Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa
File: b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa (raw, json)
Hash identifier: 2iHsFuakAoHyJMK/lufMXMOnycjF2OcEfRPekKH05zM=
Subject key identifier: 55:2E:C9:39:EE:1E:0B:5F:D8:EB:14:37:62:61:8C:42:FC:4F:EF:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AAE718C7F54B0C7B476CB7D8D57D15AC36CE35D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa
Signing time: Wed 24 Sep 2025 00:52:35 +0000
ROA not before: Wed 24 Sep 2025 00:52:35 +0000
ROA not after: Wed 29 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 75.101.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ae:71:8c:7f:54:b0:c7:b4:76:cb:7d:8d:57:d1:5a:c3:6c:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 24 00:52:35 2025 GMT
Not After : Oct 29 23:59:59 2025 GMT
Subject: serialNumber=9413a6199dfd52dae0e22c2d34f21eefa1375d2648d85bf546cde5516060acc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:fc:5a:67:3c:e7:a0:d9:4c:f8:d9:8a:44:
5e:47:b6:40:51:bd:be:5d:ca:9e:0c:84:e2:6f:aa:
59:1f:ba:a5:ef:b5:3f:6a:f0:e7:89:b3:05:01:f5:
b0:4b:0a:cd:36:48:f4:3b:4e:88:d5:e8:50:c1:a6:
52:11:e9:d0:0d:65:64:94:56:d1:ed:7c:dc:a9:43:
71:45:b7:6d:7b:3a:ea:4d:f6:30:65:eb:13:1c:10:
fb:18:d9:e1:60:4a:e3:bf:08:e3:7e:08:59:c7:d9:
47:07:0b:9e:e0:1e:fa:30:15:6f:33:e1:b0:fa:23:
53:a0:86:df:c5:d3:b6:19:51:a2:c5:03:de:c8:86:
4c:e9:4f:83:ac:e4:c9:f9:71:37:0d:73:4f:02:10:
db:d4:92:d5:14:69:50:9b:88:32:aa:04:48:5c:91:
cc:99:12:3f:de:ee:9f:60:bb:95:a8:e5:b9:82:09:
3d:05:dd:c3:7f:80:8f:0a:99:c0:71:a0:ca:7d:4f:
b1:c8:a1:98:0b:89:ac:08:a4:30:1f:18:94:5d:a7:
17:23:b5:70:62:03:bf:25:dc:08:ee:dc:64:7d:8b:
e4:a6:4e:58:1d:fa:38:fb:da:c5:a5:f2:59:4c:9e:
19:a7:13:d7:f6:79:50:ec:0a:1a:2d:30:73:cb:0b:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:C9:39:EE:1E:0B:5F:D8:EB:14:37:62:61:8C:42:FC:4F:EF:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.101.161.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1f:7d:45:33:46:18:af:bd:c0:00:da:a9:f4:7f:4c:e5:5b:
1d:59:3e:96:83:fb:b1:57:63:7c:11:f1:84:ad:3c:7e:b0:02:
a9:00:05:63:10:38:bd:ba:3f:24:16:ae:5c:fb:09:0d:e3:5d:
22:3c:5e:18:26:bd:cb:65:c3:2f:17:31:bf:90:cd:5d:09:b8:
fb:6a:be:38:0d:4f:8d:07:6e:26:80:a5:37:38:d2:74:42:87:
fa:78:d7:6c:2d:19:1f:74:45:8d:ea:17:14:5a:24:27:2d:09:
b1:d6:72:af:cd:26:88:8f:e7:ef:34:7d:99:cb:0b:c3:71:cc:
5b:a1:e9:fc:00:d5:e4:af:4f:22:da:59:29:1d:c3:ea:ef:22:
57:4c:25:bb:fb:65:a6:4b:1f:d7:8c:c2:04:16:84:2b:34:83:
6d:d0:15:01:4f:a0:c7:4b:6b:f1:d8:cc:4c:28:1b:2e:60:87:
c3:71:95:b2:d5:33:1a:00:ef:77:d2:48:24:03:54:05:d3:a5:
65:83:5c:f6:68:8e:e2:ab:a8:dc:23:8a:cc:69:4d:b9:b3:29:
0c:4e:5a:fb:92:03:66:ff:c7:91:0a:ce:d0:51:ab:5e:19:3a:
18:6e:de:ec:df:a9:eb:3a:00:44:3f:42:5b:42:24:83:64:58:
0f:5b:df:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:03 2025 by rpki-client