Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa
File: a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa (raw, json)
Hash identifier: c/1oEqm14Uq0kJ1O/r80If8TZpcizVlSgQ4SUm1CPpE=
Subject key identifier: 28:6B:92:5F:92:4D:90:74:87:10:60:65:2D:F1:DD:9D:4A:2D:30:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D941324B94E416C3B2FEC97F620577386B37B93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa
Signing time: Sat 08 Nov 2025 02:01:16 +0000
ROA not before: Sat 08 Nov 2025 02:01:16 +0000
ROA not after: Sat 13 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.174.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:94:13:24:b9:4e:41:6c:3b:2f:ec:97:f6:20:57:73:86:b3:7b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 8 02:01:16 2025 GMT
Not After : Dec 13 23:59:59 2025 GMT
Subject: serialNumber=959fd13191e27620f72fc0f447a4ae6671cbb83618f3bde5c661dc97a487c81c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:1e:b2:bf:02:6a:6d:74:b2:c8:8c:c4:22:
11:77:45:be:6f:c4:be:c6:2b:8a:d2:95:8c:88:ce:
5d:d6:4f:88:04:b8:20:ad:75:d9:6c:e2:bb:10:31:
5a:41:63:4e:7d:b5:e9:11:98:14:68:db:85:fb:66:
41:96:a7:ca:64:ff:38:91:79:56:82:a9:c4:90:a1:
75:cb:9a:ef:f9:8b:32:b2:d6:21:87:c2:08:a7:3f:
66:d1:e7:17:2b:85:7a:a5:a0:fa:04:3d:bf:3d:24:
4b:99:e4:64:52:46:b3:41:71:f4:e4:d7:11:fa:b8:
f9:6b:70:cc:af:04:5a:a0:5e:71:d8:66:96:81:b0:
fc:ac:88:7f:64:dc:ca:ac:58:68:29:1b:73:ea:48:
64:97:99:e5:bb:dc:0d:63:01:40:96:39:fc:35:75:
4d:ff:a9:c5:20:76:e1:44:43:e8:47:e1:95:50:81:
0c:15:3b:05:d8:5c:52:b3:09:19:ee:a5:bb:39:7d:
a4:f1:ff:ab:7f:71:37:d5:74:2d:eb:c5:96:e6:ea:
82:9b:43:7c:fe:77:24:b7:40:7e:e2:3f:90:b4:95:
ad:11:b4:b5:75:5b:25:5f:2c:dc:13:f9:90:71:05:
3e:64:0f:03:d9:3b:54:89:db:10:54:f0:97:2f:d2:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:92:5F:92:4D:90:74:87:10:60:65:2D:F1:DD:9D:4A:2D:30:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.174.134.0/23
Signature Algorithm: sha256WithRSAEncryption
09:9c:b7:9c:39:57:c7:a1:06:5d:e3:c3:2c:aa:81:4a:6e:e3:
cd:ba:2b:40:3e:f0:5e:69:86:b8:7c:23:66:31:3d:10:10:4f:
73:36:62:9a:43:f0:73:7c:95:27:c1:af:25:86:3b:de:47:71:
66:5f:21:29:97:d3:72:94:a5:69:96:c9:71:45:e4:9a:6c:53:
fe:83:e7:9d:5c:1a:dc:2e:cd:af:31:a4:90:b8:af:18:7a:ae:
72:fb:a8:f4:0e:e2:48:53:00:64:06:63:99:ec:b0:9f:31:26:
0e:1f:a7:51:91:f2:4d:08:57:1d:c5:45:41:0e:a9:bd:ba:e9:
9a:35:7d:29:59:46:64:2e:c9:ad:07:01:bf:79:e4:7f:ac:6c:
62:50:73:f3:f5:6e:2f:22:41:32:ef:82:09:12:ac:c7:31:7e:
76:90:a6:5d:ee:7e:c0:4b:55:69:52:36:b3:c8:f7:30:cd:ad:
1f:49:74:a7:56:3c:bb:e6:dd:0f:5f:12:c6:87:23:66:6f:37:
5b:20:a6:fb:a7:4d:9f:70:4d:a0:a4:54:96:c3:17:f1:75:6b:
22:9b:d4:8a:25:46:e0:4d:61:56:1a:5b:bd:33:35:01:e6:e0:
16:2d:ea:9a:f6:96:10:8e:11:b2:e0:d6:23:ca:eb:92:85:d2:
f5:f2:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:59 2025 by rpki-client