Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852d978-23e6-49f4-9d03-547fcdc12c82.roa
File: f852d978-23e6-49f4-9d03-547fcdc12c82.roa (raw, json)
Hash identifier: frcGq5E3af5ClIvv44xpICJCuHDAjzMgZ4EvX0BmUP0=
Subject key identifier: 49:BD:B6:C0:2B:68:92:43:4A:EC:B0:9D:7C:51:15:BB:3E:F0:FF:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CEC918A5205D07861F89F7C26AEB5E3F9F64C2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852d978-23e6-49f4-9d03-547fcdc12c82.roa
Signing time: Tue 30 Sep 2025 00:11:09 +0000
ROA not before: Tue 30 Sep 2025 00:11:09 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ec:91:8a:52:05:d0:78:61:f8:9f:7c:26:ae:b5:e3:f9:f6:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:11:09 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=d202c355a4ab366359a5ec68925af1e461b06699c09ef674131fdd866314b1ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:1b:b9:ee:71:ee:6f:02:07:d4:32:1a:1c:
86:d3:c9:68:44:9e:96:56:ee:a9:27:e4:58:b7:da:
ed:f0:49:a2:2d:e2:3b:7e:00:f2:92:6a:07:96:d3:
9c:85:43:41:2c:bb:23:8c:26:18:00:ae:43:e6:42:
7a:e5:76:c3:24:a8:12:80:da:5e:3b:0e:74:5c:90:
a7:be:6d:11:41:16:65:d1:ed:84:9a:bb:95:48:fd:
e1:33:92:d3:2e:db:c5:11:34:6b:8c:aa:9b:09:ea:
39:d7:05:ac:a4:01:7f:b9:c8:c9:41:16:9a:3f:b3:
fe:07:a4:cb:01:8d:59:58:6e:a0:73:16:34:42:db:
ba:df:f1:1c:fe:ac:37:17:d6:2e:f2:e6:45:bd:73:
c8:40:c2:e9:bb:45:5c:49:21:ce:69:87:18:7e:24:
09:70:05:cb:ea:c8:94:08:ef:fb:34:94:94:55:f1:
01:c7:ba:76:24:53:b1:1e:7b:0d:ef:28:d7:f3:04:
90:a8:1c:4c:da:bf:f8:43:c1:5a:1b:ad:9f:9c:31:
d5:66:7d:8a:98:7d:68:83:c0:6e:7b:1f:52:4e:63:
ca:c4:f0:3b:23:78:0b:c5:55:06:ff:a1:29:1a:64:
00:d8:f4:a4:2d:60:60:37:e6:17:04:30:40:ff:bf:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:B6:C0:2B:68:92:43:4A:EC:B0:9D:7C:51:15:BB:3E:F0:FF:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852d978-23e6-49f4-9d03-547fcdc12c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:99:a0:40:ed:56:ce:49:09:77:4b:66:bd:72:87:7b:76:bb:
ea:da:91:37:f0:c2:3e:49:f7:1d:eb:ec:f3:58:23:72:f0:44:
24:ba:e8:53:a1:1f:fe:33:d0:fe:b9:00:d7:aa:8e:de:3f:89:
04:9c:c8:df:26:d3:2f:4e:37:99:a3:25:f6:e7:47:a0:76:45:
dd:01:68:10:be:6b:53:82:a3:25:f9:3e:15:31:4d:c9:8e:61:
32:95:a8:a2:4e:1c:d6:bb:3a:74:a2:34:fb:91:49:22:a7:ef:
d1:30:09:4c:1c:b8:6b:ef:63:12:68:61:e7:9a:fd:60:84:ce:
26:b7:a4:d7:94:51:c9:76:20:e0:dd:23:30:00:5e:c1:43:89:
d9:e7:ac:41:41:a2:d5:ad:35:e9:6c:f2:2e:36:bc:fb:51:77:
f3:bf:47:28:88:e1:60:40:8e:62:4d:49:47:64:c2:0b:cf:30:
c2:40:8c:65:f2:31:00:42:d2:38:a1:31:23:54:f1:2c:94:4f:
32:df:55:f1:9b:0f:7f:63:12:37:02:76:0d:7c:37:28:69:f8:
b5:e0:08:2f:a1:85:6d:a5:93:eb:1e:83:4f:c6:dd:b2:a1:5b:
44:94:69:c2:3b:c7:40:9c:2f:06:7b:56:f0:52:07:78:39:39:
fa:67:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:35 2025 by rpki-client