Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa
File: 9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa (raw, json)
Hash identifier: NLjMhwMN9WWmH6c+TlPro9jSBPkKmifqA1djEJVEZKg=
Subject key identifier: 4B:79:03:13:17:2B:70:61:CB:BB:75:C8:DE:F8:4C:F2:C8:AB:84:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 592541713F47DDC45AED65B6A483F18032A1D86A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa
Signing time: Tue 30 Sep 2025 00:11:53 +0000
ROA not before: Tue 30 Sep 2025 00:11:53 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:25:41:71:3f:47:dd:c4:5a:ed:65:b6:a4:83:f1:80:32:a1:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:11:53 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=5784480bdc489e4b532b5691b24f83825b37adba49ec1ca55b44c486d00eceb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:c3:2d:07:5e:bd:2b:f4:e8:b4:94:b1:c9:
c4:88:0b:23:2b:c2:0a:b2:35:0e:ce:b5:e5:e3:6d:
f0:45:b4:89:14:7e:08:49:4f:3b:6b:32:90:65:a9:
be:ef:c5:40:2a:01:08:72:67:28:8a:44:00:a0:a3:
27:d1:08:7d:72:f2:48:d1:2e:55:cc:12:c3:3c:17:
a5:ce:87:eb:c9:05:b1:61:b2:1b:a4:c8:86:dc:80:
94:f1:89:89:83:56:30:33:ca:64:f1:09:b4:0a:92:
26:49:b0:18:e8:02:92:81:fb:35:ce:d0:25:0b:92:
c5:fb:c5:e1:b5:23:b6:e6:2a:df:f5:53:ec:d6:0f:
06:ec:72:04:a9:d2:ad:2d:19:83:34:3d:56:95:5d:
d1:7a:ef:23:76:b8:08:00:fd:23:d8:3e:80:98:82:
f8:0e:10:d3:84:ce:74:74:83:3f:1b:f4:5e:f8:0c:
86:9f:a7:50:09:a7:fb:ad:3d:a5:09:06:23:98:71:
83:15:3e:5a:f1:2d:7d:0e:c0:52:34:3b:77:57:50:
a1:95:cc:a1:b8:a8:f0:e6:76:a6:d1:2c:00:82:c6:
ca:3d:e8:3b:2d:20:64:a5:56:35:52:ea:e9:a0:6f:
c6:95:9c:13:b8:16:33:54:61:55:ec:36:9f:ed:54:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:03:13:17:2B:70:61:CB:BB:75:C8:DE:F8:4C:F2:C8:AB:84:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.135.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:d9:8f:f8:4e:b5:34:44:11:00:91:b8:01:7c:b4:29:fd:82:
27:32:07:9b:2b:21:39:5c:34:4b:2d:20:a1:80:f4:ca:5a:78:
05:21:fa:4c:0d:9d:c8:2b:f9:5e:1f:d5:c0:3f:67:03:9a:bb:
f1:36:8e:cf:e0:f4:f8:bc:f0:2a:44:cf:22:15:4c:90:c8:d5:
3e:02:ff:aa:0f:a4:cd:79:c8:1c:0a:8e:d4:e4:a1:a9:b0:c1:
9f:bd:5e:f1:d3:ca:7d:2e:da:3e:a4:7a:79:5c:a8:42:10:2c:
15:fc:ef:2f:62:20:65:d1:98:01:bb:84:fe:7e:34:dc:e7:d5:
1f:2b:c0:5d:2c:a0:94:1c:98:f0:57:76:d7:a9:54:37:7f:e0:
68:d1:6c:d7:97:c0:a8:41:3f:91:ec:5f:fd:35:22:91:3e:9a:
26:d5:3d:f1:96:90:0e:31:a5:da:49:22:fa:bc:c3:99:c3:45:
e9:c6:52:48:33:45:23:f3:e7:6e:01:cf:69:57:94:d1:36:6e:
87:16:b9:2d:6a:10:22:f4:91:58:a0:b3:69:54:95:1f:18:48:
92:b0:21:10:e6:b5:5a:dc:e9:e3:c6:21:14:6b:71:29:fb:33:
0c:f1:f9:2a:bd:6a:9c:b9:e9:a3:6a:e4:df:3f:45:89:d4:98:
06:89:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:19:42 2025 by rpki-client