Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69260764-a69d-4cd9-bd2c-c9458e9a194b.roa
File: 69260764-a69d-4cd9-bd2c-c9458e9a194b.roa (raw, json)
Hash identifier: BSq3oelkA2t88lRS8WOrvOyT14LqRF17FrZCblc0WbQ=
Subject key identifier: 7F:9B:27:DA:06:43:E4:4B:D8:98:33:C4:22:A6:DA:F7:FA:FE:EC:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 539A5A9ACA4B3886FA666D9097296792247BD939
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69260764-a69d-4cd9-bd2c-c9458e9a194b.roa
Signing time: Mon 13 Oct 2025 15:51:14 +0000
ROA not before: Mon 13 Oct 2025 15:51:14 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9a:5a:9a:ca:4b:38:86:fa:66:6d:90:97:29:67:92:24:7b:d9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 13 15:51:14 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=14678f7df0edc1c3e2015632b1a1b591295e4d679c70ef0a1864017c62ee944d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:01:ca:7a:e9:d6:84:fe:ea:61:a6:b8:25:
2b:51:5f:fd:3e:51:b7:f2:5b:b5:7b:80:91:c9:48:
49:da:72:e6:f2:3e:c1:53:71:e3:39:61:b6:ca:0f:
73:54:b5:48:48:ae:48:64:3f:f4:7c:92:d2:19:38:
ef:52:0b:89:41:1e:7b:39:9f:95:8d:e4:3f:d0:e3:
c7:1b:3c:84:67:5e:bb:08:1a:bd:7e:7a:0d:42:ea:
77:4b:cd:57:21:c5:6c:5f:65:1c:b6:df:ac:27:6a:
5e:d1:3d:d3:ed:8b:a9:00:84:c0:ad:73:ec:5e:91:
15:a9:0c:36:37:53:c4:ad:d0:e3:ec:17:7c:71:a1:
82:d9:0d:99:99:77:89:35:89:68:55:4f:37:12:21:
7e:5a:a0:3b:27:e7:cc:01:1d:84:9f:03:ea:50:c5:
d5:0f:7a:c9:0b:44:2d:40:8f:c0:bd:2a:d5:b2:18:
98:74:60:74:2e:df:f5:dc:7f:3c:bd:03:75:b7:db:
4e:23:36:7f:27:5f:0e:7b:e9:36:59:28:b3:29:3e:
45:88:1e:37:ca:20:3b:b2:9b:c5:14:e5:9b:7e:4c:
0c:95:8c:ca:6b:bd:53:97:65:2c:d7:3c:b8:11:d1:
0c:f7:12:01:9b:eb:b9:39:ec:88:39:30:5d:7d:9e:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9B:27:DA:06:43:E4:4B:D8:98:33:C4:22:A6:DA:F7:FA:FE:EC:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69260764-a69d-4cd9-bd2c-c9458e9a194b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.16.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8a:80:7b:74:7c:05:8d:77:0b:6b:8d:3a:bd:40:f4:94:8b:
fd:44:1f:e2:24:1c:28:a5:91:b5:de:5e:5f:0a:39:cf:aa:89:
53:53:e9:4a:f6:32:78:9d:9c:a6:83:0a:45:4b:7e:56:61:c0:
d4:43:a0:e5:69:6f:7c:1b:5d:b6:60:e6:bf:90:95:17:0d:b8:
24:28:e0:58:86:ff:30:1b:a3:3f:4c:d2:92:60:e6:13:ae:0d:
ec:20:c4:ea:78:c3:dc:d1:ba:9c:d0:81:90:5f:68:e7:01:3e:
40:8b:95:ef:07:9e:ac:1d:c9:b8:3f:4e:81:1f:66:77:a5:88:
20:a7:cd:0f:8c:af:4d:92:1f:a2:9c:4b:99:ea:14:ff:d1:4d:
fc:d3:90:1e:04:86:ac:d0:2b:7f:1a:78:74:e8:16:4c:24:8d:
41:9a:d1:27:35:37:71:5b:21:7a:79:f0:b0:3a:83:7c:3b:d5:
5b:2c:4c:64:51:ee:0d:7d:43:09:fa:13:0e:e3:3e:d6:10:5e:
fb:d8:61:79:0e:c8:97:11:c5:06:f2:af:81:11:65:f2:f1:93:
80:bf:43:b7:f2:63:23:9b:79:7c:a3:b1:32:3b:74:2c:9d:b5:
89:c0:81:e4:6d:9f:4e:c5:26:36:38:77:22:0b:d0:99:21:56:
38:f9:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:24 2025 by rpki-client