Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e89287-6c05-411f-a3e6-fef6be7964e1.roa
File: a5e89287-6c05-411f-a3e6-fef6be7964e1.roa (raw, json)
Hash identifier: hxqUiZzBMXsmblCF4Ho5trSffGjQM/nIM9y5PyvbQqk=
Subject key identifier: 55:E2:49:43:D6:A1:BA:F7:6A:F4:99:A4:35:C1:12:36:E3:02:72:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 687EF434F316B0604DEC1C93299987DC9C09A9F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e89287-6c05-411f-a3e6-fef6be7964e1.roa
Signing time: Sat 27 Sep 2025 00:02:17 +0000
ROA not before: Sat 27 Sep 2025 00:02:17 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 143.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7e:f4:34:f3:16:b0:60:4d:ec:1c:93:29:99:87:dc:9c:09:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:02:17 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=a6d8324e1a44d26c0ec3b81268b295965b0c986661c920c7c34e2f032a1dfd59, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:93:b6:2b:6f:67:34:78:fe:db:cf:74:cc:
1c:e0:ac:80:43:f5:0e:54:24:15:5a:81:7b:13:63:
fa:64:b2:1a:22:21:51:c9:24:cd:47:39:c3:83:7a:
5a:4f:03:e0:b8:13:bc:76:2d:ae:4b:06:a8:5f:1b:
22:c1:91:90:5f:77:a9:46:70:9c:37:2f:1e:a0:2f:
4c:fd:01:aa:c0:55:49:68:85:50:51:18:7e:ac:cf:
ed:81:9d:6c:83:6a:48:58:de:00:7a:88:c6:ec:e8:
ce:28:d0:c9:b8:00:75:26:cd:1c:10:9d:97:28:8b:
42:90:f1:20:a9:78:84:38:37:41:15:7a:80:ab:2b:
a3:ae:90:99:fb:9f:e1:e2:f8:cb:ce:80:bd:7d:b9:
44:e8:ed:ed:f1:4c:e8:73:7f:8a:86:8e:4b:45:18:
15:3c:c3:4e:9b:20:0a:fe:b9:7b:61:f8:4a:b0:a4:
8d:bf:0b:e2:33:0d:b1:16:4c:0d:af:4c:35:0f:9f:
9e:b1:7c:f2:4c:75:8f:42:bc:50:51:b4:15:84:9f:
b0:fd:80:34:8e:6a:29:14:8b:2c:4c:75:c3:4c:fd:
5b:ea:cc:36:4f:90:27:11:45:9b:bd:53:b1:8d:2c:
8c:95:43:05:9e:a9:a3:42:9f:01:ea:ee:36:e1:cf:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:49:43:D6:A1:BA:F7:6A:F4:99:A4:35:C1:12:36:E3:02:72:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e89287-6c05-411f-a3e6-fef6be7964e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.135.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:13:e7:9b:93:9f:3a:06:23:18:3f:0f:54:81:1a:3b:a4:57:
16:54:cc:f5:24:34:2f:50:39:2a:30:eb:c5:fa:a8:d0:c9:1b:
3a:f2:e2:f3:c5:df:3c:f9:6c:ac:ef:bf:00:00:53:fa:e7:79:
31:6b:49:f5:14:8f:f7:51:ac:40:e1:13:6c:b2:24:a5:57:88:
22:1e:dd:7d:1e:3b:6a:40:dd:aa:92:f9:50:b0:ed:f7:ad:fc:
36:8e:87:25:ea:cb:34:21:81:77:a6:09:9a:16:2a:23:72:57:
f7:db:c6:4a:00:33:3d:8b:73:16:ad:8a:4c:17:87:17:21:7d:
7d:79:89:98:8e:97:7c:48:84:77:d6:da:89:53:bc:7f:3a:2a:
5f:7a:fb:35:63:4b:5e:8f:2f:0d:86:40:5c:71:60:b8:47:12:
1d:3b:b2:d7:d3:89:f3:97:45:4b:4f:7b:46:c0:03:4a:00:2d:
f1:00:3c:07:67:6b:e0:94:3d:26:36:ae:0b:17:15:47:3a:2f:
5f:35:c4:58:66:8b:b3:82:70:77:a8:f8:45:bd:d4:52:0e:bb:
c4:e6:01:02:60:bb:f0:bf:27:c8:ec:7d:33:da:e9:51:dc:0e:
30:67:40:2e:00:a5:6c:75:1d:4e:d7:79:8e:3d:06:3d:20:99:
d6:64:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:18:52 2025 by rpki-client