Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f83beaf6-ae8e-43d8-969a-76724e17dca0.roa
File: f83beaf6-ae8e-43d8-969a-76724e17dca0.roa (raw, json)
Hash identifier: Iq4HNoGp8cJJ92TnmPz6YvzzVUI86kGYlN0xtSiZKCI=
Subject key identifier: 5D:F3:67:BF:77:8A:B9:D1:38:01:76:52:A5:59:A0:2B:7C:EF:21:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 333E00740659E565438A6F3735CA6268C804E69D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f83beaf6-ae8e-43d8-969a-76724e17dca0.roa
Signing time: Tue 11 Nov 2025 00:40:09 +0000
ROA not before: Tue 11 Nov 2025 00:40:09 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3e:00:74:06:59:e5:65:43:8a:6f:37:35:ca:62:68:c8:04:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 00:40:09 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=ba03027596dda7801c87830364bb0aa753d6cf27a9e481fc7aec8e43897eab84, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:cd:4a:d9:68:06:4c:b1:9b:9b:ca:4f:72:
ba:90:6e:01:eb:cb:6f:59:44:ed:fb:ef:31:b0:4b:
b2:d7:af:3a:ff:22:ba:a8:1f:78:b7:f2:3b:ad:22:
5a:be:9a:44:fe:db:02:e0:65:6b:c5:8e:1a:9f:ec:
cf:cc:94:77:a7:c3:33:0e:78:94:6c:56:a0:5d:5a:
d0:8e:97:c6:c4:2b:6d:43:0e:23:d1:74:9e:96:68:
75:b4:c6:f1:9e:8e:f9:4b:8c:fa:e4:78:ad:de:90:
a3:2c:0f:94:c9:93:19:f5:1c:7b:1f:94:ae:07:65:
a4:24:3d:14:fe:80:d1:42:30:4e:5e:9c:c2:37:a4:
e3:39:14:0d:3c:54:ec:a2:e1:06:e5:ee:1d:20:98:
7e:1d:70:73:3c:e0:05:14:93:9a:ca:db:db:85:9f:
dd:d5:bd:6d:7c:63:8a:ca:89:81:4c:c0:f4:56:b1:
9d:54:78:63:71:36:76:4a:61:b4:b6:3f:85:a6:9b:
d5:0d:b3:22:6a:a0:5d:a3:8f:fb:0a:5f:56:59:19:
0d:d5:48:10:42:30:ed:eb:88:5d:fd:44:e2:c8:50:
ab:8b:11:7e:80:81:99:11:9c:5a:e7:00:b1:0a:07:
e6:f9:20:30:c7:3c:24:44:c1:7d:16:f6:49:e0:83:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:67:BF:77:8A:B9:D1:38:01:76:52:A5:59:A0:2B:7C:EF:21:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f83beaf6-ae8e-43d8-969a-76724e17dca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.152.0/21
Signature Algorithm: sha256WithRSAEncryption
78:5e:94:d5:8c:6b:c5:f6:0b:b2:97:14:65:41:5a:49:07:81:
fe:cb:42:d6:8a:69:75:19:1d:57:7f:46:3c:76:50:b0:05:4d:
da:14:a6:6d:2d:4f:62:6e:47:e7:e4:37:36:37:dc:68:b6:f2:
10:43:90:e3:63:3c:ba:78:3e:dc:c9:be:9f:fc:ad:da:8a:af:
65:08:3a:67:ff:8f:4e:63:b6:91:d1:b5:7d:2d:f9:05:ec:25:
4f:cf:8a:85:cd:2a:86:b8:64:36:2d:da:f4:7d:5c:84:9f:f2:
21:69:83:bd:1b:7d:b6:d5:cd:91:a8:ff:88:78:cb:7f:c3:74:
2e:10:db:8c:a9:e7:84:be:13:e5:af:6c:46:27:25:4f:52:8f:
44:a3:27:ed:5a:da:2b:43:b1:81:d4:6d:ae:59:03:96:dd:d7:
2b:c9:28:15:40:99:de:2c:38:cb:e6:29:9d:28:3b:13:b5:3b:
0d:63:b0:d9:16:88:53:9b:12:5b:90:27:3e:ad:7c:7f:f5:af:
58:97:b0:b9:1b:73:9a:26:a5:5b:4b:1e:15:16:68:80:e7:c4:
32:6e:51:cf:a3:a3:32:76:1a:8a:37:73:9f:e7:c6:66:2c:ed:
e8:df:de:dd:9e:da:85:e1:9f:b4:53:f5:37:07:67:a0:f9:50:
53:aa:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:25 2025 by rpki-client