Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac79c128-c537-4bda-845e-27b9a36060d5.roa
File: ac79c128-c537-4bda-845e-27b9a36060d5.roa (raw, json)
Hash identifier: pt8JCbb+TQy1JNzKHWG8DRqrgZpF+yfYocAi1nhj7oQ=
Subject key identifier: A9:E4:84:48:37:AE:F4:C2:66:AC:31:4B:D2:71:4F:8E:2C:71:89:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15D08A7835C17AAB78E250B5142938EE7CEE5F29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac79c128-c537-4bda-845e-27b9a36060d5.roa
Signing time: Thu 06 Nov 2025 06:06:39 +0000
ROA not before: Thu 06 Nov 2025 06:06:39 +0000
ROA not after: Thu 11 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d0:8a:78:35:c1:7a:ab:78:e2:50:b5:14:29:38:ee:7c:ee:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 6 06:06:39 2025 GMT
Not After : Dec 11 23:59:59 2025 GMT
Subject: serialNumber=57f6c4519c72ca74ea115ac366e760473eb3d25c0aa1435d41809741b380f43d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:de:5c:c9:42:af:3a:0e:45:c9:3f:b0:20:
40:74:7b:cd:04:a0:2d:36:44:f5:80:8b:f7:04:55:
3e:b3:a8:64:e1:f4:42:41:bf:13:d7:83:48:0a:09:
f1:fa:f8:a4:3f:11:a8:b8:c2:bc:7a:26:0d:f6:02:
12:23:36:9e:e3:40:d3:96:4b:32:d5:c4:61:83:73:
15:5f:ec:6c:bc:f0:fc:3f:96:33:25:f0:41:31:5d:
64:f3:95:99:77:4a:ab:8c:54:cd:c4:ff:20:ed:09:
92:88:bc:fe:95:ff:8e:99:fa:bd:bc:14:0e:b9:cc:
14:72:4f:dc:46:0c:5a:20:0a:b0:54:4c:23:bc:e7:
b4:d2:3d:02:79:f2:a8:90:8e:d3:49:3b:ca:40:0d:
74:ce:7a:89:32:20:b0:9b:6f:85:ca:1f:6e:13:23:
b0:a3:4d:fa:ae:22:12:63:41:34:da:fd:fe:77:f7:
ad:42:ba:0a:90:9f:71:cb:bf:1e:cd:b2:ce:b1:74:
7f:7d:bf:6c:96:2c:11:2c:18:ad:5a:55:93:20:fe:
0c:d1:1c:be:6f:fe:39:4f:04:6d:2d:0c:33:4a:47:
d4:f1:51:c1:64:15:b4:b4:92:d4:d1:b5:a1:9c:b6:
d3:a3:ea:3f:c4:e4:85:29:9a:12:fe:25:d5:a1:08:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:84:48:37:AE:F4:C2:66:AC:31:4B:D2:71:4F:8E:2C:71:89:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac79c128-c537-4bda-845e-27b9a36060d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.55.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:01:05:e3:59:01:41:28:3c:ac:e6:de:da:a9:00:af:f0:c1:
26:cf:be:b5:96:a1:c4:1c:01:25:40:67:88:a2:6d:b7:67:5f:
7a:97:b4:cf:ed:9f:7d:d1:a7:02:da:af:58:6a:ab:a0:fe:16:
fb:5a:7c:24:94:d9:19:5b:d5:da:02:6b:04:e0:72:06:31:41:
48:e2:81:50:e3:d5:e5:a7:d7:85:6f:13:33:16:e5:88:33:2f:
ca:52:06:6d:03:5b:ba:8a:25:cb:3f:22:ff:a7:a2:f4:77:e8:
2c:cb:c5:78:ad:40:33:95:21:7e:89:1c:15:97:d9:0f:5a:55:
c3:b4:77:89:2d:71:4c:1f:52:5e:3c:12:e6:06:fc:b0:62:b6:
d4:83:f7:cf:8c:0d:a1:fb:fa:cd:e6:fd:a2:0c:47:82:dd:27:
7b:22:c4:c1:2e:b7:0b:d9:2b:c4:ae:13:40:ba:24:9a:c6:c4:
45:4b:67:b4:75:82:e8:ab:0b:9f:80:e5:78:bc:8b:04:a7:78:
d2:61:72:ee:72:f3:94:9f:cf:e5:13:11:d6:67:a9:e2:cf:1f:
b6:f1:99:55:72:01:fa:fd:dd:3c:e1:41:a2:82:78:1a:22:98:
ea:99:80:86:dd:66:c6:8d:6b:95:2c:d3:75:9b:1f:75:48:a0:
e2:a5:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:42:14 2025 by rpki-client