Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
File: 0646c84a-66ad-4774-8199-e2472141283a.roa (raw, json)
Hash identifier: GyDXDihCKzgeN1kLtQ4wBEAQrSpB5mObZdQJFPg5xM4=
Subject key identifier: 38:86:E4:CB:D7:1F:37:7F:DC:B5:49:DE:C1:88:4C:23:8F:89:19:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57F0C2AEBC1B8D88FD05C164DD771FE2784F7F8C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
Signing time: Tue 30 Sep 2025 00:02:52 +0000
ROA not before: Tue 30 Sep 2025 00:02:52 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 155.254.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f0:c2:ae:bc:1b:8d:88:fd:05:c1:64:dd:77:1f:e2:78:4f:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:02:52 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=4ef33a235d8be3e6c7443667781cc9c2beca81458a7d2c3931f0cc4abdbef9d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:01:93:ad:0c:ca:f1:7a:95:43:9a:4c:56:
37:0e:21:a0:21:08:a3:ad:c8:57:9b:93:8c:7a:f3:
36:db:ce:24:27:c6:58:8a:e4:83:0a:41:82:6b:53:
d9:46:c7:47:1c:08:a2:3f:82:3e:96:5a:cf:d1:24:
79:cf:e1:d1:1f:7c:de:4a:79:82:b7:db:10:b4:4d:
ad:49:3e:0e:cf:02:94:87:44:c7:ce:96:90:94:e7:
ff:e8:8d:ae:44:3b:a0:bb:e4:8b:fe:40:f5:a0:81:
76:d4:58:3e:e3:5e:7f:cb:d7:de:51:0e:5a:8d:1a:
5f:c2:ed:c7:7d:db:9d:bf:39:d2:73:65:bb:11:f7:
b3:ca:b3:3b:83:51:71:95:67:65:e7:6f:09:2a:83:
be:90:bd:a3:d1:86:b6:34:79:37:10:4b:d1:78:c5:
4e:c8:aa:e6:e6:dc:50:17:55:c8:0a:e1:aa:d1:d0:
6c:53:ea:7f:70:64:ad:a5:2f:28:99:05:fe:64:b1:
c6:af:e7:95:02:6f:01:e7:74:0a:2f:50:75:b9:9f:
0d:3b:33:9e:ee:73:b6:36:db:43:af:72:35:05:b8:
a3:c8:90:a4:2a:63:55:0a:1d:32:a9:69:cb:0e:a3:
1f:df:31:24:8f:ce:3b:df:4b:2d:6f:7e:02:43:03:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:E4:CB:D7:1F:37:7F:DC:B5:49:DE:C1:88:4C:23:8F:89:19:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:6b:7f:ff:1f:5d:79:18:49:f8:37:43:fe:61:bc:b9:10:40:
d5:9a:02:a7:6a:21:dc:6e:47:63:98:47:57:61:89:ae:f8:83:
35:02:75:ea:83:c2:7c:c3:51:f9:78:66:14:e6:c7:52:4d:a0:
1a:58:4e:41:e9:68:51:49:86:88:92:23:d0:e6:cc:f6:3a:91:
9f:34:66:10:ca:2a:9a:98:3a:45:00:38:03:a4:56:82:e5:85:
8d:91:da:c2:ca:cf:6c:ae:2c:6c:15:ef:4a:5a:45:5c:7b:44:
9a:5c:0e:1a:c5:ec:53:f8:e3:39:a9:be:ce:69:6f:03:27:0b:
f9:01:53:ce:ac:54:c2:ef:de:78:87:63:57:b8:3f:4e:d4:5b:
ba:95:91:f3:ab:4a:09:5a:96:37:db:82:2b:76:1b:a7:b9:74:
3d:66:3a:60:de:0e:44:51:ec:ed:eb:08:a9:67:c2:9f:56:73:
84:b6:0b:d6:68:59:bf:6c:81:54:2c:5c:8b:b0:c3:b4:49:bd:
97:9e:c0:63:80:07:01:7d:56:85:c9:ab:13:b1:0c:a5:8f:af:
01:ef:c5:45:68:6f:fa:bb:e2:c3:4d:14:52:3d:64:ab:93:de:
6d:09:aa:e2:50:ff:70:b2:fe:af:18:ed:af:e6:3b:d0:8c:41:
4e:96:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:25 2025 by rpki-client