Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa
File: 7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa (raw, json)
Hash identifier: uCrJnLe7K/fHbn4bzniliI3G95RiHJOK1KH/R1BlNxI=
Subject key identifier: B9:C7:36:DC:D1:18:52:62:94:99:8E:1B:5E:6D:AA:B3:C8:BA:92:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E99EDA7605179D93E004A8E81D053A1F7FC1512
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa
Signing time: Fri 03 Oct 2025 00:41:43 +0000
ROA not before: Fri 03 Oct 2025 00:41:43 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:99:ed:a7:60:51:79:d9:3e:00:4a:8e:81:d0:53:a1:f7:fc:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:41:43 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=a34560b535a064451becd394313e461d504bc4a8d70ccdedf3e38ce3702e6008, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:f5:1d:58:bf:88:9a:7c:9b:d1:76:b9:3b:
5b:ae:0d:1d:f2:de:dc:09:e1:4a:af:4d:cc:fa:7e:
cd:b7:1d:88:a4:fc:1f:93:1f:b5:e9:9d:2e:1b:6e:
67:e5:33:6c:57:f4:5b:38:1f:58:b1:f3:cb:6c:6e:
30:fd:8b:92:fe:bc:9e:56:b1:98:ef:38:9e:28:12:
86:48:e0:9b:fb:91:0e:47:d3:fb:47:cd:14:56:80:
5f:65:6a:8a:50:ad:70:ce:76:44:ae:3d:ef:fb:11:
bf:af:ab:4d:e0:e8:5a:1e:92:9a:52:47:14:b0:51:
69:8e:69:f1:6c:c9:b7:5a:65:b7:fc:5b:4e:14:d1:
80:82:7e:3b:88:b8:b4:66:18:9b:23:93:96:2e:d9:
2b:a8:f5:6a:cc:9e:c9:b0:2a:e6:6d:a9:a4:d4:e3:
cc:4d:e3:b5:ef:f3:b5:8c:a2:cc:75:21:5a:14:1a:
b3:fa:39:57:f2:e1:89:4d:b5:76:61:5a:cd:91:04:
b0:b9:bf:ea:7c:6a:05:16:8b:ba:09:57:d4:cf:13:
4f:f2:44:5b:7a:d7:0d:21:57:28:5d:60:20:95:79:
b9:40:8a:44:87:2f:3d:f9:f5:b2:e4:b9:bf:00:89:
55:86:83:20:6f:26:a1:aa:fa:50:bc:49:46:10:e5:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C7:36:DC:D1:18:52:62:94:99:8E:1B:5E:6D:AA:B3:C8:BA:92:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.92.0/23
Signature Algorithm: sha256WithRSAEncryption
34:4c:f9:04:42:e9:93:de:2f:20:42:4b:71:4d:a0:d2:ba:08:
b3:d9:bc:b8:22:92:74:40:d2:e1:b1:34:c2:16:e9:58:00:fd:
c9:c8:79:db:32:8a:7d:2a:49:bf:31:50:cb:c4:ad:0f:f5:f3:
5f:3e:51:7e:40:4b:ed:16:d4:17:a0:64:0a:a3:54:be:53:08:
ec:b6:d5:35:ba:bf:0c:4a:eb:f1:2f:5c:b7:a8:00:4b:6c:15:
84:bd:d0:e4:33:fb:c1:14:1e:d0:e7:ec:75:a1:91:73:84:29:
5b:ee:fd:b9:89:38:f5:cd:ea:53:e5:72:c9:7c:dc:1a:d8:4a:
98:0e:e2:6d:23:1b:05:aa:ec:23:11:52:32:92:08:24:85:35:
cb:99:48:d0:05:38:ea:0c:41:59:e1:d8:f9:2c:e2:70:06:fc:
8d:09:e0:4b:75:19:b7:f8:61:85:fd:c3:56:b2:d1:b2:9a:cf:
61:83:02:0e:85:de:af:cf:b9:65:69:58:e3:eb:79:07:f1:a2:
81:05:8b:dc:ce:c1:3d:2f:df:36:71:9e:67:88:b3:d1:6f:fb:
85:d2:14:a0:ab:15:2b:54:56:18:dc:48:bf:fc:8c:4f:07:a6:
4d:cc:24:67:a7:94:43:17:f9:0b:18:22:ef:ff:4a:c2:aa:4c:
ba:e0:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:07 2025 by rpki-client