Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa
File: fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa (raw, json)
Hash identifier: KFEhjM6w04bPzpY8OlUWDwOUqbm/7C2O/Tj7EEeqszQ=
Subject key identifier: A2:4D:E0:D5:37:9B:81:2D:A4:F1:89:7B:E3:4A:5C:68:8F:9E:29:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39DE4D01BCE787D07E990E23A5DCAE5576BF70E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa
Signing time: Mon 06 Oct 2025 15:40:06 +0000
ROA not before: Mon 06 Oct 2025 15:40:06 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.178.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:de:4d:01:bc:e7:87:d0:7e:99:0e:23:a5:dc:ae:55:76:bf:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 15:40:06 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=ced939748512c2893ee79f9de0d6943e3082007d02334eca4dfb478204d7161f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:53:19:3b:96:49:03:dd:6e:61:5f:33:52:
37:01:54:fb:69:ca:f6:d6:f5:b7:97:6b:87:33:96:
2d:22:e9:ea:17:ce:17:73:da:34:2c:31:c4:bf:87:
4d:4a:c9:76:ec:c7:25:90:87:cb:e2:6d:c2:25:d6:
11:b0:3e:8c:96:67:74:0f:09:9d:67:21:64:0c:5f:
cd:84:bc:8f:04:1c:ae:42:3d:87:14:76:56:a6:6e:
48:ef:f4:d4:bb:f3:35:86:3a:8a:a2:6e:08:33:4a:
f5:f0:80:3f:39:7c:59:58:d5:fb:2b:20:e3:b0:fa:
a4:90:f6:bf:b0:2d:03:60:7a:ec:e8:50:fe:74:fc:
4e:40:3f:0d:7c:da:3a:b3:73:83:53:82:5d:81:a5:
dd:44:81:45:a9:d3:6d:d8:32:6b:06:5c:2c:c4:c5:
80:34:4d:b0:dc:fa:b6:5c:b9:58:2b:f5:c4:39:12:
b5:4b:dc:1b:df:f8:1f:1e:c5:33:32:c2:26:1c:cc:
ff:71:d7:23:54:52:37:ed:d9:39:fa:3a:d9:fd:44:
f0:b8:92:4b:3f:64:e0:17:47:a1:91:a4:b0:45:74:
52:09:35:07:5c:ce:db:e9:3a:97:47:76:43:8b:ca:
fa:9e:41:e1:10:68:7f:f3:0e:f0:f5:d8:27:fa:1c:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:E0:D5:37:9B:81:2D:A4:F1:89:7B:E3:4A:5C:68:8F:9E:29:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.178.0.0/15
Signature Algorithm: sha256WithRSAEncryption
43:f3:7f:19:34:cb:59:7f:34:70:c5:a8:fa:8a:7f:59:69:60:
1e:d6:ab:d5:ab:48:3a:0e:39:9f:58:77:88:99:5d:21:49:cb:
9f:e8:ba:bb:5a:99:fb:33:6c:53:d7:ed:38:f8:21:b9:7c:4e:
f2:f5:e4:8d:72:3b:dd:c3:05:ed:8d:74:4d:d6:9c:8f:c0:80:
f5:33:1b:7d:ce:ca:15:fb:f4:cc:1a:29:07:03:5b:f5:af:bb:
43:13:d3:ce:ca:d9:cb:09:35:52:4a:66:25:a0:1c:36:60:25:
25:71:1f:e1:ac:cf:b9:a0:50:0d:ed:ec:2f:7f:6c:07:6a:c0:
45:34:0e:55:94:c5:4a:43:54:8d:96:7b:03:6c:6b:2e:3e:5e:
2f:17:b5:68:a5:9d:fc:e2:91:ca:51:57:7f:79:91:e5:9a:2f:
6f:54:bb:82:4c:88:4b:e9:4d:6c:04:29:03:62:6e:25:b0:43:
34:f4:24:57:4e:3f:87:3b:a4:db:af:dd:70:25:c2:ef:fe:03:
20:c8:cc:2d:71:31:d7:11:b1:be:f2:c1:de:99:a4:9a:42:2a:
6f:70:d7:92:28:c5:71:27:bb:e6:ca:ba:de:3c:5c:26:17:80:
5b:59:f0:6a:52:fb:9a:f4:e2:83:ac:fd:fd:3c:d4:3f:a2:57:
d7:be:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:25 2025 by rpki-client