Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca8d020-6b05-4657-b554-a1e2c094a6db.roa
File: eca8d020-6b05-4657-b554-a1e2c094a6db.roa (raw, json)
Hash identifier: k/fJs7JAlG/BJX0JXz3UMJ2xsz4uYpVjtQYvS7dmHVU=
Subject key identifier: 75:6D:13:63:65:DC:83:D0:28:89:36:AF:B8:4E:31:41:0D:6C:5C:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A9747A0B1E3FF3D766A053CA2502D41BD66F30B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca8d020-6b05-4657-b554-a1e2c094a6db.roa
Signing time: Thu 13 Nov 2025 00:51:54 +0000
ROA not before: Thu 13 Nov 2025 00:51:54 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:97:47:a0:b1:e3:ff:3d:76:6a:05:3c:a2:50:2d:41:bd:66:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:51:54 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=5b618d8c031048c373186a5540fa93fb0dfb33c77ed6be579ab32d19fdc11cbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:32:65:1f:0c:32:b4:23:ab:98:8e:69:4c:
43:9d:ff:04:b8:9a:36:33:6a:21:26:20:cc:1a:b1:
cb:fa:b7:59:4a:98:13:dc:52:dd:0b:d6:0c:f8:a0:
33:52:fb:8c:d9:d5:d3:a7:cc:1e:63:88:57:55:d9:
1c:d4:24:ce:1c:a5:09:1a:63:d8:96:e9:4c:84:8b:
60:62:b9:32:c8:32:59:42:e3:e1:e5:9a:66:b5:5d:
25:2f:08:e7:59:23:c3:f9:25:a9:d2:40:a1:62:1d:
54:0b:f3:d1:6d:01:e4:f6:05:f5:b6:d6:38:3a:ca:
71:af:31:98:50:85:f7:44:f1:9b:5d:f1:8a:91:60:
43:55:4c:50:57:8e:85:33:8f:7c:b4:a4:e4:75:ea:
77:d1:e7:9d:49:4c:a0:71:a3:ae:99:6f:34:fd:85:
24:46:cb:7f:54:e6:97:83:28:1e:1c:f7:ee:3e:4d:
9c:55:7a:af:3d:6e:70:d2:3c:3d:b7:65:7a:7e:d0:
ba:3f:2b:95:d9:82:58:37:c3:b8:41:d5:2f:b3:49:
9b:23:45:9a:29:74:0f:7e:86:b1:24:be:5e:4b:c0:
b0:91:cf:35:27:b0:ab:2a:45:90:2d:48:9f:14:0c:
a9:8f:71:2b:92:0d:dd:77:21:26:6d:d0:ea:21:18:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:13:63:65:DC:83:D0:28:89:36:AF:B8:4E:31:41:0D:6C:5C:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca8d020-6b05-4657-b554-a1e2c094a6db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.218.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:87:6f:16:8d:f9:a8:94:a5:54:ba:61:6b:0a:6b:e0:2e:48:
cd:19:77:d0:fc:77:58:fe:f8:ef:41:ef:79:d7:b9:91:ad:df:
bb:bd:d6:e2:a4:61:ce:6f:a7:58:d3:33:88:7d:cf:a2:3f:d1:
de:61:e9:17:7e:a8:06:2f:b1:5a:bd:1f:b9:39:c1:19:3d:45:
05:c6:75:ac:3c:d8:bf:06:5c:ed:57:b7:c0:8f:86:31:29:17:
45:4c:41:43:7f:93:ce:4b:c3:5f:54:5b:5c:ab:08:5d:b6:ea:
9b:ca:3c:10:b0:06:a0:61:90:50:44:98:12:ba:df:cd:f6:73:
92:18:9f:dc:31:80:92:d6:d2:ff:84:dd:0b:e8:67:29:00:aa:
3f:62:8f:2d:3b:81:ac:80:d8:88:10:0f:c0:2f:a5:55:45:f9:
da:eb:6a:73:1c:54:55:bb:6c:21:78:d5:4a:b5:34:ce:e8:9c:
dd:74:90:d1:06:2f:63:1a:58:2d:a3:7f:49:b6:70:c0:c2:0a:
a7:5d:0e:65:55:84:75:57:7c:16:7a:b7:7f:19:91:a5:cf:5a:
89:82:10:f8:62:ea:fb:a4:96:79:ca:99:ae:ea:2d:9f:79:bf:
11:96:14:71:ad:59:94:d1:cd:9d:96:92:b9:ef:ea:a4:04:42:
73:c3:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:23:53 2025 by rpki-client