Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f0b6a5-a24c-4b09-92af-278cafb2ee0b.roa
File: d1f0b6a5-a24c-4b09-92af-278cafb2ee0b.roa (raw, json)
Hash identifier: xYUGkauUOZh6H3eJwsQTdzAo/j6FAKiJjTM6cFQTNVg=
Subject key identifier: B7:B7:25:59:32:A9:41:BB:E0:BA:50:00:8B:48:F9:D3:3B:E9:5B:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14C50B0B5BC55768EB3E208405C8F0EDD4F4602B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f0b6a5-a24c-4b09-92af-278cafb2ee0b.roa
Signing time: Thu 13 Nov 2025 01:00:09 +0000
ROA not before: Thu 13 Nov 2025 01:00:09 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c5:0b:0b:5b:c5:57:68:eb:3e:20:84:05:c8:f0:ed:d4:f4:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 01:00:09 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=dd740ed76f611f4889d54d0ad85ff42c8e460aff96074d9a044990e1984c76c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:76:6c:ff:e3:44:60:c8:04:89:99:ce:e8:
de:6d:77:16:71:f6:dd:bf:c1:8c:50:67:ca:e9:cf:
f0:ac:de:65:aa:88:6d:de:e6:5a:80:8b:df:04:2e:
6f:43:87:6a:d4:5e:c4:3c:72:0d:4b:0a:7a:2e:d9:
9f:2f:d2:a4:fc:51:39:2e:fa:cd:32:ed:eb:e8:e4:
5a:8d:31:d7:e5:0c:56:a8:9b:02:5e:e6:96:f0:27:
cb:a9:22:17:e8:bf:53:6a:66:1c:15:1f:25:56:94:
18:1a:f9:fd:dc:8c:82:c4:00:7e:79:f7:03:2c:cc:
72:47:65:8e:d6:a9:c4:a1:aa:00:fa:a8:90:08:71:
49:6a:88:3c:5d:52:72:c6:25:7f:4b:b1:0c:13:3f:
86:b0:ca:ec:95:a3:c0:cf:99:45:5d:0c:83:c5:e6:
7a:f5:e7:c5:49:f9:82:7f:20:6a:c2:e1:57:2c:c4:
92:25:8f:fa:86:09:33:f8:30:4c:12:3f:fb:2e:e3:
e6:90:cf:bd:fe:40:37:68:c4:f2:8c:45:e8:f7:bb:
75:97:aa:61:b7:0f:b4:08:08:2a:fc:94:09:73:87:
ca:18:83:a4:3b:b4:83:01:f4:39:e2:3f:29:10:aa:
4d:bf:00:37:fe:a0:57:e6:a8:53:7a:0e:7e:29:f8:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:25:59:32:A9:41:BB:E0:BA:50:00:8B:48:F9:D3:3B:E9:5B:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f0b6a5-a24c-4b09-92af-278cafb2ee0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:1b:14:51:e8:9c:28:98:1c:7c:71:7a:27:bf:85:fd:fb:80:
61:0f:a6:45:9c:35:37:4c:42:0d:a0:9b:bc:7f:fc:47:36:b2:
c6:16:70:46:b0:74:6b:4d:ae:c4:dc:2b:9c:cf:97:c3:17:3e:
be:0b:99:b8:d7:93:b5:4b:08:65:0b:98:e5:16:2f:ea:ff:d7:
98:ab:8a:07:66:15:62:76:5b:07:fa:be:b5:61:15:24:0e:4c:
a4:34:7e:8b:85:17:f4:9b:7a:9c:56:d5:90:ad:2f:81:f3:de:
95:03:f0:c7:e8:77:fd:da:d8:07:9e:07:5d:7d:a1:c0:da:ee:
01:e7:0e:78:d5:9c:02:e9:76:21:0e:6d:c4:d3:d0:86:17:4f:
84:88:c1:76:73:01:40:1e:4c:67:2d:81:9f:9f:8c:7f:64:dc:
ef:45:73:ef:42:02:f5:c0:52:d9:24:b7:2d:34:d3:71:cf:88:
e4:90:1c:72:ad:51:b2:8c:23:5c:90:ab:58:84:4e:86:ea:de:
82:23:06:5f:ef:75:57:fe:37:23:33:f9:ee:58:9b:59:f2:a8:
52:97:82:d9:1b:6e:7e:f8:9e:81:df:01:5f:d8:fd:56:8b:eb:
40:c1:a8:ae:50:07:15:8d:7a:a2:6b:8a:4c:72:d8:5e:a1:aa:
2b:cd:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:58 2025 by rpki-client