Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d232050-4c58-40e2-9036-331be5aa0f31.roa
File: 0d232050-4c58-40e2-9036-331be5aa0f31.roa (raw, json)
Hash identifier: tB7lHft7aFXuW08Hy93NWFPx3+6zoByJ9/EjLW/SUFE=
Subject key identifier: 8B:57:1A:85:87:3F:52:45:12:AD:27:51:4A:86:07:35:15:F2:A5:0A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AD656EF3F04FBB4E506710608F1A2273DA29AA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d232050-4c58-40e2-9036-331be5aa0f31.roa
Signing time: Sat 18 Oct 2025 04:20:47 +0000
ROA not before: Sat 18 Oct 2025 04:20:47 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 121.91.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d6:56:ef:3f:04:fb:b4:e5:06:71:06:08:f1:a2:27:3d:a2:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:20:47 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=238d6654c26b78470bbf81e58a3ef898e1a4933bf36cf5092a9f0d96ab9ac740, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:cd:67:63:22:19:ca:cc:d7:06:58:a4:a1:
fc:43:89:fa:d5:a4:e0:46:1f:ed:7a:b3:21:18:40:
75:7a:ff:2a:27:f1:71:f1:7c:3d:8d:0a:b2:aa:5d:
cd:26:ec:0d:62:6c:0a:5b:05:b8:aa:1c:f3:e4:08:
8f:01:d7:df:7b:6d:c6:b0:ae:d0:37:9c:48:8e:b8:
62:81:8c:63:98:14:2a:ab:7a:d7:cc:97:5c:8c:18:
8f:cc:56:d7:a3:67:0b:af:12:5c:ec:c6:8f:01:b8:
c2:e7:aa:f1:e2:3f:d8:a0:cc:0a:90:b3:89:6f:35:
81:4a:57:31:d1:d8:4f:e9:f0:67:f3:b4:43:a6:2d:
73:77:b3:34:6e:37:9f:60:e1:3c:8e:22:c1:d2:34:
81:d8:d8:82:c4:9c:53:47:19:77:fc:1f:d0:72:3e:
84:3b:7d:de:1f:82:53:b8:dc:b1:90:13:10:36:a1:
96:f3:34:02:f9:18:2f:47:8f:77:1d:a8:a6:18:ef:
2d:6e:e1:f2:1c:29:0e:59:e4:b9:8c:48:69:ac:f3:
e6:2c:23:7d:dc:05:78:09:41:86:ab:f8:a6:a0:d2:
ed:74:eb:96:5c:a0:f1:34:cc:eb:8d:b9:85:3b:d3:
c5:91:fe:e0:24:e9:f3:ef:df:99:69:82:42:45:7d:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:57:1A:85:87:3F:52:45:12:AD:27:51:4A:86:07:35:15:F2:A5:0A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d232050-4c58-40e2-9036-331be5aa0f31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.91.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:75:d9:64:7f:1a:aa:41:cb:ca:b0:f7:e1:f7:16:ae:cb:da:
ce:9e:20:79:d4:30:79:7f:f7:84:ba:12:09:3a:b3:fc:c4:78:
77:fd:6d:28:f3:0c:27:22:be:60:a9:7f:3d:fb:35:83:24:be:
a2:06:ab:28:15:30:d4:a1:5b:19:41:12:d9:d1:f4:be:f5:25:
63:62:e2:4e:09:f3:0f:24:88:82:39:54:b2:92:86:a5:2e:63:
d9:f0:bb:56:96:3b:f3:d1:01:e1:a7:25:d1:35:1f:3f:66:75:
92:ca:5d:32:fc:be:83:ad:da:2c:d9:2c:db:af:66:ac:99:3a:
77:4b:2b:36:f1:f7:ab:92:f5:94:d6:81:77:43:81:41:18:90:
99:d5:d7:13:fe:63:60:04:6b:93:d4:a2:02:a2:91:20:23:ac:
25:a9:1e:29:e3:f6:8c:d9:dd:97:22:af:a9:2e:19:55:30:84:
7c:a4:2a:90:a4:45:04:60:d7:41:68:f8:f7:e1:2d:85:45:7c:
f9:bd:b2:9b:51:da:d8:61:9c:42:6d:78:e0:97:6d:d2:e1:8c:
9c:6a:aa:86:f2:3e:70:1b:9e:fb:46:bd:9b:7c:61:25:eb:1c:
c3:ea:7a:31:a0:6a:b2:08:9b:87:7e:3d:71:f4:12:27:57:3c:
98:5b:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:46 2025 by rpki-client