Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa
File: f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa (raw, json)
Hash identifier: MYlTgG0A3cfPQyyVkUZZ/HvPb0L9vlskZArjmmHygM8=
Subject key identifier: E4:60:7E:09:4F:6E:21:8D:FC:28:B4:8D:1D:05:6A:7F:CD:E4:6D:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CCB2B8B6EE49C80520A3CCB0B43CB9A159CAE9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa
Signing time: Thu 13 Nov 2025 00:10:06 +0000
ROA not before: Thu 13 Nov 2025 00:10:06 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 147.106.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cb:2b:8b:6e:e4:9c:80:52:0a:3c:cb:0b:43:cb:9a:15:9c:ae:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:10:06 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=00cb6fbe7279b0bcb26347f7936d0a1d34fc73ce1cfe2fc8ad7a28c09ec735d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:18:9c:5c:15:e4:1e:6a:34:ce:d9:b3:eb:c4:
e3:d0:41:9c:f3:83:81:0c:33:d8:41:37:f5:05:1b:
6a:fe:c7:8e:fa:ac:db:94:b5:ea:bc:8e:67:14:a8:
6e:d2:61:c6:61:ce:24:ba:64:2d:31:fc:dc:71:83:
89:f3:a8:fc:e2:4b:dd:70:b0:52:73:df:c1:aa:e5:
85:2a:c2:ac:7a:df:18:74:32:53:3e:27:94:69:99:
28:2a:dc:6e:c9:ba:3a:69:ca:df:80:e6:b7:9b:10:
df:b6:f9:18:9a:b6:b5:35:5f:99:86:7d:ff:43:a6:
61:76:5e:9c:ff:27:16:cb:ca:24:2d:9a:96:f9:de:
ae:fa:67:46:75:39:d4:e4:a6:27:9a:fa:62:58:c7:
e1:ed:33:b3:d2:ad:b7:e8:38:ce:1e:c0:7f:b7:7f:
a2:ca:50:5b:d4:3e:88:9a:2b:50:59:f4:97:d7:d2:
66:27:bd:11:fd:4f:f9:66:44:68:51:2d:dc:42:02:
ae:92:37:0c:45:40:71:d3:e1:df:33:22:24:d6:40:
25:73:f6:32:06:a6:72:87:5f:f2:fa:db:66:ed:4f:
3a:48:d1:0d:1b:e9:c0:3a:22:b5:8e:52:6f:7b:c4:
f8:d1:9e:ed:0b:34:19:2c:d5:60:1d:9a:e6:c9:41:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:7E:09:4F:6E:21:8D:FC:28:B4:8D:1D:05:6A:7F:CD:E4:6D:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.106.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:b3:12:e5:31:8c:01:2c:f0:7e:aa:25:ab:c9:5c:98:72:73:
7f:e9:78:0b:1c:5a:f7:d7:31:4a:7c:fa:2a:df:cb:eb:85:e4:
c8:c2:5e:ce:80:73:b3:e3:d5:b8:89:b2:96:a9:3e:aa:4d:ff:
4c:5a:3f:66:63:17:31:40:c2:31:46:d6:7d:bf:65:84:e1:d3:
a5:f9:d0:3b:cf:26:11:f7:0c:31:78:3f:a9:6d:21:81:ad:30:
66:fa:be:10:5e:19:9c:31:dd:0a:47:65:18:9b:72:c9:d5:ba:
42:65:10:c8:75:c3:68:bd:96:f5:4f:bf:d6:cd:78:53:4f:e2:
65:8f:7d:ba:96:ee:ef:32:93:ce:27:53:02:5b:c5:86:ef:d3:
5c:97:76:af:3d:1d:1e:50:35:3f:5c:79:2b:30:09:47:fa:9b:
24:a7:0b:83:54:5e:5b:79:a1:9a:43:be:f4:58:19:a1:d5:b7:
fb:42:7c:4c:61:2b:3d:d5:ba:42:e5:df:59:f7:fb:c7:5d:fa:
72:78:85:f5:35:2e:12:eb:fc:5a:c3:73:93:10:c3:9a:ff:08:
74:31:e9:76:ab:69:e9:07:7e:b7:bd:21:80:00:65:d7:11:e5:
48:d6:a9:40:9c:74:c6:0f:30:3d:67:31:f0:38:a9:01:a8:8f:
d9:ba:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:55 2025 by rpki-client