Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e96bbb8e-db86-4398-a60a-ddece0b4a061.roa
File: e96bbb8e-db86-4398-a60a-ddece0b4a061.roa (raw, json)
Hash identifier: 7bajbZwSl8ygO88rU0BGGkvNuzo6FDFW+jJQux5ZR58=
Subject key identifier: 91:15:84:5D:23:C7:DF:DB:6C:E3:EF:4A:0D:D4:A2:25:46:29:6C:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 460A64E136AE871BF69325FA84E2DB38766E8C0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e96bbb8e-db86-4398-a60a-ddece0b4a061.roa
Signing time: Wed 12 Nov 2025 01:21:22 +0000
ROA not before: Wed 12 Nov 2025 01:21:22 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.22.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0a:64:e1:36:ae:87:1b:f6:93:25:fa:84:e2:db:38:76:6e:8c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:21:22 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=4262848c0f3c561f7f2e3f73190064ed5fb59c435f83a298cac10e0cfa4fc6df, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:c4:79:01:eb:c3:2a:54:36:4e:24:e0:27:
9a:5e:2b:dc:76:87:7e:50:4e:28:85:9d:79:94:23:
93:07:8f:0d:76:5f:1c:ce:f8:38:c2:ca:6f:01:f6:
b1:15:9e:a5:da:9b:84:83:0e:e8:82:19:2d:35:42:
78:28:0e:47:ca:6e:0e:dc:27:fb:e8:be:9c:c7:0f:
8f:ea:75:f7:17:d1:b0:13:18:f8:4a:0a:fb:80:a4:
70:3a:bd:ca:31:fb:af:e2:7c:e0:74:29:cd:7a:8c:
bc:ae:e1:08:fa:60:b3:70:fc:42:27:b6:53:b9:f4:
36:02:26:cf:4e:38:1a:92:b0:84:6b:e3:b9:64:07:
30:98:4c:63:a3:75:81:e5:fd:86:63:95:ae:df:88:
d2:b2:40:e7:a5:08:b1:3a:06:73:38:a2:b8:01:d4:
5b:05:f8:b8:26:c0:8c:07:9f:a0:e0:37:f2:7d:fb:
1c:40:e5:b0:3a:7a:ad:1a:23:99:e3:dd:c7:2e:b3:
ec:52:1b:1a:53:be:83:72:39:e0:d4:b3:97:94:51:
36:e2:70:1c:0f:93:c3:1b:4a:32:93:9e:d5:ca:28:
7d:91:b8:bb:24:36:34:d5:e6:27:72:9a:db:45:72:
b5:a1:c7:7a:62:e1:b8:6a:31:0a:be:56:5c:fa:83:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:84:5D:23:C7:DF:DB:6C:E3:EF:4A:0D:D4:A2:25:46:29:6C:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e96bbb8e-db86-4398-a60a-ddece0b4a061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.73.0/24
Signature Algorithm: sha256WithRSAEncryption
91:71:72:b8:d4:c3:be:d4:6d:74:89:2f:a8:0c:a8:f8:9d:d4:
ae:41:27:a0:c2:d9:d4:af:8b:f2:66:21:83:b5:9c:6b:67:7a:
51:02:02:90:7f:2a:d0:9e:5b:6a:0f:62:3d:22:33:66:8d:35:
61:b9:4c:df:fb:c6:fb:d6:09:f0:38:3a:0c:3e:ee:d4:85:0a:
a5:c7:0b:f9:76:b7:b8:42:5f:78:2b:3f:74:0f:77:ce:75:4c:
b5:42:e5:d6:70:c7:ba:32:b8:0b:17:c7:18:54:47:ce:49:44:
8d:e9:5b:ba:03:39:1f:a0:5e:b0:cc:d9:60:c3:07:ce:05:88:
45:3a:c4:08:b3:29:e8:8a:63:42:42:10:74:0f:53:ab:6d:f9:
a4:1b:84:a3:5a:d8:08:38:35:72:37:d1:5c:79:e0:e2:2c:74:
29:a2:88:cd:8b:9c:0d:c4:ed:fe:d2:34:b0:0e:d0:1f:2b:49:
aa:d0:37:af:6b:27:0b:72:b3:5e:16:c5:11:a0:b6:c3:30:6b:
48:f1:52:9e:18:ad:10:3c:bd:ea:57:0c:2d:5e:25:eb:22:8a:
d8:33:ff:6c:03:19:84:f0:7e:76:ab:f9:74:5a:3d:5a:db:c6:
54:d5:8a:9c:20:09:bb:5f:89:34:e2:8f:02:1e:33:5a:1a:a4:
27:3b:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:23 2025 by rpki-client