Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa
File: 4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa (raw, json)
Hash identifier: YV7BjxUSs1qgW6ufgbcp0AFLk7HLvv5qIuqntlzBDjk=
Subject key identifier: 89:47:89:25:D1:F1:BC:45:B2:09:00:B3:4C:0B:30:67:91:C1:8A:FD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B0F86445E1A5D5B8FE48CD0853259D811B9E0C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa
Signing time: Mon 13 Oct 2025 15:52:36 +0000
ROA not before: Mon 13 Oct 2025 15:52:36 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0f:86:44:5e:1a:5d:5b:8f:e4:8c:d0:85:32:59:d8:11:b9:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 13 15:52:36 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=334ca5187cfd0af1b1b117e529fb2d13a213c5ea28ec785fdbcfc1071df9552a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:70:40:ef:de:34:e5:43:44:72:72:75:92:
f0:76:6f:e5:f6:d6:91:24:68:f8:7e:2a:d8:78:94:
21:ff:11:b8:8e:fc:6e:f5:52:9b:b3:3b:6a:01:5c:
43:c4:91:b4:3c:b5:c6:f5:20:23:40:87:6e:51:7c:
b1:68:ee:49:e4:a9:7b:af:37:68:c3:a4:70:76:86:
f2:82:85:36:13:53:d3:43:f5:66:4d:16:42:3b:3c:
26:21:84:5f:10:54:2e:f3:7f:f1:51:99:1a:e1:70:
14:2d:df:9a:d3:b5:50:ba:da:3e:65:14:43:da:fe:
52:f5:cc:c2:68:db:dd:93:c3:8e:a9:90:03:7e:30:
85:86:ca:2a:91:6a:ea:bd:ef:44:5a:4f:63:19:39:
3a:8d:b3:71:0a:73:12:d5:d7:bc:53:d6:99:b7:66:
7c:60:27:16:df:50:94:69:23:06:f6:83:a7:b3:db:
96:e6:9a:c5:36:84:ca:48:b7:74:cc:1a:5f:d0:29:
5a:ad:df:ad:91:03:42:31:f9:09:7f:6a:b1:2e:c0:
db:52:45:98:2d:9b:cc:a2:5b:65:ca:76:67:e9:cc:
ca:ef:af:f1:95:37:04:9a:86:57:39:43:c9:61:1b:
84:d0:38:f0:a4:fb:0b:ee:f4:60:9f:05:20:aa:01:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:89:25:D1:F1:BC:45:B2:09:00:B3:4C:0B:30:67:91:C1:8A:FD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4aac8b37-abdd-4781-9bf1-3e0c87eea626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2b:54:61:51:a0:66:07:16:69:ac:9b:31:e8:a1:e2:11:24:
ff:d1:91:b4:95:94:db:99:65:8d:38:2c:a7:65:32:24:cd:3d:
e4:7c:75:7d:64:23:1f:f6:2c:82:c3:03:5e:39:a5:c7:34:8d:
51:56:aa:30:99:6d:73:ea:c1:99:bb:46:c7:f8:b8:22:09:5a:
f0:da:f1:a7:73:fc:6b:b3:79:d9:70:1e:b9:54:39:55:58:81:
f8:c6:56:dc:24:fa:68:83:aa:30:76:57:21:64:1d:94:17:0f:
20:09:76:d2:0f:c7:47:5d:c3:f0:62:e4:dc:2b:30:1b:56:fa:
1a:1d:63:a5:fa:ce:0b:ac:f4:87:84:cc:bc:2b:4e:cf:b6:c5:
83:8c:1f:2e:60:2c:e1:3d:17:f4:67:1d:21:1c:90:38:1e:ce:
b5:b2:45:f5:b7:3f:7e:36:c1:f5:b7:fc:fa:45:c8:a7:42:21:
bf:26:c5:22:03:5f:83:12:01:b4:ee:45:6a:f0:97:c6:f0:ff:
49:7e:b3:d8:e1:1e:e3:6c:f7:6f:ea:24:e7:33:e0:cb:6b:89:
86:f4:15:5a:97:47:b9:4b:eb:cc:56:08:f7:0c:51:3e:a2:ba:
77:e6:e9:b7:b9:b0:f0:7e:af:1d:15:b3:29:2b:12:64:9b:f4:
8b:bb:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:25:28 2025 by rpki-client