Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa
File: f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa (raw, json)
Hash identifier: QFvt4BKBpJzD2ueJ2lucHegXkLQdWFrXQKRg+jF8mYI=
Subject key identifier: AA:38:6D:24:17:4E:32:75:9B:6B:6D:6B:28:1D:58:D3:FC:85:8E:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F4DBFDFD1F9FE744940F10624B7EA6C369075D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa
Signing time: Fri 07 Nov 2025 00:50:43 +0000
ROA not before: Fri 07 Nov 2025 00:50:43 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4d:bf:df:d1:f9:fe:74:49:40:f1:06:24:b7:ea:6c:36:90:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:43 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=c85ddf27e3756455cb5d776e40a5113c4c21c485510337a705892a5d43369c2b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:a1:4b:0b:f5:dc:a4:a4:a7:53:c9:19:c2:
a6:27:e8:00:e0:49:d5:97:f8:ab:ea:fe:a2:37:39:
57:62:29:1d:3c:9e:32:c3:d4:25:9d:48:28:6b:15:
1b:8a:86:cb:7c:97:44:4f:da:41:01:66:de:32:16:
92:13:ea:cd:52:60:a3:f3:94:38:0f:8a:da:ff:95:
90:98:85:27:78:16:78:7a:c7:1c:2c:e4:a2:d5:16:
d4:e8:91:31:25:11:85:c5:d9:aa:31:d9:84:4f:42:
ef:47:d0:ce:e2:9b:75:f2:17:f1:7e:25:5c:34:9b:
d3:0c:6f:e9:c2:e6:79:4e:84:2c:85:d1:63:a7:02:
5e:9a:41:0c:0e:fc:25:45:98:b2:6a:5f:6b:77:51:
0a:fe:e2:a4:21:69:c5:df:93:58:c6:d4:c9:e6:53:
2f:67:22:36:b5:15:ac:e4:5a:9f:f5:86:be:ae:88:
bd:b9:64:72:9c:ef:96:ca:9c:63:69:63:b4:7d:a7:
73:a5:e1:31:46:78:70:32:c0:e7:3d:05:97:be:e0:
e1:4d:61:69:32:16:cb:b5:d8:ff:e0:f1:81:3d:c8:
93:81:a4:31:11:57:96:42:d9:ed:7e:30:f4:d9:db:
ab:49:f5:c7:a2:67:f7:2f:e4:cb:ea:99:c9:44:8e:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:6D:24:17:4E:32:75:9B:6B:6D:6B:28:1D:58:D3:FC:85:8E:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.24.0/24
Signature Algorithm: sha256WithRSAEncryption
95:19:19:11:74:fc:cf:65:4f:d0:31:fb:b9:76:bc:8c:3b:15:
79:26:0c:ad:7d:52:ac:cd:12:2d:b8:67:de:f3:c1:48:f2:1e:
49:2a:4d:5a:7c:f1:f7:e8:59:af:29:f8:fe:12:ca:87:c8:86:
dc:f8:15:f9:2b:f2:41:b1:02:94:ba:2b:f8:88:55:c4:78:74:
06:a9:3a:99:e0:33:65:42:96:0f:79:50:7e:56:51:55:3f:f1:
07:e6:58:e8:dc:32:15:c5:b4:b4:e5:2c:55:34:73:ad:03:8e:
6c:35:c3:6c:62:13:b3:7f:a6:98:61:63:0d:12:42:40:99:ac:
18:76:e0:83:7f:4e:23:b4:6d:36:63:f2:f5:bc:69:f8:65:89:
8f:87:48:49:27:fb:67:8c:e9:09:b1:87:5f:3f:0a:8f:19:6b:
31:61:8e:26:22:71:79:24:20:01:74:fb:a6:21:c5:b9:6f:22:
73:c5:b1:8a:e8:e2:f3:da:37:ba:5b:c9:a7:28:ea:7d:82:c3:
ea:7a:f8:5a:33:c9:b8:13:99:25:a2:7c:42:29:25:09:e2:e1:
f1:68:43:49:7d:e7:63:82:11:36:95:15:15:60:7d:f8:4a:2d:
fe:a4:72:21:41:e1:85:b7:29:78:c4:d9:ef:62:59:8b:04:ad:
a9:ae:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:49 2025 by rpki-client