Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa
File: 04458f53-1b58-4ea6-b808-1d18094e2918.roa (raw, json)
Hash identifier: mMRcrXhjruJuJaV1xVSmjuJPyhsbsCycyKc9WccW/p8=
Subject key identifier: C8:56:7E:23:F0:97:93:A3:83:60:8C:E4:D2:62:1B:1F:50:9F:C9:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45BD76FD99EC2D0113F561DBFD4BF28AAC5D59C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa
Signing time: Sat 18 Oct 2025 00:50:52 +0000
ROA not before: Sat 18 Oct 2025 00:50:52 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.182.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bd:76:fd:99:ec:2d:01:13:f5:61:db:fd:4b:f2:8a:ac:5d:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:50:52 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=369a13ed9563de2bd0e19ab76165945a3bcc0b0a2f59a013b7ea0ea8023a2821, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:2c:19:5a:a1:f0:72:a7:7f:25:8a:2b:46:
ba:30:b2:ea:84:7f:b9:90:02:60:aa:32:7d:63:ea:
1a:7e:7f:1a:c5:64:23:d9:cd:f2:ae:3f:47:25:8d:
98:33:1d:24:2d:46:bd:d4:c5:44:04:04:4a:50:48:
aa:00:20:e6:0a:a9:38:b4:0d:f1:a7:67:5d:5e:b5:
92:8f:9e:03:6c:e8:7c:f5:19:69:5f:45:75:45:50:
44:e7:39:a1:74:29:94:c0:48:a0:eb:1c:77:db:74:
f5:8d:5d:92:3a:ba:56:27:9b:7f:fa:ef:86:e2:73:
6e:0a:60:ad:33:70:be:22:38:25:8e:48:6c:3a:6a:
81:8f:29:ba:e6:23:f6:63:7d:c5:8a:a0:24:73:60:
3c:d5:59:8a:2f:63:14:46:af:c8:c5:36:64:c4:7c:
48:1b:c9:1c:a8:45:b9:12:14:b3:6b:26:4c:c3:3e:
19:95:da:89:c9:e8:47:43:e7:6e:59:64:12:31:74:
0f:0b:bb:aa:ed:f1:a5:cf:2b:5f:23:e9:eb:bf:7c:
a7:88:e8:df:79:2d:04:b4:dc:2c:73:ed:c4:23:82:
1d:ef:b8:59:72:48:4c:5e:3e:1d:9b:be:5a:a2:25:
61:ba:92:3c:4a:bf:b3:bb:05:3b:93:bc:cf:3c:b8:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:7E:23:F0:97:93:A3:83:60:8C:E4:D2:62:1B:1F:50:9F:C9:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.182.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:eb:b0:ef:00:cf:0b:d1:4b:04:44:8a:f4:56:cf:59:fe:ff:
2e:44:ab:ff:1c:c7:bd:1d:bf:9b:77:1a:0c:cd:c4:7c:7f:a6:
25:d4:f7:7f:35:e5:e2:95:21:c2:6b:61:aa:1e:ff:de:c6:08:
ea:51:3e:fe:7e:08:b4:65:62:84:d4:66:53:86:ce:2e:71:98:
03:d8:df:99:e1:b1:64:dd:83:ce:c4:1b:97:03:97:77:57:39:
e5:99:b0:3a:a9:fb:34:00:8f:bc:28:90:15:20:da:d4:d2:c9:
3e:99:f0:8d:23:2b:79:51:c9:ed:e7:cd:c6:96:89:bd:2d:93:
05:70:67:f2:a4:cc:6a:5e:a0:16:e2:a9:f7:9e:76:97:36:ef:
ae:40:2a:84:5c:21:1f:6f:cd:54:79:cb:71:09:8d:97:ef:df:
96:78:59:04:f6:c6:19:d9:22:8c:b2:e2:32:9e:40:9e:53:bb:
5e:69:05:60:3f:af:2c:b6:00:dd:a9:e9:57:bd:d6:48:65:66:
73:f7:d6:9a:47:f9:99:30:38:24:75:50:a4:5e:83:a7:f0:ab:
6e:83:02:15:68:34:0d:4e:82:34:b2:66:0f:a4:5e:53:9f:b5:
19:a7:c3:c8:ec:e0:06:4e:42:dc:60:63:d5:f7:84:98:4d:b7:
9a:59:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:21 2025 by rpki-client