Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa
File: 46ffd29f-2469-4e53-b48f-865865efa7e1.roa (raw, json)
Hash identifier: MybyE9/y5oFf3jKy2Kw1fJiISDOmtPP+0v7RJsDFeI4=
Subject key identifier: 18:18:41:A1:E4:5B:A9:62:7B:F3:5E:D4:E1:0E:D7:74:AE:BD:30:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 155F68AC100EA28CB6BEA7DB14F31BB4121AFD43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa
Signing time: Tue 30 Sep 2025 00:11:51 +0000
ROA not before: Tue 30 Sep 2025 00:11:51 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5f:68:ac:10:0e:a2:8c:b6:be:a7:db:14:f3:1b:b4:12:1a:fd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:11:51 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=7413116527a87aaf9c32c24a0def013d04d20d6164887605dde55189c18dc3cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:8f:a3:13:83:01:6b:cd:5e:d6:96:83:7e:
27:57:d8:e0:f5:94:93:3a:ea:66:c9:d3:e4:bc:94:
84:61:30:a6:34:4e:9e:6e:38:8a:96:05:fd:d2:f5:
81:68:ca:51:d3:fc:b1:e6:18:e1:4d:98:62:60:cf:
c7:6d:36:6e:3f:8e:ee:ef:6f:b2:78:02:6d:7b:c0:
ce:08:4c:28:ea:a6:7b:b5:e5:91:83:ab:c0:c7:0a:
88:07:7c:bc:28:02:dd:dc:78:e8:75:56:46:f4:f2:
1d:47:2c:f4:8b:e4:5b:b1:eb:6e:a0:e4:d2:35:ea:
85:40:52:2d:75:ce:c5:99:a2:d2:c1:7a:de:84:64:
1e:d2:b8:af:d5:6e:46:57:95:a6:1e:90:fe:83:a2:
23:45:97:0b:8c:e2:eb:99:23:cb:e4:a1:f5:46:28:
11:90:8c:b6:f3:bb:1f:da:78:85:84:d3:97:c7:cc:
9e:74:a9:5e:44:05:d8:5b:ab:1f:0d:a6:9e:63:96:
bb:d1:4a:05:8c:16:ae:1d:fa:06:f8:cc:fc:c4:fb:
58:e5:89:22:55:41:21:39:88:c5:7e:02:88:40:e2:
26:8d:95:21:4d:0a:a2:41:d9:c8:a0:80:34:95:10:
6a:5b:33:01:c0:a4:b7:84:bd:e6:7c:25:80:f0:14:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:41:A1:E4:5B:A9:62:7B:F3:5E:D4:E1:0E:D7:74:AE:BD:30:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:7a:74:c8:00:32:ab:ff:5f:30:76:2e:ca:1d:c3:6e:c0:c9:
da:44:62:66:4e:16:2d:e9:4d:4f:85:00:15:16:ee:b4:2f:c6:
81:f8:d7:54:36:ce:f5:22:0b:8a:ec:47:d0:60:b5:95:3c:16:
2b:a5:99:85:3e:33:58:dd:60:ff:03:bd:3b:c5:a3:bd:3a:52:
30:58:77:f5:92:ea:41:ca:5c:9b:5e:a7:ae:22:2e:1b:42:ee:
f1:c4:31:96:76:bd:ac:b3:a9:86:68:ef:e6:5d:cb:22:39:0f:
e1:b0:cc:eb:64:e3:4b:9b:7f:7c:ea:c5:75:bd:77:72:05:0b:
6a:47:a6:1c:17:74:71:3a:d2:5a:c6:38:67:20:5c:c7:3c:ba:
23:db:52:62:7c:cb:10:59:63:8e:21:63:89:0b:81:e6:45:57:
7a:fa:ca:2a:b1:71:4a:06:1f:06:01:fb:69:ab:80:cf:c1:3c:
00:55:7e:bd:93:4e:ea:50:89:25:e7:10:1d:9e:86:a3:8d:f4:
4f:2e:97:91:35:37:49:7d:41:a5:70:97:bf:15:21:10:96:24:
dc:6f:e4:a4:f0:78:11:eb:9d:80:05:4a:fc:3b:99:59:62:47:
64:f6:a9:15:0b:db:b3:fb:84:51:f2:d9:96:3c:96:db:a3:ae:
6d:78:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:52 2025 by rpki-client