Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9db0cab-638c-4829-8755-ee8f012ccb19.roa
File: a9db0cab-638c-4829-8755-ee8f012ccb19.roa (raw, json)
Hash identifier: jytnJkmoBXx1XgxF2YEVQlVHuchirrqbijHDWUVBxBU=
Subject key identifier: C2:89:19:5D:84:63:EA:92:46:12:85:DF:91:2A:E4:28:AD:03:1F:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50CE213FE58FE4FD7EBF295B4023797F1E551583
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9db0cab-638c-4829-8755-ee8f012ccb19.roa
Signing time: Fri 07 Nov 2025 01:00:06 +0000
ROA not before: Fri 07 Nov 2025 01:00:06 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ce:21:3f:e5:8f:e4:fd:7e:bf:29:5b:40:23:79:7f:1e:55:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 01:00:06 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=27f8971f3fe773cafa416cc2c76c3693c2f532f9bd70a5ce8f68aa1138db5064, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:48:5c:fc:9a:ca:3d:1a:43:cd:e5:14:f8:
e4:b1:e9:67:c5:d9:dd:92:c5:47:2a:2f:8f:c1:9d:
83:8f:d3:3e:68:b1:65:c2:f1:88:10:56:03:22:d1:
a8:43:cc:dd:89:f1:81:f4:18:06:fd:de:2c:2e:dd:
38:1e:45:11:3d:de:6f:0d:2b:ec:21:26:db:84:d7:
fc:db:96:8c:77:dc:d1:fb:3f:72:00:81:71:a7:bb:
5b:5f:40:fc:43:ae:dd:13:5f:6e:51:fb:97:f4:24:
bb:82:d9:b1:97:96:3f:7b:47:42:97:8b:8d:18:1f:
68:c4:53:55:18:1a:0c:1e:da:bd:30:ff:10:78:b0:
ab:4a:0d:aa:33:1c:e7:3e:fa:82:d9:89:76:6c:e9:
c5:bf:74:3c:fd:a3:87:16:ae:1a:d1:e6:fc:ac:0f:
43:d7:7e:5b:86:6a:70:64:77:4b:bd:45:c0:e7:24:
cf:ee:f9:27:a8:97:56:21:6c:bc:78:c2:9c:e1:95:
eb:02:20:2a:3f:3a:03:58:3e:98:2f:79:38:90:fb:
c9:da:8e:c3:8e:49:46:64:af:d7:8d:43:98:8b:2e:
90:f6:e4:ae:4d:f0:c0:fa:40:a4:51:6a:82:1c:72:
2a:22:75:e1:ca:39:80:28:d0:48:7d:0d:ee:3d:af:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:19:5D:84:63:EA:92:46:12:85:DF:91:2A:E4:28:AD:03:1F:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9db0cab-638c-4829-8755-ee8f012ccb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.36.0/24
Signature Algorithm: sha256WithRSAEncryption
78:13:68:7e:40:cd:a5:d4:41:86:2a:6b:38:23:44:9c:1d:b8:
48:d5:bd:3e:ee:55:17:53:04:4d:a9:e8:a4:42:64:c3:be:8f:
fe:65:41:fc:a0:51:7a:35:1e:cc:2f:0f:da:83:88:1d:0c:b9:
c2:6c:aa:c5:83:13:a7:9e:ed:7f:2c:ab:9d:88:04:6a:67:db:
57:86:c4:52:01:12:20:0c:6c:5b:97:de:34:27:63:f5:f7:bb:
1a:29:c0:db:7f:56:3b:47:b8:f0:77:c9:36:54:75:4a:05:41:
c9:25:bd:5c:62:74:fc:b4:e3:23:39:c6:8f:70:f7:53:00:1e:
b2:e3:4a:74:81:e2:04:b5:d4:40:a5:36:36:7a:2b:e1:58:b3:
c4:91:b9:b4:8f:23:b2:91:5a:7d:6e:0c:16:cf:4d:03:f2:6f:
23:d4:49:1a:d2:b8:cb:da:2c:88:08:c2:7b:cc:be:c5:a0:1b:
ae:b4:ec:3e:3b:44:aa:73:00:8c:a8:cd:2a:67:11:92:34:87:
1f:55:7c:9e:76:40:69:f3:c2:01:fb:17:f2:bf:5e:3f:7a:72:
da:07:5f:56:3c:c5:51:c5:9b:34:06:37:0d:a3:15:79:8c:6e:
5f:03:21:47:6a:44:36:93:ab:e2:7c:b2:72:4b:a0:52:3a:d4:
b1:44:db:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:17 2025 by rpki-client