Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ba2a87-d329-47eb-8f9e-502f1328b33e.roa
File: d9ba2a87-d329-47eb-8f9e-502f1328b33e.roa (raw, json)
Hash identifier: mxzG8ZMLIAHD3y+Rb848BvECloSkQrA6hG5/dMLEGC8=
Subject key identifier: 14:E7:7D:FD:92:C1:97:03:39:51:9D:81:D9:90:F1:EE:EF:2B:46:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7689B918DF6B61D26BA186845BDBF0BB3EC334EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ba2a87-d329-47eb-8f9e-502f1328b33e.roa
Signing time: Tue 11 Nov 2025 02:31:41 +0000
ROA not before: Tue 11 Nov 2025 02:31:41 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.156.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:89:b9:18:df:6b:61:d2:6b:a1:86:84:5b:db:f0:bb:3e:c3:34:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 02:31:41 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=b2bd9c5f75861070c77652bfd482338228283e71f70c7b9e0b5c884059cf3808, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:ff:51:b7:2f:78:cc:17:59:5d:33:64:1e:
32:c4:63:f9:c8:df:2c:c8:dd:77:e6:f1:25:8c:a3:
a2:38:88:ef:b1:7f:56:5b:d3:5f:2a:d9:2f:c8:72:
41:eb:c0:41:0f:a5:7e:e7:c0:fe:c0:b2:06:af:d7:
a2:3f:8b:4a:84:06:72:1b:5d:b7:53:67:95:68:89:
e0:fa:47:a7:07:b1:4f:71:19:63:b5:70:a0:cc:9d:
0a:91:30:e8:7d:aa:3f:5c:26:ca:7d:c9:e1:4a:73:
28:54:2f:ee:22:a2:b8:36:3c:23:07:18:6f:45:dc:
8a:d6:18:d6:d6:75:13:04:04:0a:48:16:15:21:13:
ca:a7:d9:ce:38:f7:70:97:58:12:d3:ea:dd:86:69:
44:6d:3b:06:fc:74:2b:fe:c2:7f:26:b7:97:94:d2:
f3:dc:9d:5e:31:e9:d6:1e:b0:a8:3c:7f:29:83:a2:
76:47:2f:ac:91:c4:23:32:54:51:0f:36:50:4e:22:
28:ef:3e:76:9f:83:5b:8f:8a:89:6c:a8:40:33:4c:
4e:c5:42:0f:55:ee:80:65:f2:25:03:35:e7:63:43:
09:51:6d:5e:ee:30:c3:9d:bd:6f:e2:62:ce:ec:a6:
67:c7:f6:7e:05:0b:b7:cd:86:47:ff:b4:d7:98:40:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:7D:FD:92:C1:97:03:39:51:9D:81:D9:90:F1:EE:EF:2B:46:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ba2a87-d329-47eb-8f9e-502f1328b33e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/14
Signature Algorithm: sha256WithRSAEncryption
91:52:c5:e2:57:df:b1:8e:3b:e8:9c:f4:ae:20:0b:ca:6f:0a:
f8:0a:15:cb:96:e6:de:0c:f0:3d:c0:c0:ac:53:06:a3:a3:9f:
21:cb:44:2d:36:25:86:3f:af:90:d4:5d:0f:ee:13:cc:ea:3a:
bf:98:3f:22:f7:52:38:25:68:be:fa:ea:c5:40:fc:a9:0a:71:
5d:97:ca:df:6e:49:4a:09:0d:a8:93:2d:61:86:0a:e2:60:07:
c0:45:55:a8:d6:f7:ac:c1:d1:54:34:9d:0b:8c:f5:00:0c:d6:
1d:3d:7c:f4:6b:bb:ed:d9:e0:1c:f5:99:b6:3a:0d:6a:73:e9:
3f:fd:7c:e6:9b:96:d2:02:a0:85:be:77:9e:89:27:79:7f:52:
86:65:74:50:0f:45:e5:8c:62:47:9c:81:cd:0f:7d:49:b2:02:
bf:4b:8d:1c:50:08:c9:e9:0f:d6:45:b3:b9:f6:1b:27:4a:90:
3e:f3:43:47:38:11:f3:d8:7c:de:79:83:f7:b1:15:92:eb:2e:
2e:3e:2e:b2:84:06:a3:94:59:77:8a:25:ed:54:b7:7a:eb:1a:
8a:ff:cc:04:25:ad:89:7a:3b:d6:76:73:f0:d3:b8:29:77:f6:
2a:03:f0:ad:23:7e:9a:b6:da:85:72:43:be:72:43:2a:08:2b:
5a:ec:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:28 2025 by rpki-client