Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
File: d2526c3a-77ad-4669-af27-f2171d468d2d.roa (raw, json)
Hash identifier: 5swYf3lv3aus6HINI6/X2NxljGdqxFRQylSlB4/PsW0=
Subject key identifier: 05:05:A6:1D:3D:F6:2F:41:71:36:2F:E2:56:C3:86:88:D1:02:08:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B6EB5284534DC07F829563BABA80E40ACDA9C21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
Signing time: Sun 16 Nov 2025 00:10:40 +0000
ROA not before: Sun 16 Nov 2025 00:10:40 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6e:b5:28:45:34:dc:07:f8:29:56:3b:ab:a8:0e:40:ac:da:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:10:40 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=e5c5843c1d748e45a71a6d9c5c2de0521ab4e5797e9c22faf9653f1f7d3a9ea8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:a2:23:06:b1:51:68:f5:31:83:25:4c:8e:
33:21:c9:a4:57:72:7b:b1:d6:95:2a:0c:56:63:11:
68:b7:69:8b:af:b5:dc:a3:04:e1:9d:07:d6:5c:41:
9c:62:fd:df:c3:07:a6:49:aa:85:5b:be:a8:09:67:
a5:66:b9:b3:84:01:d2:01:2a:88:84:be:8c:eb:7f:
4a:09:15:3a:f9:bb:b0:44:04:1f:a5:1a:37:41:cf:
41:67:90:20:b7:43:06:0e:68:11:e2:55:8f:12:5c:
61:1d:21:1d:e7:70:bd:3c:18:75:e1:f9:7a:6c:dc:
da:16:00:b8:89:33:b2:66:f5:21:29:9f:ff:94:bd:
50:3e:cd:6d:64:29:fc:c9:89:4c:48:60:0e:fb:43:
00:59:5a:5a:18:2e:9e:5f:2a:6a:89:56:86:2e:80:
ac:fe:d8:25:51:66:ec:4e:91:70:7a:37:ff:64:50:
47:24:e9:dc:aa:fe:92:31:4d:bd:d4:86:de:75:a1:
68:ef:c4:08:73:4f:79:b8:42:20:98:96:a8:5a:39:
4f:93:20:94:cc:5f:8a:0f:25:2f:bd:ee:f1:a9:d8:
9f:c5:c1:8d:ec:d2:89:2b:84:94:66:4b:83:98:47:
ff:e2:5b:20:cb:6b:31:6a:89:3a:b0:11:b8:b7:d7:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:05:A6:1D:3D:F6:2F:41:71:36:2F:E2:56:C3:86:88:D1:02:08:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.116.0/24
Signature Algorithm: sha256WithRSAEncryption
60:84:05:6a:39:df:ff:31:f7:cb:41:92:16:7f:fc:f4:32:69:
40:10:f7:62:35:87:3d:bd:99:27:9b:bd:5b:dd:8c:e5:8a:71:
96:6b:3f:40:8b:24:2c:c9:b9:1d:0f:6f:e3:58:76:cc:39:7f:
61:65:f8:78:62:ea:a7:47:96:2c:7b:b8:92:88:53:c8:16:e3:
75:06:e9:5f:ce:88:fc:06:e6:65:57:d3:d2:54:67:90:33:1c:
e0:d3:1d:0b:ca:d2:b5:72:32:11:bb:db:6e:85:dc:8e:99:0f:
e6:8a:ef:e7:a6:45:8e:21:f1:38:0b:61:ea:3d:41:a2:38:c0:
5e:53:3f:ef:88:fe:f8:1c:33:48:22:09:68:8e:c2:18:28:74:
fb:d4:6b:4a:e0:12:a8:8a:35:e1:5e:f5:61:9d:0b:5c:5c:2e:
53:2a:19:4d:95:84:fc:62:62:82:3c:a6:b7:c8:fd:a4:c6:85:
3d:16:ac:bb:c1:ca:0e:14:20:b0:99:6a:30:17:78:15:41:b4:
89:5b:97:48:5a:2f:bb:3d:98:bf:a4:a2:eb:a5:e3:6e:30:38:
ee:c0:fd:44:19:04:57:8a:a0:60:e5:00:59:84:85:34:0f:41:
99:af:8f:56:d4:c3:9a:92:31:37:1a:6e:5b:7d:6c:3d:67:ef:
15:d4:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:41:08 2025 by rpki-client