Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f935771-aa2d-4973-b2fd-8250dd375e16.roa
File: 3f935771-aa2d-4973-b2fd-8250dd375e16.roa (raw, json)
Hash identifier: Ayrk9Cd+sTCE//mwbdJ0ZwuO154mlT0s36gXxHr/RmM=
Subject key identifier: A4:DE:95:9D:DD:5D:F9:F8:67:EE:75:F0:25:CC:4D:A1:E0:25:4F:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 071B11E17307D19CCD3B1FE175D08F9748CD73A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f935771-aa2d-4973-b2fd-8250dd375e16.roa
Signing time: Sun 19 Oct 2025 01:20:11 +0000
ROA not before: Sun 19 Oct 2025 01:20:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 156.4.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1b:11:e1:73:07:d1:9c:cd:3b:1f:e1:75:d0:8f:97:48:cd:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:20:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b1dafc7ea77c1b3528a56dafa6efb08068526140662a0a12a40d43ad41c19a2d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:f7:9c:1c:0d:1b:3f:e6:b6:70:be:4a:89:
25:7e:9b:ee:7f:0a:6d:a8:d6:a8:52:d0:8e:49:16:
71:a7:d7:ee:e8:c8:ed:b3:53:c7:82:d9:7e:a2:54:
0d:f1:28:63:23:23:e4:80:20:b8:d9:66:ad:fc:56:
44:e4:3c:a4:eb:cc:5f:5d:dc:b4:e5:20:0b:83:2f:
55:95:4f:76:ad:39:6f:bb:8c:1f:92:a7:76:01:23:
94:d6:a3:1b:80:62:98:6e:9f:4d:1b:3d:40:05:94:
15:7c:01:5b:6b:4f:97:a7:56:40:69:ae:a0:d7:2a:
ae:36:cf:39:d6:54:ae:ce:4f:36:c1:65:3a:6c:b9:
8b:76:56:e1:aa:5d:07:ad:dd:8c:5d:72:f7:8b:b1:
ef:7a:2d:f7:cf:bc:18:ca:cd:a1:51:54:15:f5:b3:
c8:5b:7b:91:3e:9d:35:78:30:bb:06:81:65:7a:68:
01:80:dc:80:9a:a6:37:61:67:19:d4:12:77:cb:69:
da:40:aa:b6:e9:29:c5:d5:ca:d4:f1:03:16:8f:9a:
77:5a:f6:ef:56:37:dd:b1:7c:09:e7:ae:ad:6d:d3:
c0:a4:12:dc:5e:9d:82:f0:43:f2:b9:90:f3:41:e9:
be:ee:2a:37:80:11:7b:37:96:d4:f0:a2:9f:d7:fc:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:95:9D:DD:5D:F9:F8:67:EE:75:F0:25:CC:4D:A1:E0:25:4F:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f935771-aa2d-4973-b2fd-8250dd375e16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/15
Signature Algorithm: sha256WithRSAEncryption
66:5d:28:a0:e4:96:ca:da:1d:a2:96:2a:6e:77:97:7a:92:31:
52:46:4d:71:5a:04:07:f8:3a:fb:d3:52:58:a9:24:ca:65:28:
dc:81:00:28:14:50:e5:9d:f5:30:7f:59:9f:8f:70:bd:f0:e1:
d7:a3:94:73:8c:fd:74:16:c8:2d:8a:70:1c:d3:f5:d5:f6:28:
d0:85:ea:31:66:f8:ff:2b:17:45:c7:7c:4d:0e:e4:9c:42:e4:
d0:e9:9e:45:c4:69:7a:ab:38:b6:01:08:ad:53:8a:21:f2:ff:
f8:8e:c3:c0:c7:2c:20:bc:f1:96:49:8b:65:4d:1e:c1:b5:8a:
89:4a:98:8f:07:3b:e7:d3:90:ef:46:c1:04:4c:fc:ca:2f:b9:
b7:e8:cc:eb:0e:96:74:e6:6a:1d:e4:e8:0e:1b:96:1d:98:30:
4a:0c:d6:e5:3d:20:ae:27:07:1a:e5:3b:33:44:0b:4c:6e:d7:
58:ae:2b:45:d7:dc:c9:5a:47:22:e0:6b:1d:03:2c:96:2f:3a:
9c:14:d8:87:15:3a:5c:ee:b4:2d:12:19:fc:52:4c:5c:c8:11:
a7:74:00:24:49:85:b4:27:ec:84:17:d1:a8:d6:44:cc:3e:15:
b3:d9:56:70:24:2c:5a:9b:2d:38:93:a3:ab:72:6c:74:2f:2e:
ab:87:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:25 2025 by rpki-client