Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d8b514-71dd-4086-a11c-a6267345030c.roa
File: 96d8b514-71dd-4086-a11c-a6267345030c.roa (raw, json)
Hash identifier: Hk9lC6G/BOtFjBXavPcO2xqzhvdPXhOsVssZxMLJa+E=
Subject key identifier: 30:19:53:BE:E1:D0:9D:90:57:BB:65:DD:A3:20:A8:DA:6E:B7:B4:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B82DD2D10754344016F1EFD2AA7202515EE6C02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d8b514-71dd-4086-a11c-a6267345030c.roa
Signing time: Tue 07 Oct 2025 00:51:50 +0000
ROA not before: Tue 07 Oct 2025 00:51:50 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.137.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:82:dd:2d:10:75:43:44:01:6f:1e:fd:2a:a7:20:25:15:ee:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:51:50 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=da104050757b63d0264caa43e2ba3f4c6c35aa52b6e45c9631a87306e29f5e07, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:99:ae:ac:e9:5c:84:9e:d3:fb:25:9e:1c:
4e:00:74:d1:39:8c:ee:c4:30:b3:4f:63:a5:92:66:
14:ff:e4:2a:9d:f8:46:4f:d2:e9:ae:6d:6c:56:15:
bb:e6:e2:7b:37:4d:6b:8b:89:55:e4:17:73:2f:61:
c9:66:30:98:b5:d2:09:f5:6e:90:40:8a:4c:0f:8c:
dc:d2:6e:e8:e1:1e:9e:5c:99:c0:90:13:47:dc:86:
28:e3:3b:37:fb:00:7d:53:1e:e3:61:7b:ef:8e:f0:
79:b4:89:e5:41:0c:1c:32:2e:23:be:30:bf:d4:44:
b0:5b:62:6b:e6:b1:3c:8c:70:f6:27:39:a1:eb:1b:
bd:48:db:de:64:ab:42:c2:e4:fb:7b:90:9b:a2:86:
36:80:10:4b:d9:5e:08:ec:50:5a:27:ee:04:3c:b1:
26:33:77:a4:b5:70:67:11:63:8d:5e:61:34:10:58:
db:2c:e3:72:aa:61:e7:d1:63:b0:a3:38:25:d8:70:
26:eb:ad:4c:09:ee:b3:74:79:c4:33:96:45:e2:ba:
fb:e1:c7:4e:de:03:38:07:ce:bf:73:2f:3e:e7:3d:
b6:08:5c:a5:24:a8:02:9f:83:82:af:00:a9:72:35:
53:35:98:a1:7b:f1:ba:a9:8a:f9:b2:60:d8:f2:9c:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:53:BE:E1:D0:9D:90:57:BB:65:DD:A3:20:A8:DA:6E:B7:B4:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d8b514-71dd-4086-a11c-a6267345030c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.137.38.0/23
Signature Algorithm: sha256WithRSAEncryption
82:17:1f:3a:b1:72:a7:ca:e9:a6:f1:2d:1a:eb:58:a6:d5:dc:
7b:19:b7:32:fa:f2:6e:ae:b4:5a:ce:c1:24:47:e0:4b:e6:d0:
11:ee:fa:46:69:2c:ee:cd:98:c2:98:ae:41:03:d5:83:a1:0b:
9d:0d:1e:ed:5b:06:5a:78:c3:fb:81:2d:a0:94:28:f4:14:7e:
3f:c1:30:91:98:f4:6d:89:e5:38:90:79:0f:a5:cd:9b:e1:fb:
07:e0:f2:08:8b:38:5f:bd:66:c1:91:6f:78:c5:64:74:a2:7a:
2c:e7:ee:b6:4a:59:2c:e9:7d:7e:cc:42:5d:22:fc:b0:61:8f:
d3:cd:79:7a:5a:a6:24:19:5d:90:34:11:ae:3d:b9:b2:19:31:
54:1e:6d:cc:cf:2b:80:4d:80:53:66:fd:6c:52:15:e4:a2:60:
cd:96:ca:0b:b2:60:03:42:fb:37:96:f9:78:d1:50:95:82:38:
cd:fb:4d:da:3a:62:40:8b:ed:bc:32:e9:11:ae:3d:1b:06:6d:
65:ed:e8:be:e9:1e:4c:91:28:3f:31:e0:e8:01:f5:a3:57:48:
46:cd:8a:4d:89:a6:ec:4c:26:6e:a2:88:ad:52:64:57:18:2d:
c8:c7:95:49:97:9a:f1:75:64:ee:4b:dc:46:be:9d:88:a1:10:
5c:fd:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:28:50 2025 by rpki-client