Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa
File: 732fe3d7-6476-4eae-a584-0a17e5012897.roa (raw, json)
Hash identifier: lOsERTeGUhe9SDuRCyYr4zOfN0fdq0ikHYvjTrgO1uo=
Subject key identifier: 4E:89:E6:E4:15:F0:6F:E9:C3:51:51:2D:22:54:C0:95:96:07:7F:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DBB891C7E6DB12B6005B3849122316BE662EDEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa
Signing time: Fri 03 Oct 2025 00:41:44 +0000
ROA not before: Fri 03 Oct 2025 00:41:44 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bb:89:1c:7e:6d:b1:2b:60:05:b3:84:91:22:31:6b:e6:62:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:41:44 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=e40a2344ec1aa284adb9378c304fc8712ab3427e860da3f1af6cc9659e1a4076, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:74:02:70:0f:89:7a:a2:31:a0:9a:51:28:
a6:d1:18:6a:d3:02:c3:12:74:af:46:9a:61:af:53:
fc:89:07:a1:06:09:04:9e:f5:72:5a:72:43:96:85:
50:e8:01:1e:5b:f9:6c:d4:ae:a1:39:bc:c1:8e:97:
56:1c:1c:af:9b:dc:ad:58:67:76:25:d5:6e:4d:20:
4f:ee:ef:f7:bf:c4:e9:0d:8a:12:54:53:6f:de:64:
ab:54:e0:76:5e:31:ee:66:a5:02:b0:3e:4b:27:8c:
1b:4d:86:d4:d5:1d:9f:de:af:c5:b1:84:db:68:87:
e8:bc:4f:fc:fa:e2:32:83:79:05:6d:4f:81:d0:40:
b5:38:0c:89:de:b6:91:04:51:88:e8:b4:e8:b2:5b:
37:dc:b1:95:d6:82:3d:06:3a:c7:7f:fc:00:98:15:
53:1c:90:b9:a3:e5:17:60:0b:ca:2c:2c:1f:4b:f2:
ab:2f:4d:73:ae:a5:9c:00:92:2e:b6:fc:a4:af:00:
f9:80:e3:95:dd:9a:64:7a:bf:ef:5c:53:07:48:f1:
5c:cb:90:74:83:02:2e:4b:6b:78:e3:40:a2:d7:f0:
6c:df:b6:9f:69:65:11:77:8f:98:31:e1:98:d1:ee:
42:01:fb:85:90:f4:ca:85:74:14:b3:48:83:b5:54:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:E6:E4:15:F0:6F:E9:C3:51:51:2D:22:54:C0:95:96:07:7F:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:83:9c:35:b9:61:64:fc:37:b1:5f:a4:47:d8:a8:27:c9:f4:
32:f6:30:3f:88:6e:8e:64:b6:42:b8:cf:32:5a:0c:e1:99:39:
dc:9b:18:00:4e:7e:e8:bd:77:a6:7b:fa:5a:e5:76:af:b9:17:
fa:56:77:f1:77:b6:49:9c:bc:ea:8b:8a:05:a2:96:1d:a2:3e:
66:77:92:55:0d:00:f7:41:2f:22:28:6f:e9:d7:7b:e4:cc:53:
52:66:eb:8a:ba:19:dc:1a:1f:13:9a:06:5a:34:ef:3a:49:2e:
7f:e4:f0:b2:a5:2e:41:ee:0c:0f:ee:58:ca:22:5d:91:ab:ac:
41:4f:b7:fc:d9:23:7f:3e:1d:28:cc:92:3c:ba:ae:5c:fd:6d:
ef:01:09:6d:f2:9a:2d:ca:f4:a5:b3:c8:24:2b:64:b5:39:cf:
90:92:44:50:ae:91:0f:9e:a5:a8:ed:63:db:93:90:98:c1:17:
c8:e2:c7:2d:7a:bc:ab:0b:29:a0:6d:05:20:04:cc:d9:fd:b9:
0a:00:9f:68:7a:b2:ba:21:00:51:af:28:fe:be:5c:c0:78:a1:
41:ca:6a:fb:5d:cb:3c:0c:0c:ac:fa:a8:87:69:8c:13:13:dd:
51:af:ca:18:aa:1b:1f:0f:7c:62:31:09:35:6a:9e:5e:e6:c5:
9b:be:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:05 2025 by rpki-client