Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa
File: 0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa (raw, json)
Hash identifier: Y/GpXjZzAg+ou/+4eayJorc4tIJWzaqPbLGXOdMGd2E=
Subject key identifier: 81:E2:73:A6:4D:A8:44:02:80:2C:75:23:83:DE:08:59:9D:C9:F9:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 518FD05B3A7A59E263EB6A871E6BF9C6E5DB1D7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa
Signing time: Mon 13 Oct 2025 15:51:11 +0000
ROA not before: Mon 13 Oct 2025 15:51:11 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8f:d0:5b:3a:7a:59:e2:63:eb:6a:87:1e:6b:f9:c6:e5:db:1d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 13 15:51:11 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=710394aa2a65dda1e82e59619b9ccfdeef406428acc26a5f7dca683303404fc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:55:ab:22:87:f1:e3:20:07:62:8f:c6:c6:
9c:0a:e3:78:d2:42:59:c2:c2:e1:91:05:13:b3:cf:
b4:cd:30:d4:16:fa:7d:67:67:4d:4c:27:f9:9a:73:
a1:32:23:6a:b7:ca:a7:10:3a:28:c2:c4:d0:e0:9e:
97:07:d9:ba:40:eb:c7:aa:15:bb:04:8b:a7:d3:47:
51:55:dd:6f:47:30:a3:25:89:76:f4:bf:b0:e9:3a:
24:a9:3b:a5:84:30:30:2a:bf:f2:17:03:5d:91:79:
84:1d:5e:26:1b:ce:75:6a:4a:34:89:ee:ad:cc:f4:
94:86:5d:8f:8e:eb:5d:7d:c7:0f:f9:7e:d0:93:52:
7c:d4:b3:5f:69:50:29:9c:d4:2a:d8:16:f6:09:4e:
3b:35:87:75:2a:63:8e:7f:c3:f0:e4:e5:57:ad:1f:
68:b6:90:f4:fd:79:de:d5:39:bf:85:76:90:06:0f:
38:bb:24:99:4c:4a:7b:d3:11:c0:dd:1d:80:f4:41:
7d:d3:06:ec:dd:e7:87:d6:e3:26:1d:a6:cd:79:47:
3b:76:48:bd:b5:0f:55:35:c1:83:e9:63:14:b0:25:
fd:6b:f3:86:0e:de:d0:85:24:a9:c1:04:c3:6d:93:
98:29:aa:29:69:fc:f9:0d:9e:f6:94:b8:80:fd:f7:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:73:A6:4D:A8:44:02:80:2C:75:23:83:DE:08:59:9D:C9:F9:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c9d9983-0dd0-4375-a278-266b4da3e0a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.23.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1b:f0:53:c3:3d:84:38:a6:b9:30:9f:cd:13:15:19:0a:6d:
59:81:f1:b9:a7:86:f1:ec:8a:65:30:f8:b6:59:95:ed:b1:f3:
d1:76:30:5a:1e:2e:11:ac:2b:8d:41:83:7a:52:6a:74:a8:ae:
d9:b8:8e:00:4e:48:ca:09:dc:31:79:4b:6b:36:a6:85:4e:3b:
f4:23:db:85:03:78:55:11:e8:8a:00:f9:11:a7:0f:45:87:a2:
86:28:eb:6c:4e:5f:1f:15:d2:b9:87:b9:57:82:b4:6c:0f:43:
21:7f:1d:5b:6d:8a:05:43:b5:e8:0f:fc:c0:d3:a1:4e:aa:ab:
5b:15:97:84:f0:98:66:60:8c:a3:ea:e2:81:c8:d5:72:9d:d1:
00:af:8e:76:cc:77:7f:e1:3c:01:68:7c:2b:3f:5c:31:3f:34:
5e:ac:f6:50:9b:5f:8c:ea:68:dc:09:b6:24:3d:cc:68:e0:89:
34:59:35:50:26:3e:2d:cb:9b:71:47:ad:7b:16:78:7b:60:c4:
6b:72:ea:eb:9b:9f:61:40:96:83:37:f2:5f:3e:d0:1d:00:7c:
50:18:43:2e:f6:43:50:43:c6:bb:46:f8:b6:65:4a:bd:28:09:
bf:eb:1e:f7:58:1d:38:20:34:66:3f:23:97:98:8b:75:2d:da:
51:af:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:21 2025 by rpki-client