Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e61277-ee30-4eef-8695-67e46f76e753.roa
File: d5e61277-ee30-4eef-8695-67e46f76e753.roa (raw, json)
Hash identifier: JJwXz8h7ourYXfx5P8kYvPDfMKzGoECK/CloKONGvJ4=
Subject key identifier: 29:1B:2A:18:C5:4F:0D:95:C6:5B:C1:4F:18:FC:E6:10:1F:14:D6:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 498961DDD98498DCCF6DC9A83A7727B9E96B417E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e61277-ee30-4eef-8695-67e46f76e753.roa
Signing time: Mon 29 Sep 2025 15:13:31 +0000
ROA not before: Mon 29 Sep 2025 15:13:31 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 142.4.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:89:61:dd:d9:84:98:dc:cf:6d:c9:a8:3a:77:27:b9:e9:6b:41:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 29 15:13:31 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=29d1c4ab80278e14f4be75c411aa24cc50de4452e0104d69aa15b70118c4d6fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:aa:4f:ba:cf:20:9c:0a:a6:be:56:fc:28:
4d:97:0f:60:fe:f7:c5:19:14:59:8d:2e:60:fb:86:
21:c3:11:5b:b9:07:58:38:e6:ca:5b:3d:1f:94:f0:
17:40:66:d5:47:c1:08:1b:db:41:62:ad:6e:d6:77:
b8:e1:d5:5f:b4:87:dc:24:52:ea:f4:47:f1:a3:da:
52:58:8c:37:04:9c:7e:20:ca:2e:e4:ad:72:f6:f7:
80:73:c7:4b:37:15:20:ab:0b:76:3d:c7:f9:56:9d:
5d:d0:5a:e8:89:ea:57:79:ae:3b:c3:f8:99:68:de:
f6:e3:c7:7e:b3:8f:d9:52:bc:44:5b:ee:40:97:d8:
0d:ad:2a:b7:9e:65:96:65:2c:2b:40:b7:82:ae:d3:
61:8d:d0:41:84:09:98:20:38:17:59:75:fe:74:78:
0b:40:b4:ab:de:c9:c9:62:4f:91:d0:41:4c:c2:76:
21:a8:09:7c:4f:9a:bf:9a:0c:d2:32:71:3c:e4:f8:
77:e9:ef:7e:33:a3:c2:03:9b:f0:e1:82:dd:fe:94:
92:0f:3d:af:4c:7d:ce:c9:8d:73:e0:7d:0f:94:2a:
ce:e6:71:c8:0c:dd:45:32:3c:ef:67:9a:b6:25:c3:
c7:5a:93:7d:36:5d:42:15:23:d5:56:ed:a3:37:41:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:2A:18:C5:4F:0D:95:C6:5B:C1:4F:18:FC:E6:10:1F:14:D6:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e61277-ee30-4eef-8695-67e46f76e753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.4.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:12:b1:8d:c9:84:db:6a:ce:11:2d:9d:58:66:c9:5c:ab:1a:
75:85:85:ef:30:08:53:2b:9e:62:1d:f0:dc:e9:fb:b3:a2:78:
1c:f8:25:c6:41:fa:55:5a:0b:7b:52:75:e5:52:83:9f:c6:5e:
e1:43:84:c4:96:5a:59:c0:ac:9f:19:54:b5:32:29:96:e5:0a:
8e:1f:59:1b:30:69:85:02:af:04:a6:ca:73:18:7c:8c:d1:04:
55:52:fb:da:c6:23:de:e7:cb:50:09:bf:0c:e9:b8:8f:ca:bd:
6f:27:2e:f2:6f:92:df:3a:ef:b5:14:32:00:d6:7a:19:b0:f1:
73:c9:49:fa:69:71:95:af:4c:64:1d:12:5f:f8:5d:43:5b:43:
9a:c5:3a:cc:6a:ce:8a:18:f5:fc:c9:13:b4:61:69:2d:65:43:
a8:c1:c0:b9:f1:e7:47:dd:b2:50:16:33:b1:cb:b3:c0:5d:24:
fa:f6:68:75:6d:b7:58:8f:ff:48:71:6b:fe:80:0c:09:59:3f:
78:b0:77:05:06:96:53:5f:f6:94:8e:7d:8c:d8:8e:50:c5:0b:
3c:2a:58:e3:31:3e:45:aa:2b:49:b2:29:07:9d:17:9b:0f:ae:
24:1e:c0:a9:53:c2:cf:66:7b:49:c3:87:0a:49:36:47:03:71:
59:80:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:57 2025 by rpki-client