Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92f15bca-51be-4291-9efa-b2392d67d840.roa
File: 92f15bca-51be-4291-9efa-b2392d67d840.roa (raw, json)
Hash identifier: krjTgFXtFgePl6TeTt1TQ9DhsaLyiX0EQwroxURyM+s=
Subject key identifier: 4B:C6:1B:AD:9A:1C:98:EB:2D:B9:37:4C:56:87:1A:62:B4:44:0F:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 759149C8E2E20138DA6F34A424AEFDA691C608FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92f15bca-51be-4291-9efa-b2392d67d840.roa
Signing time: Fri 17 Oct 2025 00:41:17 +0000
ROA not before: Fri 17 Oct 2025 00:41:17 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 149.128.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:91:49:c8:e2:e2:01:38:da:6f:34:a4:24:ae:fd:a6:91:c6:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:41:17 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=53b37167793500f24d37c9df366b7e019a24acd0ab33cf2142001b6d8588be28, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:f7:37:ab:b7:0d:38:30:db:b6:7d:9f:00:
de:b3:21:9d:e2:35:88:04:23:b2:36:0e:95:5f:df:
57:e2:e3:4a:4c:8b:ca:65:3d:68:e1:48:ad:7c:5b:
4f:b3:79:e5:cb:34:52:9e:7a:f8:bf:b6:fc:e1:73:
5b:bb:ef:b2:b8:c2:1c:68:eb:30:39:95:bc:e5:f3:
c6:13:db:93:30:0c:0c:b6:97:1c:ff:58:39:f6:aa:
a5:07:d2:48:bf:b2:8f:a4:6b:21:aa:7c:4e:db:d6:
ae:4c:09:42:28:a1:2a:35:fc:29:75:8b:7f:9d:56:
49:e9:d2:3f:d1:3b:ee:be:20:3a:e2:e2:60:c2:82:
49:45:ce:a2:ab:75:c8:0d:7d:b9:ae:08:08:8e:7d:
82:03:96:39:6b:e8:7e:1a:53:09:cc:87:92:18:15:
24:13:cd:26:e7:d2:fd:e5:0e:b7:81:2d:b2:b3:e7:
a0:f9:a1:aa:2c:71:cd:9e:5a:55:dd:30:26:c1:8e:
8e:20:58:30:5a:17:c5:43:82:b0:4c:be:bf:e9:32:
20:87:45:f1:26:16:57:46:95:72:02:c4:b8:8c:51:
92:d8:d8:57:82:4d:8c:07:55:47:d5:70:cb:50:8e:
f8:28:25:98:66:41:2a:a3:9d:9d:1d:c1:77:8a:20:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:1B:AD:9A:1C:98:EB:2D:B9:37:4C:56:87:1A:62:B4:44:0F:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92f15bca-51be-4291-9efa-b2392d67d840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.128.128.0/17
Signature Algorithm: sha256WithRSAEncryption
61:38:19:82:8a:dc:42:ed:75:ec:02:f1:7f:8e:ea:53:26:6a:
be:fd:c0:a9:5b:86:60:8b:95:39:c4:cd:91:e0:2d:54:2b:21:
f0:9c:91:b6:ad:8c:34:62:2f:54:75:fb:34:9d:37:32:16:fe:
75:85:bc:f3:c7:e1:77:ef:a6:49:c9:a9:6f:81:cb:c2:5b:23:
86:3f:67:26:ff:fa:d2:c7:92:3d:dc:e4:2a:0e:78:7d:46:d9:
45:ba:43:8a:c7:ae:3d:63:6c:24:0e:14:93:52:59:6a:b3:86:
9b:29:69:d5:89:c1:08:7d:b7:f6:da:35:56:cd:4a:04:d4:f0:
c9:75:a8:c3:3c:31:41:19:c7:66:12:05:69:f1:8e:bd:9e:e1:
63:23:88:e2:ca:f2:75:31:88:f8:a3:7c:03:cf:22:fc:5d:e4:
d1:6a:ca:23:28:9d:34:3b:b4:41:60:2b:1b:af:76:ef:30:17:
f2:9b:33:d6:24:fa:1d:88:0d:d6:94:e7:b1:a2:5f:26:46:23:
f2:35:4d:52:bf:34:68:69:2e:64:34:12:9a:44:dc:b7:9d:fa:
ac:82:cd:c2:26:9f:98:e7:44:c9:79:e3:36:ce:30:78:f7:7f:
b2:de:10:c9:0c:40:eb:34:a0:1b:2c:96:ad:3d:fc:f8:fa:38:
2e:1c:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:25 2025 by rpki-client