Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48571c38-3853-4d4a-bec6-9a9f4c8f4e18.roa
File: 48571c38-3853-4d4a-bec6-9a9f4c8f4e18.roa (raw, json)
Hash identifier: ccz8PPWEuivuSFEFt7Nss1+JWPAe6ONcUwf7Awh2V6Q=
Subject key identifier: 71:76:C6:05:63:AE:C5:E9:33:12:18:C1:8B:17:AF:C2:9E:9D:73:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EF7DE032DF20A2CA0972E1BC1FFBF5289D83EFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48571c38-3853-4d4a-bec6-9a9f4c8f4e18.roa
Signing time: Sat 18 Oct 2025 02:21:26 +0000
ROA not before: Sat 18 Oct 2025 02:21:26 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.22.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f7:de:03:2d:f2:0a:2c:a0:97:2e:1b:c1:ff:bf:52:89:d8:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:21:26 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=cb539d6be6b46ae3c7129ecea3d523aa2044dd9c1337b488334c40a78e72abb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:e2:a2:de:9c:b4:56:b8:74:74:d3:49:56:
1b:16:44:58:48:0e:92:6f:66:b0:dc:2e:8c:e0:3f:
e8:f6:73:7a:62:a2:42:d3:50:88:3f:5a:30:2e:fe:
c2:69:90:56:be:fc:50:77:ca:77:94:36:1f:97:49:
02:51:7c:3b:bd:e5:b5:0d:78:c4:74:67:0c:b8:e7:
a9:c2:d8:0d:87:c1:e1:ac:07:25:6d:75:43:27:01:
c1:ed:08:29:e8:ed:b3:3c:9e:fd:51:d8:38:13:0a:
4d:13:75:2f:8e:f9:8a:67:b8:85:5e:81:5f:45:1b:
89:3b:d4:83:24:41:6b:40:37:81:a2:cf:28:c6:cf:
0e:12:b5:ab:e0:80:be:e7:59:1f:7d:6f:27:5d:70:
72:15:e0:94:8c:1a:18:b1:35:fc:14:0f:d6:6c:66:
b2:41:02:82:5c:42:74:a3:e0:70:e4:23:88:37:6a:
69:f4:92:88:42:e1:be:cc:ed:56:13:65:5f:78:c3:
69:73:11:3a:52:04:87:a3:a9:ad:21:69:29:03:f5:
ad:34:e0:a3:ff:a7:0e:d7:7b:ad:32:86:c7:7e:51:
bf:99:2e:7b:47:5b:ff:9d:88:34:5d:fb:6a:86:eb:
eb:67:3a:0d:34:54:f9:24:c7:0e:ad:5b:09:a9:f4:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:76:C6:05:63:AE:C5:E9:33:12:18:C1:8B:17:AF:C2:9E:9D:73:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48571c38-3853-4d4a-bec6-9a9f4c8f4e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1a:24:8d:88:d4:84:5b:71:ae:0b:3a:38:c6:f0:3a:7e:de:c1:
f6:a5:5a:8b:d7:7e:f8:48:f1:52:1c:1b:4d:14:9c:55:46:11:
a7:3e:19:46:41:b2:1e:d3:b7:eb:b1:17:e9:ed:9b:b6:07:93:
58:64:04:82:2b:b0:c2:30:c6:98:e0:80:fb:90:0a:92:8a:d4:
55:46:2e:09:7d:f2:06:84:6a:5b:93:3c:82:d0:06:a6:99:32:
df:ce:93:c1:3f:76:f0:97:1e:61:69:40:7e:09:bd:11:71:6e:
87:81:ed:69:77:91:49:04:77:6d:91:34:16:ac:1b:20:c8:d8:
36:08:44:ca:c5:b7:60:5d:ca:45:7d:50:bd:60:2d:73:72:0d:
dd:dd:79:70:93:0a:0a:a8:01:0c:42:13:95:09:bc:7a:92:44:
8c:a8:c3:4e:f1:d7:b7:c0:8a:81:53:8a:54:09:be:ef:b9:f2:
0b:0d:f3:e0:cf:f6:b7:de:f6:22:39:cf:9f:7b:a8:5d:15:1c:
f8:ca:81:0f:94:66:97:d1:fd:db:33:47:bf:fb:da:f1:56:3d:
fe:42:17:27:52:77:23:64:10:be:78:00:05:2b:77:8e:95:d9:
3a:de:01:ef:7a:bc:bc:32:ac:a1:22:14:47:82:0f:26:d0:ed:
bc:d6:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:33 2025 by rpki-client