Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa
File: e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa (raw, json)
Hash identifier: hKLRPOD1h7g5ZyiJ2HCuBw2zMOmIGuj1LgQjb1iVN7U=
Subject key identifier: 70:0D:69:9D:38:64:56:16:28:D0:71:96:18:80:8C:01:59:2B:7B:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0DAA9DDE2F274859549E72A5B91058949AC27F0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa
Signing time: Thu 13 Nov 2025 00:31:24 +0000
ROA not before: Thu 13 Nov 2025 00:31:24 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.196.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:aa:9d:de:2f:27:48:59:54:9e:72:a5:b9:10:58:94:9a:c2:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:31:24 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=264b60a4495778d9b1f2814838f7fe0fe722d5e681fa586ecfa4616b9de0d3ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:3e:74:cb:a0:09:5b:6d:22:24:97:ea:c8:
41:e6:84:fc:90:5a:39:42:03:c8:59:5c:8c:17:db:
83:6d:5b:54:48:2f:f9:01:f4:e9:47:c7:03:cc:6d:
e2:31:02:44:60:8d:9a:70:dc:1c:e4:9e:cd:61:52:
01:3a:17:df:35:90:bf:16:a0:b6:b5:6f:94:b2:6f:
ec:8f:d1:f1:39:21:d6:53:c3:c8:96:28:d8:f0:6d:
51:2b:b5:8f:ec:c4:75:e9:40:9c:dd:5c:90:64:ea:
40:39:21:44:ef:f2:73:87:cd:d0:5e:bf:bd:d6:18:
6a:ab:0e:3a:6a:ad:b7:c4:c4:01:db:8e:8f:96:40:
2e:88:ba:76:62:1c:07:32:c1:da:5e:15:46:0d:0a:
c9:01:5a:6c:19:8c:e7:4a:14:73:e0:18:48:a9:a7:
c7:80:7c:8c:76:5d:77:50:88:d8:f5:14:a2:af:a9:
c5:e3:0e:a0:77:07:36:b3:35:1e:d6:b6:7d:46:b2:
3f:6e:a6:60:44:48:31:ca:4b:db:7a:e4:d0:e4:fb:
93:a2:b3:6d:dd:3a:c9:aa:0a:15:4a:93:19:d0:eb:
77:6f:36:95:51:6d:e8:92:58:5f:22:9a:00:9b:21:
72:a7:1e:db:d9:b0:d5:1b:31:8d:ac:be:94:90:8e:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:69:9D:38:64:56:16:28:D0:71:96:18:80:8C:01:59:2B:7B:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:ba:a0:20:55:d7:b3:cd:8c:c2:be:04:67:db:c2:0b:c5:c4:
79:66:94:03:d8:3b:cb:4c:21:7c:e7:2a:1b:58:b0:d0:2c:7d:
b0:6a:c2:a9:ef:25:cb:c8:4f:3a:00:21:38:ee:b4:a3:f4:48:
b5:59:34:bd:34:02:b3:16:db:4e:d2:70:d2:2e:4d:21:95:41:
25:bd:09:96:94:55:22:87:d7:78:75:e8:e2:7c:87:d0:b6:70:
10:92:c4:05:94:5b:94:43:e1:4d:64:38:fb:8d:7d:c5:06:ea:
58:5c:a4:df:0d:fd:99:fd:5e:10:ab:53:49:1d:4f:93:73:0a:
71:d2:05:d6:12:8d:c1:c6:ab:23:4f:24:71:9c:ca:2b:47:89:
14:91:0c:9a:f4:19:e2:f3:a4:30:b9:75:d3:16:88:a0:b6:8a:
96:4f:5d:83:11:ab:91:15:f6:c6:17:da:3f:b9:c8:22:fe:75:
d4:24:58:38:f9:16:96:0d:80:10:4d:d7:7a:d9:f9:12:bc:6b:
fc:e8:36:bd:05:1e:68:07:f3:e1:50:df:b3:52:ee:4f:06:0a:
c7:52:d1:72:5e:24:80:7e:34:2b:bb:81:c4:d3:0a:b9:14:7c:
4a:4f:75:d9:59:70:f0:d5:92:43:66:50:b6:d5:c8:56:3e:5d:
7d:40:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:25 2025 by rpki-client