Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa
File: 7f5b1387-7bbb-4343-91e2-7123055c203c.roa (raw, json)
Hash identifier: QTfgvJmkR8VqILdHSNwic73s0pqNpYsEQsXChxZvUo8=
Subject key identifier: 50:1B:24:15:4D:D7:82:3F:E6:0E:C3:BA:B7:C9:2F:69:16:6A:FA:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 784AED709DF61CD2ACA4503FF8CB740469137748
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa
Signing time: Fri 17 Oct 2025 00:51:12 +0000
ROA not before: Fri 17 Oct 2025 00:51:12 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 157.175.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4a:ed:70:9d:f6:1c:d2:ac:a4:50:3f:f8:cb:74:04:69:13:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:51:12 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=6d77d1f1b3e3e6bb5fbf96b252e550825da92353a677388e8928a9bbfc5088f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:5e:ce:a4:4e:44:07:2b:04:39:31:ff:02:
39:1f:51:07:d5:84:20:09:3d:d3:44:43:a7:32:5f:
d4:95:b9:4f:4f:58:b1:8d:9b:74:46:bc:81:38:91:
66:5c:65:75:e7:62:38:c6:b3:b9:37:d1:65:80:78:
25:98:2e:34:aa:2a:28:9a:3a:15:3d:85:67:73:51:
d5:59:b6:48:fd:89:0b:b2:32:07:c6:42:a6:89:4e:
32:37:d2:68:d1:25:32:ce:70:31:ca:91:01:21:49:
08:71:8b:dc:8c:26:86:94:d9:de:f6:e5:3b:73:49:
88:c3:01:a2:66:1a:0d:72:26:ec:b6:e9:54:15:d1:
d8:8e:f9:d4:61:78:b2:a1:15:bd:d6:a5:80:ca:d1:
b3:be:c8:b5:1b:01:04:3e:00:51:42:34:87:70:42:
53:18:5c:0a:49:92:c6:67:1f:8b:bf:16:53:c6:7a:
c7:33:34:57:32:eb:ba:f2:bf:45:02:26:d6:98:a1:
55:cd:58:63:fd:23:8f:4e:11:48:a7:12:77:54:4a:
40:40:a5:f1:31:8c:aa:2b:77:f8:18:00:70:53:3f:
bd:b1:11:4c:74:7a:81:66:e8:eb:da:cb:00:8b:8e:
38:27:30:ab:08:f0:07:98:89:7f:f8:09:c3:59:57:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:24:15:4D:D7:82:3F:E6:0E:C3:BA:B7:C9:2F:69:16:6A:FA:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.175.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:67:de:92:66:51:65:bb:5d:b9:c6:b8:aa:2b:85:f8:2e:a5:
aa:11:5e:d3:68:3c:ca:4b:7f:39:9d:10:7b:70:08:db:03:1f:
e1:e5:fe:05:81:46:f9:aa:2d:17:c1:64:5e:64:ac:dd:c8:ed:
da:78:42:0c:af:fc:d0:32:57:d4:ee:2e:42:49:3c:e4:09:01:
9e:3d:60:9c:26:2b:48:25:37:fa:3d:aa:e0:f9:3e:68:07:78:
c3:8e:1a:5f:18:44:db:ee:88:ef:af:2a:ea:3c:02:2e:34:4a:
fa:22:d2:69:e0:f3:48:bb:b4:df:83:01:0a:58:7d:5a:94:2b:
77:05:08:f7:2d:c5:7a:4a:ac:cc:54:20:aa:25:73:ad:16:60:
62:35:87:12:9e:8b:9a:98:2c:e8:2f:2f:68:50:55:11:85:6f:
91:2c:07:92:14:44:c4:30:7f:c1:b8:35:e8:7d:9d:fd:7f:e9:
e1:e2:17:22:9a:a0:d1:09:13:36:28:92:36:2b:ba:f0:2d:da:
3e:49:ca:0a:e4:0c:17:c6:6e:27:72:f7:13:cd:7b:b3:20:ff:
dd:0a:53:11:6f:6c:63:86:52:b4:f5:bc:67:53:1a:3c:f9:66:
4a:87:5c:52:19:78:5d:fc:8f:de:32:97:b2:ce:23:b0:36:fa:
7a:fa:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:55 2025 by rpki-client