Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
File: 9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa (raw, json)
Hash identifier: DZ9FEyy/IZPGd3jZMxBPE9sJTUULXQppKrkyIwOkLog=
Subject key identifier: 1D:39:B8:D5:8A:9E:8B:60:EA:FA:CA:AD:48:3C:02:03:25:FD:AE:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 51FEB9806B674A1215BE5EACEE0AAA7194680263
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
Signing time: Sun 19 Oct 2025 02:10:11 +0000
ROA not before: Sun 19 Oct 2025 02:10:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 26982
IP address blocks: 192.31.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fe:b9:80:6b:67:4a:12:15:be:5e:ac:ee:0a:aa:71:94:68:02:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:10:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=9cdab83a8ec9efd5fb919e4a70e92cfe0be8b423a709292cbbb48717b76e5557, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:4d:21:01:21:c1:f0:cc:d3:e5:69:e5:d4:
74:3d:33:6f:e1:fa:55:4c:94:58:55:3b:7b:f4:2c:
76:69:1e:6f:b8:bb:4c:6b:62:04:6b:99:52:02:c7:
09:e7:1d:10:66:b2:54:01:66:c3:ff:12:dd:32:c9:
bb:a9:81:db:b9:04:af:a6:83:23:0a:e5:07:ef:c0:
f4:37:be:ec:05:06:b6:54:0d:70:6d:46:2c:77:20:
2e:94:01:88:73:c1:46:b8:96:0a:c8:cf:b1:f0:d7:
fd:91:78:f0:1b:ed:b6:74:ef:66:4e:75:22:50:eb:
49:95:40:a1:5e:59:8f:ea:24:e5:b8:74:a2:f4:24:
65:65:e1:1b:9a:bb:fe:2f:ea:27:ae:a0:e0:28:c0:
33:3c:fd:15:3c:17:e8:1f:22:8e:67:2d:75:11:17:
2b:de:e6:b2:d4:07:b6:6d:9a:89:40:b0:30:5a:99:
7d:07:2f:5c:ca:8d:af:37:eb:16:6e:43:75:b3:93:
86:df:51:37:01:bb:d0:f6:e4:99:68:a1:84:b1:7d:
92:95:e9:84:25:b0:d7:2c:42:bd:e0:8f:b0:08:d0:
68:7a:56:09:5f:17:06:cf:8c:a6:b4:27:61:5c:02:
04:46:0d:ab:34:04:78:15:fa:a8:81:1d:ff:ee:31:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:B8:D5:8A:9E:8B:60:EA:FA:CA:AD:48:3C:02:03:25:FD:AE:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.31.213.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6c:44:4b:0a:ab:e8:4a:06:0a:53:0a:16:31:6f:96:22:68:
11:62:77:d3:94:5e:ef:b5:25:7d:41:ce:ca:62:7f:c4:f8:b4:
fc:fe:64:42:4a:be:61:f7:04:41:13:86:70:85:83:7c:af:5f:
0d:1e:aa:05:1e:d3:b9:02:12:55:24:db:c5:76:1a:7a:f7:cc:
67:65:ce:55:a1:1a:e1:ac:59:6f:f9:31:fd:49:78:12:eb:7a:
be:fd:61:1f:7e:d3:e1:30:fb:07:9a:4d:5a:62:ba:f8:75:a4:
06:db:15:29:92:e4:4d:1b:14:17:92:33:1c:56:1d:64:41:21:
e8:2a:b6:30:97:82:c8:b1:78:cd:9f:3b:01:f6:3e:64:42:dc:
b5:b7:d3:ca:fe:b9:f2:bd:98:58:94:7d:3c:93:e8:21:72:c9:
09:23:91:a5:e3:f6:6b:dd:b6:4a:1f:5f:87:f6:4a:d5:7f:71:
be:b0:cc:e0:ac:5d:c2:9b:a4:0e:26:d6:f0:23:ad:72:94:19:
e0:2b:9d:a0:83:7f:ab:c0:18:55:7c:8a:3b:22:ca:f8:9b:9b:
5b:4f:7b:6b:34:15:af:fc:8e:07:d9:a2:04:e3:8d:93:ff:6f:
6a:02:50:9a:dd:32:91:dd:57:6d:82:d2:81:0c:c6:ea:bc:fd:
a0:c2:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:04 2025 by rpki-client