Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa
File: dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa (raw, json)
Hash identifier: 48/ZXneobV6rZWZYgosyXy6OD1++B2261WEiSo4XM80=
Subject key identifier: 85:A9:8C:A5:33:D8:65:9C:C7:29:A7:19:53:C7:E8:FA:62:87:18:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 728F2D38C27F01A5D0F7F5A34B4CE97EC0D05390
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa
Signing time: Sat 04 Oct 2025 00:37:37 +0000
ROA not before: Sat 04 Oct 2025 00:37:37 +0000
ROA not after: Sat 08 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8f:2d:38:c2:7f:01:a5:d0:f7:f5:a3:4b:4c:e9:7e:c0:d0:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:37:37 2025 GMT
Not After : Nov 8 23:59:59 2025 GMT
Subject: serialNumber=ab1b9ad273f937aa11ccbcb679f8a14a8ca9cb5eb8bf0d089e951a922193bff0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e3:5c:75:01:bc:91:72:42:11:3b:2f:33:c0:
a9:02:e4:4b:a2:b8:19:ee:63:7f:25:0f:ce:14:00:
6f:d6:49:db:16:a6:3e:4b:87:be:b9:f8:91:29:22:
6f:3a:12:2d:0a:d6:6b:c6:db:f3:0d:59:e4:be:6c:
b6:94:59:27:fb:f5:6e:9e:b2:38:36:af:63:9f:0d:
36:49:12:e1:58:de:da:ad:b2:5a:30:13:03:4f:51:
b0:2c:2c:3d:de:d1:7d:37:d3:b3:42:d4:9d:ba:7a:
d7:40:d5:c6:93:c4:47:c8:16:22:94:36:c7:b0:1d:
50:3f:c2:b4:8c:f6:0a:42:21:4f:99:4d:e6:3c:9c:
af:52:0f:d6:80:41:ea:39:2d:bd:e0:8f:83:a9:56:
84:ee:39:0c:3f:e0:a5:8a:8d:0b:98:26:93:51:a1:
55:d7:25:d9:44:2b:58:02:2c:2d:6c:8f:5f:55:a4:
1e:e5:47:b5:89:f0:90:5d:d6:2f:57:01:5e:9d:3a:
62:05:a0:64:73:2f:55:e9:8c:aa:21:27:d9:fd:87:
ba:de:b9:d5:e3:6e:fc:18:32:62:1a:39:5f:75:2f:
58:e3:43:06:75:12:64:77:26:d7:36:be:69:e8:d5:
cf:b9:aa:f8:b4:ec:a2:c4:15:21:05:bc:69:2e:a2:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:8C:A5:33:D8:65:9C:C7:29:A7:19:53:C7:E8:FA:62:87:18:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.141.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:57:fe:34:22:f4:4b:82:79:41:42:f9:ec:67:36:2f:b1:7d:
33:f6:b8:14:7c:7a:90:44:d8:92:05:22:15:aa:63:a1:b6:81:
3d:3c:0f:b7:c0:01:53:73:80:d9:2f:b0:d5:45:00:0f:88:98:
a5:2f:75:be:37:58:89:24:13:cb:4f:ad:78:c9:e6:f9:31:93:
19:57:c3:b5:af:5a:63:ef:ba:01:16:25:f3:1a:6a:a2:f3:47:
cd:ed:3c:4e:c4:5d:20:37:08:8d:ba:f0:a6:53:6e:ca:20:24:
24:99:86:be:10:24:fd:60:41:ef:12:3d:bf:38:a5:fb:bb:83:
07:96:de:94:21:30:05:ee:5c:2b:ea:c3:43:5b:2f:2c:1c:d0:
b5:43:7c:b7:4f:ff:6d:db:53:37:c1:61:f0:2b:dd:f7:25:4f:
80:45:d6:9f:0e:d4:15:a6:08:8d:cd:c6:64:ac:d1:fb:14:50:
dd:f8:56:19:96:55:12:54:09:fb:19:6f:83:3d:36:f7:08:64:
50:6d:c9:93:fc:fa:96:e4:94:65:c2:82:73:7c:cc:d4:d4:09:
98:9f:36:50:10:ca:64:94:7c:b3:84:d3:4b:4b:75:e6:b1:75:
be:f4:1b:03:67:17:59:ed:23:14:e7:0a:15:55:c4:64:ff:42:
11:67:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:14:58 2025 by rpki-client