Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf8c2352-31e2-451c-8d45-f20afbc2351c.roa
File: cf8c2352-31e2-451c-8d45-f20afbc2351c.roa (raw, json)
Hash identifier: TUw/lkI0qt1D8JCvLnHJt9eLM5sM6JCYq2cUlwgvmIo=
Subject key identifier: DD:4A:8F:69:9B:70:F4:69:EB:1B:56:5E:A5:96:28:1C:9E:0E:60:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16811223222DCDEDE995DE836CB53ABADAB1F3F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf8c2352-31e2-451c-8d45-f20afbc2351c.roa
Signing time: Wed 12 Nov 2025 01:41:26 +0000
ROA not before: Wed 12 Nov 2025 01:41:26 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:81:12:23:22:2d:cd:ed:e9:95:de:83:6c:b5:3a:ba:da:b1:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:41:26 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=de54c067decc935e0466412c7a13a98f39c2c64170105f162d950ff2377c300d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:74:3b:24:65:2e:df:00:2c:d3:14:d2:b9:
8e:b2:28:95:19:7c:21:7a:e7:72:2e:ae:4d:7d:f6:
48:fd:46:b4:b3:d4:8a:fa:d6:86:9d:01:78:ec:0c:
6b:48:30:af:44:5e:56:48:6e:4e:5a:d6:35:36:45:
eb:1d:ac:9f:aa:71:ed:f0:f3:d6:9d:8a:e6:9d:0b:
c8:1e:28:d8:22:86:63:e9:af:63:8f:39:4e:8c:57:
80:40:25:91:4c:fc:1b:23:e3:70:2b:59:3d:33:cf:
e6:77:f3:86:86:7b:70:84:95:be:3e:83:11:3c:b0:
b2:56:81:28:2c:36:13:11:7f:98:0b:0f:48:fb:1c:
99:62:24:db:bd:9e:ca:a9:86:37:ee:e2:3b:2f:bf:
cb:76:4e:9a:a2:84:4f:7c:8f:ce:99:ed:84:14:00:
ea:40:ed:fe:e0:ca:bb:8a:8d:c7:03:54:c2:9a:d8:
db:9d:6e:ee:37:01:1f:4d:db:8c:43:db:b7:e9:26:
77:92:19:f2:17:17:0e:6c:e9:76:52:7f:a6:c3:29:
f3:c5:10:4b:39:d1:ee:fc:c2:3e:62:08:95:21:9b:
3b:b7:1b:57:09:e8:41:ca:b3:e4:bd:d8:e2:2b:38:
a4:4f:2c:38:d6:a6:51:e4:43:5d:36:73:b5:70:ef:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:8F:69:9B:70:F4:69:EB:1B:56:5E:A5:96:28:1C:9E:0E:60:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf8c2352-31e2-451c-8d45-f20afbc2351c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:f1:d7:12:80:b6:96:d5:38:29:b0:f7:91:fb:c1:48:59:c7:
61:b7:ee:a9:32:4a:2c:4e:b4:e9:bd:20:30:ae:10:20:d7:e1:
23:c0:8d:a0:ac:2b:5b:1c:24:3b:61:72:0e:06:fb:fc:2f:29:
51:9d:99:1c:64:06:5c:bf:ab:46:9b:7d:4e:07:ed:20:df:b9:
71:b5:22:e9:92:95:bd:6d:e0:0a:3d:05:85:e6:3d:97:13:c8:
60:79:0a:06:66:bf:ad:cf:76:28:a1:41:10:2c:51:8c:cf:01:
9c:b6:bb:5f:3f:76:6d:64:03:16:93:9f:0d:21:f8:1f:eb:96:
4f:41:1f:79:fc:48:09:73:fe:80:9b:39:5a:26:b8:ea:5d:5a:
54:fa:5f:bd:c9:b9:01:42:6b:5a:12:8b:f3:e2:50:6c:77:61:
e8:51:84:de:d4:17:e7:fb:22:f1:a3:62:a4:00:f7:2a:f5:30:
97:16:21:15:78:82:06:d7:d5:8e:56:01:f6:cd:b6:5b:01:44:
00:f2:5a:ba:0a:6f:51:76:80:12:6b:7f:58:2b:39:4f:ef:b2:
b7:42:06:27:46:9e:87:14:81:c8:d6:72:2a:52:0b:5d:e2:98:
29:52:54:3e:c7:00:c7:01:dd:76:e4:42:25:b3:8d:e4:d7:1e:
db:64:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:11 2025 by rpki-client