Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa
File: 98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa (raw, json)
Hash identifier: e13oRJM/qpWlapXwt2cjrpXtFGFcArgTQeWBf1bw8zo=
Subject key identifier: 83:AB:61:F5:28:18:0D:E2:E9:17:4C:08:AC:9C:EC:6F:DD:83:D8:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27C80F70563B73B69CD8F278098D632C4A15C4B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa
Signing time: Tue 30 Sep 2025 00:02:51 +0000
ROA not before: Tue 30 Sep 2025 00:02:51 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 155.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c8:0f:70:56:3b:73:b6:9c:d8:f2:78:09:8d:63:2c:4a:15:c4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:02:51 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=3579e251bf235261416153b463c91bf1acb5f210302db52858f9e327df95a3b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:93:99:1f:49:aa:9b:b7:7e:68:78:73:37:
a9:c1:23:9e:fe:98:16:55:b0:33:74:38:14:0f:6c:
cf:8b:81:58:d5:78:0f:5d:80:26:44:bc:9d:fa:45:
b7:7c:3d:7b:2a:62:09:91:5b:b2:7f:13:84:af:bb:
dc:88:8e:f0:d8:9b:2a:67:c2:49:68:6b:04:9d:29:
5d:dc:a1:ae:96:f3:83:50:8f:aa:36:89:0d:62:92:
40:72:37:c8:ac:61:1a:54:a5:19:67:a9:9f:33:41:
7a:aa:59:e2:67:cd:75:e3:1f:25:8f:60:16:2c:59:
f0:ea:66:f9:7d:74:02:49:d2:4d:88:39:7e:f4:1b:
77:f9:ab:df:e8:1c:e8:96:96:3c:fa:7b:75:a1:51:
8c:0e:ae:d1:20:db:03:fb:b7:8e:72:3b:80:91:fe:
4d:3f:f8:81:47:84:d3:0f:3d:1e:93:87:2a:87:59:
f1:6e:a3:6e:94:72:29:8b:d5:55:d2:81:fc:27:b7:
dd:0c:b4:2e:9e:7d:25:ad:93:af:b4:25:57:0d:7b:
cd:fe:4d:18:5e:18:0f:43:8b:af:9c:6c:3b:b5:f5:
fd:7c:f3:e7:3e:79:a0:fe:4a:fd:1e:31:fa:e6:c9:
7e:c1:51:8d:04:33:fa:da:f8:08:ce:22:e3:69:ff:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:61:F5:28:18:0D:E2:E9:17:4C:08:AC:9C:EC:6F:DD:83:D8:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:b1:1e:dc:6f:f0:8c:8b:b7:e7:a6:ea:bc:51:2e:bb:71:a1:
6d:f1:0d:cc:61:97:96:05:7e:97:09:d9:2b:e9:10:b1:fa:bf:
71:91:20:d9:4c:5a:6d:de:82:ef:a2:8a:a5:cd:69:10:d3:66:
91:6c:68:59:92:1c:09:9e:ff:37:bc:29:26:30:ab:2c:4a:9a:
c1:48:d4:f4:69:a0:39:51:5b:3e:d4:2e:07:d4:a9:02:73:fc:
fc:96:97:7f:13:aa:12:6f:7e:d8:ab:b3:44:93:e8:7e:dc:b8:
a0:dc:ed:81:52:07:61:3b:a3:de:c6:18:33:d6:09:0c:f1:81:
51:6e:2c:33:70:25:56:f1:8c:23:8d:03:a1:7f:cd:63:e7:de:
0d:cc:d2:d8:d0:84:45:41:30:7a:f9:e0:93:94:d1:be:e3:eb:
bb:07:7a:bf:b4:f7:32:ac:63:36:f0:da:af:46:39:da:16:a0:
6d:40:16:f2:ab:15:e9:14:01:7d:c1:cb:c3:d7:14:a2:8b:c9:
33:ce:5e:74:07:0c:0f:8b:77:b8:8c:19:a2:1f:76:89:41:48:
92:ec:e7:38:6f:c8:43:67:bd:af:45:9a:43:1b:7f:83:fa:e2:
be:bf:f2:2f:4c:ab:37:01:ea:f7:9d:9b:db:ee:ec:99:d0:40:
f7:84:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:54:30 2025 by rpki-client