Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
File: c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa (raw, json)
Hash identifier: 0Zq3KhZfNLjfBUqDQF/ZzoItSeFaH6qk1rNtr/6u5Ns=
Subject key identifier: 5B:14:DA:75:CA:2C:7E:72:2D:AA:54:3B:98:4E:40:4D:A8:54:6B:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 236AF3A45A161B10276D4BBB9BDF3D0E771D767F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
Signing time: Tue 30 Sep 2025 00:12:00 +0000
ROA not before: Tue 30 Sep 2025 00:12:00 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6a:f3:a4:5a:16:1b:10:27:6d:4b:bb:9b:df:3d:0e:77:1d:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:12:00 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=8a1d7c7a58ce3d9fad2dfd15b10bf6e20dfff78a5ef10876878c17369d1ba716, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:23:e9:52:63:c3:49:2d:7a:72:37:7c:30:
cd:a5:4c:3f:37:2a:57:62:82:e8:64:81:1f:63:e0:
bd:5c:e9:0d:83:14:a7:fb:f3:89:a7:22:98:a8:b8:
37:63:df:c2:a1:4d:f0:ce:1e:86:ab:e9:50:42:7b:
14:ad:1a:aa:8e:4a:59:ff:ef:59:8a:db:cf:23:8c:
68:77:2b:4a:e2:10:bb:c6:1e:6d:c3:b9:31:9c:71:
ad:a4:d1:87:7a:77:2b:35:c4:92:6a:77:e1:f5:d1:
0a:0e:aa:13:1a:70:e0:cb:91:bd:06:4a:40:66:aa:
08:00:b8:63:49:e0:b4:34:4a:5c:ad:b9:6d:29:b6:
72:d7:f5:47:61:69:3b:07:b5:b8:a6:47:a9:7b:fd:
f6:ad:20:c0:15:7d:9b:1b:5d:07:06:1a:f1:3a:69:
2a:63:c5:18:23:fc:50:a3:3a:78:b5:79:2f:0c:c0:
86:be:93:86:8a:ac:1f:59:28:fa:31:71:73:bc:4c:
b4:f3:99:80:0d:cb:c8:20:d9:a4:61:ab:cf:a8:22:
ac:43:5f:73:fa:fb:35:f9:3c:d1:7a:08:5c:09:6d:
de:37:5d:ad:b5:c6:74:4d:6f:2c:87:19:b9:85:a3:
d0:3b:78:3b:da:8b:94:90:e5:5d:c5:7f:6d:14:e9:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:14:DA:75:CA:2C:7E:72:2D:AA:54:3B:98:4E:40:4D:A8:54:6B:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:5c:57:26:01:15:c7:36:08:45:15:a5:0c:03:a3:60:9d:fc:
c0:79:24:18:98:cf:5d:8a:91:b8:13:a4:f6:be:f2:45:82:89:
9a:ca:ff:f9:a0:47:71:8a:5f:5f:5c:21:a7:22:3d:12:34:56:
3e:a4:17:12:50:80:c1:30:70:3d:db:d8:47:59:a7:45:53:17:
cc:82:a3:4d:b7:3a:b4:60:cf:1e:52:86:22:ae:ee:a2:bf:99:
7f:01:c6:f6:90:63:ba:17:f1:df:a2:1f:ab:d9:b5:a3:a3:c5:
ed:9a:d2:0a:83:fa:86:7e:06:05:68:92:ff:ee:cb:05:82:79:
eb:f8:92:78:80:ce:c8:43:be:8a:72:b4:4c:a8:8b:1a:c1:bf:
46:a5:4f:d4:fa:b7:5c:74:e8:9e:04:67:2c:8d:fe:45:da:28:
5f:79:9f:be:47:c2:e6:71:9c:21:8c:29:91:d7:be:79:96:b5:
65:6a:cd:91:ab:6d:d1:ce:2e:0f:85:b4:e9:d9:cf:be:d4:73:
de:fc:fc:7c:1a:c5:4b:cb:c9:1e:ef:aa:4a:4b:e3:34:4c:93:
7c:99:97:d8:53:d9:fe:6d:30:21:00:f3:83:4f:5e:48:9f:c6:
65:f4:be:fa:25:57:cf:6c:ef:ff:42:46:4d:97:a9:9d:a1:d2:
27:3b:72:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 10:44:22 2025 by rpki-client