Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
File: 7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa (raw, json)
Hash identifier: lXyAB+yBBz1IZQPp03+YT0vrIgqQ0j5uA/yZd503BaY=
Subject key identifier: EC:FE:3A:C5:3B:9F:C9:19:83:09:7B:AD:78:20:6C:D3:73:FF:75:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B8C6DFE1A6E557C6646533428B4200EE36D4175
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
Signing time: Wed 01 Oct 2025 00:11:21 +0000
ROA not before: Wed 01 Oct 2025 00:11:21 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.92.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8c:6d:fe:1a:6e:55:7c:66:46:53:34:28:b4:20:0e:e3:6d:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:11:21 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=a8cbf989a483b2dce5feb232219d32d06a5feff93b8abcc3ee73f8f6797b3dc5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:7b:68:64:9e:47:b5:23:23:d2:27:85:16:
76:7e:0e:92:36:f0:0b:d9:d3:1a:3b:52:f9:db:8f:
75:bc:3c:22:93:94:ae:83:f5:50:d4:80:69:21:b8:
5f:fb:71:a8:f7:e1:01:08:ec:de:db:a9:bb:f5:79:
ca:b6:b0:1d:9f:e3:6b:a3:60:95:d9:98:39:21:95:
88:15:05:e3:2a:3c:87:f0:58:86:bd:62:16:33:37:
81:ff:77:18:14:29:eb:fd:3a:86:49:65:0a:65:57:
f8:7d:e2:b2:ae:18:50:2b:a1:2f:a4:4f:9e:0a:8f:
92:dd:e4:2c:25:3a:8e:43:b5:f9:af:74:63:0e:42:
c8:f8:a9:30:8a:5c:fc:86:52:da:3f:fb:c8:cc:ac:
56:ef:97:85:1a:f5:1e:47:9e:c9:36:06:c2:94:81:
a0:39:d6:15:a5:c5:96:85:3f:9e:ed:b3:5b:a5:63:
6d:52:ca:03:05:3c:3c:ae:52:91:db:a6:b1:b3:32:
6c:ce:66:7b:77:fc:ec:ac:5d:91:81:f5:48:83:48:
10:f5:a1:55:cf:c2:81:3a:bb:51:b4:13:97:80:81:
f7:c2:57:e5:00:c7:32:62:96:a9:a7:68:b2:f8:ff:
ee:68:c5:60:2d:e0:03:10:88:c2:95:ca:02:56:1f:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:3A:C5:3B:9F:C9:19:83:09:7B:AD:78:20:6C:D3:73:FF:75:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.6.0/24
Signature Algorithm: sha256WithRSAEncryption
08:72:49:3f:c9:e8:12:f4:96:ad:8b:8f:38:30:d4:18:10:9a:
e8:62:a9:c2:7f:2a:bd:36:96:5f:2e:c3:25:27:13:3e:14:04:
48:ef:c3:a6:41:1a:4e:58:ae:08:d8:5c:ad:39:72:d2:f8:fc:
d9:4b:08:de:49:16:af:b2:72:76:16:04:01:b6:cf:bd:49:3a:
bb:69:c4:05:ed:c6:a5:06:f6:8b:6f:63:73:a0:a5:be:f1:90:
92:95:2c:26:91:2b:e5:f8:03:4a:ca:af:e4:b2:36:2a:81:87:
f2:bf:62:6c:cc:70:1b:53:d5:8e:fe:2a:5c:17:30:b8:0a:12:
7a:e6:df:2f:22:d2:8c:8a:97:b5:4f:3d:3e:86:e7:22:47:14:
e8:53:d8:8e:7d:66:6f:a0:ba:0b:52:f4:07:58:7e:09:a5:55:
43:ba:8f:d3:49:97:1d:a6:86:5d:4e:f7:62:2d:25:dd:5a:0d:
ba:0e:b7:a0:3f:52:50:00:5f:8a:c1:d3:1d:5e:e3:40:bb:21:
2d:bd:2d:85:11:85:c2:ca:58:3b:53:7a:7c:89:e5:af:f9:08:
c2:06:b6:ef:25:ba:ad:2d:c3:c3:19:2a:37:de:f0:e2:e0:5b:
ce:26:d7:a1:7f:15:f4:2a:50:e7:5e:cd:b3:0c:ab:19:ab:4c:
c5:db:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:40 2025 by rpki-client