Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6791e6e-7c87-4b47-886c-921b0bc60437.roa
File: f6791e6e-7c87-4b47-886c-921b0bc60437.roa (raw, json)
Hash identifier: /ZVDstNASzlDpsPNSKAf4Kuu9SfYb5PVV3aO/K8/bNw=
Subject key identifier: D1:07:E7:B7:ED:14:DC:B2:C8:35:AB:09:0C:2D:83:12:E8:46:5D:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4249411305A1A64F7EEA4225B566A8FEA5036586
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6791e6e-7c87-4b47-886c-921b0bc60437.roa
Signing time: Wed 12 Nov 2025 00:21:18 +0000
ROA not before: Wed 12 Nov 2025 00:21:18 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 164.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:49:41:13:05:a1:a6:4f:7e:ea:42:25:b5:66:a8:fe:a5:03:65:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 00:21:18 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=6d91dc38b9d7eddcbcea95d744be9feb4d44405971d11e6db17a8440ff9dc384, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:ef:e8:c2:27:5b:cf:85:6c:2c:9a:cb:f1:
f4:2c:12:a1:e8:6e:89:14:4a:c8:f8:7d:ef:e8:ce:
00:5d:7b:a7:7a:1e:be:82:d7:ab:4a:2b:f7:30:bd:
8a:9c:c8:d2:4f:c0:1b:4c:c8:33:c9:dd:e7:35:9e:
b9:18:82:88:6f:2f:52:34:e0:64:19:24:29:4f:30:
6f:56:90:b4:17:12:60:69:fb:25:25:c5:04:e7:17:
d8:4b:c6:02:da:27:a5:9d:19:e7:14:4e:1f:06:7c:
f4:e8:fb:ab:dd:2b:6b:e0:2e:ff:34:07:69:c5:43:
23:3f:1c:32:e6:98:1a:4a:95:f3:8c:fa:e7:ee:9c:
8f:c9:e8:48:e7:11:f7:38:27:a6:e7:16:b0:46:03:
13:d7:42:63:17:b6:65:17:bd:00:0f:f3:73:43:ac:
32:52:d9:f9:37:1f:ab:0e:42:e5:4f:c8:5f:47:4a:
5b:ea:db:86:6f:90:8c:c0:8e:c2:0c:1f:6b:99:47:
cf:30:a0:6b:9c:ba:13:96:3d:aa:63:f7:2c:ac:28:
6d:30:82:8d:d9:4f:a3:c7:b1:a2:e2:4b:4c:c1:6e:
6c:23:37:14:d9:49:62:49:1a:53:94:13:99:d4:7f:
7d:1f:ba:12:18:5d:87:0f:6e:ef:6f:05:49:01:23:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:E7:B7:ED:14:DC:B2:C8:35:AB:09:0C:2D:83:12:E8:46:5D:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6791e6e-7c87-4b47-886c-921b0bc60437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:f3:f4:8d:63:86:1f:70:21:17:d0:af:8e:1c:c0:22:3b:86:
8e:de:60:c7:3f:ce:c3:e6:cc:ff:1f:34:f6:83:73:e1:8b:0a:
9d:9a:c2:fc:ee:59:8f:00:71:22:9a:0c:78:f5:2e:6c:82:f8:
0d:86:c4:33:87:e5:71:da:74:2f:8f:cf:29:04:d0:ef:0b:92:
e1:91:a0:36:5b:b1:94:74:bf:d8:65:3a:b0:e4:e1:f3:82:c3:
53:2a:5f:f3:79:a5:bb:df:c9:7e:77:81:f7:22:c5:69:f5:51:
94:39:f0:1b:c3:ca:a4:d1:bf:93:96:5f:7e:91:88:fb:08:22:
35:7f:b3:e8:3a:13:fd:25:9a:ac:a2:d4:41:66:b8:73:f3:c5:
44:15:81:eb:fd:7b:77:fd:97:61:17:30:04:a6:25:87:20:cf:
26:ef:0e:19:e1:f8:87:1f:5c:db:33:f8:9e:ad:8a:e1:2b:93:
2c:48:c9:87:9c:cd:23:58:db:95:4c:e2:d2:b4:a1:46:f2:e3:
1e:fa:2e:4c:b0:79:6e:a5:36:ff:62:4a:c8:87:24:db:69:4d:
02:8e:23:c9:4d:34:ee:c7:16:14:e6:4c:a5:d6:22:be:14:30:
cd:79:17:34:6b:c4:2b:98:19:ba:dc:b0:73:e4:ee:b0:d6:ba:
bc:aa:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 20:55:42 2025 by rpki-client