Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/357cc8cb-3922-4040-b959-cd8b8bdf549b.roa
File: 357cc8cb-3922-4040-b959-cd8b8bdf549b.roa (raw, json)
Hash identifier: ZcwPa9Q+JFKAl6GIs1XiB4lIjctqBXDl7j7hibT6wig=
Subject key identifier: F3:F6:3C:36:B6:C0:84:37:82:68:D1:9D:69:E9:6A:55:B3:40:6A:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D0910229A9766ED49D783B77F038284C4AF1C74
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/357cc8cb-3922-4040-b959-cd8b8bdf549b.roa
Signing time: Sat 18 Oct 2025 04:10:04 +0000
ROA not before: Sat 18 Oct 2025 04:10:04 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.21.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:09:10:22:9a:97:66:ed:49:d7:83:b7:7f:03:82:84:c4:af:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:10:04 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=1f74d96f5fb8bfdc7e5ef3de8a6d9f4b7efd96144b62e920728764742bbc8505, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:ce:1a:fd:52:11:94:ec:0f:0b:ce:11:a2:
ea:f2:98:95:14:61:8f:99:a4:37:de:0e:56:5e:77:
31:2c:d8:f0:0b:5d:95:e9:96:96:cb:1c:a4:fc:7e:
a3:7f:31:83:9f:61:c9:e6:50:88:73:37:9c:ed:5a:
57:b2:ed:73:ad:f9:b4:f7:34:f2:fe:4a:bc:04:62:
a6:7a:c1:8d:9c:d3:22:7e:92:ba:97:ef:10:5e:25:
bc:8f:6c:01:45:43:a6:41:51:ec:59:e2:5a:02:7b:
91:a9:46:ff:98:f2:cc:77:ee:3a:ad:0f:29:51:7c:
d2:e5:16:14:3a:f4:d3:3f:0e:6f:b0:aa:cd:bc:39:
9b:08:77:c5:84:54:68:bd:27:d2:7e:42:ba:8b:4c:
12:f7:d9:fa:c2:42:d7:82:4d:18:27:1c:b4:52:46:
95:6a:52:92:59:ec:6d:06:68:6c:2a:22:8f:a7:85:
ea:67:da:79:e1:43:ec:17:8b:d2:5a:da:ae:e4:37:
f9:9e:5a:10:6a:67:22:6e:79:08:42:14:a8:28:32:
23:50:e6:83:d8:61:7b:b5:f6:ed:74:4d:2a:4b:fe:
38:38:b3:2f:b9:cb:75:9f:6c:7a:1a:a7:d9:d8:fe:
04:49:66:49:08:a6:68:25:c8:fc:36:14:59:98:bd:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:3C:36:B6:C0:84:37:82:68:D1:9D:69:E9:6A:55:B3:40:6A:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/357cc8cb-3922-4040-b959-cd8b8bdf549b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.21.32.0/21
Signature Algorithm: sha256WithRSAEncryption
84:58:f0:ba:75:1c:3e:f3:ad:c8:6e:78:40:de:2c:f2:af:42:
02:45:2c:4b:ad:c3:e9:c8:e2:2f:c6:43:72:2e:68:f9:79:9a:
2a:df:71:e0:87:63:c1:c1:58:0a:a9:21:44:ef:10:d6:6b:10:
55:b4:b1:63:27:67:a4:ab:b1:ab:d7:b3:1a:7d:bb:7c:f3:e5:
72:f2:6f:85:ee:7b:4e:f8:89:f8:11:00:30:2f:80:c0:67:d5:
8c:6e:88:80:b3:1b:eb:85:16:b5:db:93:4e:de:cb:04:30:56:
e2:ce:15:68:3f:c5:63:6b:d1:09:fd:c5:34:44:22:cd:41:c5:
6d:15:bb:a6:ed:b4:75:64:55:6d:2f:85:01:7c:b8:b3:ec:7a:
a8:2d:53:93:f5:d9:4e:da:24:0d:12:aa:3d:57:22:44:ff:3e:
bb:53:91:db:fc:dc:29:20:a6:4e:80:90:09:05:93:bf:9e:cd:
4e:8d:98:61:04:d4:86:cb:24:60:84:e4:f8:84:d8:9a:9a:5b:
3f:53:e9:45:e7:aa:a3:cf:f3:d3:d5:e8:6c:ca:1d:7f:79:d0:
15:48:9a:95:9d:a6:3f:77:12:53:fd:9e:69:52:e3:a4:e2:c0:
3c:f8:dd:a4:57:88:9f:b0:3a:b7:4d:e0:25:15:d5:63:c2:da:
ce:8f:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:55 2025 by rpki-client