Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/109e78ed-7007-450d-af65-7f725a4b4621.roa
File: 109e78ed-7007-450d-af65-7f725a4b4621.roa (raw, json)
Hash identifier: 1MPJBSK8/P3seIjeGQzXJzBniO/9iFhzJSVl4Nmw5JU=
Subject key identifier: 29:89:2D:C9:71:C5:0E:D7:82:BC:11:FF:7F:77:0C:2A:B5:57:7E:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46E761037ADB2E083215648406A8BC68DA797190
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/109e78ed-7007-450d-af65-7f725a4b4621.roa
Signing time: Sat 18 Oct 2025 05:10:11 +0000
ROA not before: Sat 18 Oct 2025 05:10:11 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e7:61:03:7a:db:2e:08:32:15:64:84:06:a8:bc:68:da:79:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:10:11 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=e47153f5720a75e14e5ab74b2d2af7845e25dac27b9bc10e71b0395e66103f40, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:79:9f:1a:03:38:a3:2c:cb:d0:cf:5a:bf:
fd:7a:32:05:4f:ad:14:b8:ca:0b:5f:66:d1:f3:c7:
44:d3:ee:0b:3f:c9:a6:50:54:97:c9:24:fc:b0:37:
e9:85:f5:07:66:9e:2a:37:7a:85:f7:d9:76:d7:e9:
d7:8b:06:bc:09:a3:fb:5a:10:c1:cd:c6:10:7a:aa:
94:82:8b:c8:56:cf:ab:9f:3f:9e:5e:97:87:90:7a:
18:42:a3:d2:93:6e:d5:f3:77:c6:c5:55:99:19:7f:
c1:59:ab:9e:41:f5:33:1a:f1:2e:b8:9d:fd:3f:4b:
cc:77:17:12:40:a9:61:04:84:cd:95:f9:29:fa:27:
4b:05:1b:c3:f1:d7:9a:77:cc:e7:dc:97:b4:26:dd:
9b:bf:41:14:c0:e5:fa:69:c1:0f:11:ef:a7:93:da:
1c:2f:01:cb:e2:e2:7e:d1:8a:11:ab:44:c5:48:15:
e2:f6:19:31:cb:32:c2:db:84:50:e7:d7:cc:ec:b9:
59:33:3a:9e:b1:1b:76:c5:d9:7c:cc:72:5c:23:17:
f6:b2:c1:cb:6a:79:e4:c6:1b:f1:41:5f:f6:25:29:
67:f4:75:78:71:55:88:ae:c2:57:02:b4:b1:6a:1d:
68:e7:70:d7:3b:ae:5a:45:9b:64:23:83:1f:49:df:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:2D:C9:71:C5:0E:D7:82:BC:11:FF:7F:77:0C:2A:B5:57:7E:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/109e78ed-7007-450d-af65-7f725a4b4621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0f:c2:4c:7a:2d:74:7c:ec:0c:3e:7b:17:b0:b0:fc:8b:93:
65:18:e0:aa:f7:7d:d1:43:b9:b7:11:71:46:39:a7:14:48:15:
bd:18:7c:52:93:27:6a:08:ab:47:8c:4a:d6:a0:37:7f:73:73:
6b:7b:62:84:2e:22:5d:95:53:03:41:e3:66:d3:c9:da:8b:2f:
da:a0:f2:10:51:ac:03:28:c3:94:d1:73:eb:9d:0d:1d:32:70:
c2:45:67:31:74:0b:9b:39:14:7f:70:d6:7c:56:db:e9:4e:58:
34:16:21:e0:7e:cd:04:8c:28:98:23:e6:db:dd:d9:e9:5e:0f:
40:1b:b5:d0:20:6e:61:f8:a3:82:34:24:80:07:15:5f:af:16:
e2:75:ca:10:a2:28:15:38:65:77:87:57:6c:6b:6c:fe:09:9e:
d1:66:08:4f:72:7b:bc:97:a6:b8:ed:8e:6c:8c:ba:36:d3:66:
3d:9c:95:8f:a1:b5:34:20:ea:5e:85:be:22:1c:92:bd:5d:20:
3e:3f:e2:51:e6:2a:a8:86:a4:7e:bc:9d:c6:4f:25:c1:76:20:
3d:cb:5a:9e:9c:59:c0:70:a3:97:59:8c:bf:1e:b5:ab:0b:2e:
2a:f6:db:55:79:71:db:28:09:d9:72:f1:ee:92:99:a8:2c:3e:
c1:9e:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:09 2025 by rpki-client