30 Sep 2025 00:12:30 +0000
ROA not before: Tue 30 Sep 2025 00:12:30 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1c:89:10:ef:40:f2:cf:a5:b0:eb:5a:16:42:6d:b0:9e:a8:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:12:30 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=b91cbb6756c9ac1afb67dc79576fba183a918b6f9b7ff7f9334141c144da5e6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:b4:f0:49:7e:2f:0b:2d:37:bc:82:79:c2:
6e:75:68:55:20:81:b5:1a:56:00:4b:c8:b6:46:89:
2b:d8:2c:ca:7b:ba:05:9a:87:b5:8b:d7:44:1d:77:
a9:2e:4f:f4:6e:8e:68:49:36:85:95:b7:c2:ec:29:
05:b8:b0:5b:d9:c3:25:c1:14:fe:5b:58:ff:4f:6c:
b2:5a:d5:eb:de:3e:03:aa:85:40:e4:da:eb:c0:33:
09:a7:89:42:33:f7:63:23:31:c6:34:ab:e6:c1:80:
f8:86:c4:55:6f:33:70:b5:47:30:8f:c4:79:59:2e:
77:6b:82:3d:cd:73:5d:5b:e4:3d:2d:35:dd:61:3c:
52:53:46:77:7f:4d:d6:91:af:d9:21:b1:82:0a:25:
9c:9e:d9:44:04:dc:ba:58:30:71:59:a5:4a:e1:3c:
8a:1b:02:da:c8:25:d3:d8:19:6f:46:14:0b:69:83:
b8:0b:c0:3b:df:f3:7a:7e:4c:02:58:3b:c3:15:ce:
8b:70:53:8c:42:1b:43:84:69:c3:61:1d:70:72:66:
ff:40:f6:c8:51:98:9b:27:0c:50:fc:c4:06:38:a3:
17:12:aa:ea:e8:fb:60:a1:a4:b3:ad:f7:b2:0f:d6:
4f:ef:22:6a:8a:7f:bc:47:65:b3:73:30:18:8d:18:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:17:66:45:69:A2:6E:0F:23:27:17:2D:9B:91:19:13:7A:60:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a00a5225-7aba-45f5-ab16-fd62fe46ec1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:4a:ba:b4:b2:99:72:eb:11:a6:07:56:e5:2e:d8:cd:97:2b:
74:ba:03:a8:60:f4:f7:4e:8c:2b:75:47:8d:fa:fe:a7:32:5d:
48:aa:da:7c:ee:6e:8d:93:75:82:30:6d:3c:d6:b3:06:80:7c:
41:cc:47:3d:05:a8:88:4e:61:22:c2:97:38:ca:f6:fc:d1:c4:
bb:6d:96:bb:a3:72:e3:3e:6a:4a:6c:e4:d6:57:77:43:5f:e1:
be:0d:7a:e6:94:ac:d0:3e:a8:c6:ae:7d:1a:4b:2f:a2:3e:7d:
f0:ca:73:72:ec:b0:23:ca:ca:d0:f2:7c:fb:3c:22:db:60:e3:
98:28:f6:4a:43:89:1b:70:18:35:59:15:e2:0e:5f:33:73:ea:
96:5f:84:3c:70:6f:cb:03:18:00:39:54:4b:0c:63:ac:3f:86:
42:62:33:cb:2f:c6:41:d8:9a:a7:3e:c7:00:76:6b:41:9e:95:
1a:38:df:34:b3:f4:6d:54:f1:e6:c5:70:fa:e2:fc:6a:87:df:
04:61:1c:bd:ce:4b:a6:36:fb:5a:17:2d:56:34:81:70:12:78:
c3:f5:d9:17:7d:a6:b6:47:58:5d:61:c7:aa:fa:c8:02:f5:c2:
62:e5:9e:4d:05:6b:dc:16:ed:8c:31:b4:98:6e:6e:e4:0c:dc:
ee:1d:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:59 2025 by rpki-client