Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50fdc9e9-13a2-4502-bdca-29722b139c97.roa
File: 50fdc9e9-13a2-4502-bdca-29722b139c97.roa (raw, json)
Hash identifier: q5JLaVyR/GUnqxZdQ0xAfeVyoYj1vPRNE/DUj04BFm8=
Subject key identifier: 92:2E:1A:83:9F:17:09:05:6E:28:32:32:BC:C8:18:69:5D:F8:35:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 278C20880BE5A82A64B31038EDEC33FEFC358CF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50fdc9e9-13a2-4502-bdca-29722b139c97.roa
Signing time: Sat 11 Oct 2025 00:38:33 +0000
ROA not before: Sat 11 Oct 2025 00:38:33 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.198.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8c:20:88:0b:e5:a8:2a:64:b3:10:38:ed:ec:33:fe:fc:35:8c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:38:33 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=50f685810971ec9be1912f23c5c2a3a06f022129bcd13384f03f1522f0fe5b6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:e1:22:12:f3:24:42:78:a7:0d:c2:96:f3:
2f:18:cd:10:15:fa:64:cf:f7:2b:c3:39:6d:7c:cc:
fd:72:23:6d:c4:2c:e6:46:28:87:9a:3b:d2:f0:60:
27:83:6c:bc:89:7b:4b:71:7c:50:90:7d:1f:2a:fe:
88:28:b7:56:7d:01:9c:a6:ec:71:21:e3:21:f8:e3:
45:9f:e9:0d:93:85:24:bf:c6:32:cf:fe:0e:9f:1d:
06:d1:a9:44:1f:ed:a8:88:72:47:19:7a:7f:12:51:
45:09:7c:2e:64:89:e2:3c:a4:fa:b9:c9:fe:5d:7f:
7e:4e:93:10:52:2d:8c:b5:89:f5:5a:f8:1b:16:61:
58:cb:d2:a4:f4:c9:d8:71:25:6d:ce:71:91:83:f5:
49:b5:8c:0e:e4:76:6c:a6:75:b3:77:7c:41:bc:25:
c6:12:b2:c6:08:12:5b:e3:c1:5e:1e:2c:4b:fa:e2:
ac:88:8b:3b:e1:18:e7:4f:87:20:98:37:26:c0:e5:
91:bb:ee:84:91:f2:54:d9:cc:88:45:fe:58:fd:93:
72:4d:8c:eb:ad:94:25:bc:a0:31:84:c6:ee:e9:23:
fe:3e:bc:36:4e:fc:1b:3b:77:af:21:cb:d0:72:6f:
d3:ec:08:9f:a5:77:79:35:eb:5b:39:1d:3e:d9:36:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:1A:83:9F:17:09:05:6E:28:32:32:BC:C8:18:69:5D:F8:35:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50fdc9e9-13a2-4502-bdca-29722b139c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.198.86.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f5:88:b3:6b:da:3d:b6:7a:e0:60:d8:7c:45:e4:f2:aa:de:
4a:8b:af:69:5a:57:d4:da:fb:21:6e:d5:c5:9c:9e:16:6c:fd:
a9:5a:c1:e0:08:fe:84:05:82:40:bf:79:41:7b:73:59:47:e3:
87:b4:94:31:4c:13:b7:f5:38:10:ad:55:0c:f4:c4:bb:52:7a:
ed:3a:9c:43:4c:2c:1d:c2:da:74:b3:3c:d6:7e:5e:a5:fd:a6:
5e:00:81:d9:53:63:cf:0b:f4:8f:74:17:78:5a:ee:ed:e1:58:
ce:4b:45:93:c7:63:b6:c2:ab:2f:6f:62:6a:8d:aa:c9:55:c5:
86:05:18:91:9e:39:de:a9:ac:50:90:5a:19:fe:be:79:31:70:
fa:4c:d1:dc:7a:a5:93:ba:6f:6f:ff:f7:99:f7:ac:12:8c:ab:
ab:90:b6:69:b4:33:22:72:3d:e7:f8:3d:c4:a2:42:29:93:82:
6b:e7:fe:e4:58:b7:6d:b3:dd:88:d4:22:a6:37:ee:01:10:59:
5c:3c:38:45:52:c0:1c:cd:27:e1:6e:30:07:d9:17:69:be:a2:
a0:83:04:44:e7:af:1a:86:ad:88:24:e4:7c:82:24:7a:63:88:
9e:d9:95:09:2c:fb:73:64:fd:75:53:d9:ef:d7:ea:6c:e7:34:
2d:6b:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:18 2025 by rpki-client