Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7a2973b-7e13-4dec-b160-8fc2874807ca.roa
File: a7a2973b-7e13-4dec-b160-8fc2874807ca.roa (raw, json)
Hash identifier: kGdj6pY+FIfS1b9ZNkU1BzDCVcDdF0y3PkcpWK/k/xE=
Subject key identifier: 03:E4:14:40:5B:5C:2F:E7:AD:0B:29:96:D5:EA:F3:C8:3C:42:60:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EDE255A4B4A63AEAB47A324CA9CC88942706C83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7a2973b-7e13-4dec-b160-8fc2874807ca.roa
Signing time: Wed 15 Oct 2025 21:36:49 +0000
ROA not before: Wed 15 Oct 2025 21:36:49 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.92.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:de:25:5a:4b:4a:63:ae:ab:47:a3:24:ca:9c:c8:89:42:70:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 21:36:49 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=83b247a7ef12c4602030f8dcbd0b36a2ca720f0f89fcf05858a4cb1e6bcdfbc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:3d:91:43:6b:75:9c:56:23:7b:34:92:36:
e5:66:19:14:c0:bb:f0:51:89:14:5b:e2:ef:8d:ba:
f7:fe:1d:1d:06:c8:dd:73:09:90:9a:65:67:ed:76:
a2:06:70:16:23:de:78:4d:4c:4d:55:13:e3:06:d0:
a4:f9:ca:56:69:46:5f:ba:ba:ed:a8:82:aa:d5:1c:
b2:6d:ec:54:9d:c0:31:8d:ce:84:1e:49:fd:0d:93:
d5:ea:34:44:03:74:74:ea:a4:eb:0b:24:c0:2e:44:
40:c7:46:75:9a:d7:1a:18:a9:4a:af:7d:f8:6b:ef:
69:8f:c9:a5:9d:c8:05:8c:21:b7:64:81:94:15:53:
88:4b:33:16:a8:f1:c2:d8:6f:86:ce:72:4c:dd:44:
b0:59:89:14:c4:7b:ce:79:25:67:8c:b1:15:f5:2e:
c4:0a:c4:83:db:72:ea:bc:7b:3f:93:dd:c1:b3:95:
ec:5b:46:b3:f5:31:3c:eb:2c:af:db:5d:a3:b3:1e:
0e:88:7a:99:f8:a4:c6:f4:36:d3:b5:ba:ee:d7:80:
14:e8:e7:3a:d0:44:e7:b3:eb:ef:91:d1:a2:65:0c:
a4:58:eb:4e:5f:53:5c:9c:ac:5e:64:4c:b5:14:15:
f7:77:66:45:62:67:90:08:ce:42:74:8a:f1:b9:df:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:14:40:5B:5C:2F:E7:AD:0B:29:96:D5:EA:F3:C8:3C:42:60:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7a2973b-7e13-4dec-b160-8fc2874807ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ca:43:b0:e1:29:1e:ae:1a:63:fd:bb:c9:8c:47:f8:34:6c:
50:2e:20:81:77:6f:8a:c9:d6:21:24:48:e0:2f:c6:e3:20:c5:
d9:da:27:ca:c6:a1:a5:57:b2:59:a7:32:15:8d:98:be:2b:13:
fd:8e:fb:cf:7f:87:65:ca:7b:5a:a6:65:25:ac:1c:f0:49:5c:
c2:d0:19:55:3e:af:45:29:d4:5c:83:f5:48:eb:bc:00:21:78:
e6:01:b2:0f:11:a6:20:2e:f5:7d:8f:0c:20:a3:54:ee:d1:9d:
da:4b:f3:9d:86:72:0d:97:6a:97:77:46:a2:7b:03:51:bc:c1:
13:31:e7:54:cb:92:13:86:6e:df:f1:02:80:13:ac:39:11:55:
06:50:01:2e:37:de:ab:95:81:d8:a5:d1:10:a6:b3:9a:ae:3e:
31:cf:37:ab:5e:58:6b:d4:b1:4e:2d:da:29:b3:c1:7b:78:2f:
42:36:b6:67:84:34:e2:48:d2:5e:3d:68:7e:42:a0:ed:06:8d:
20:8b:5b:d7:2c:ed:ad:f6:71:83:64:af:66:a3:6e:ec:61:e1:
b7:94:ad:32:b9:1d:f9:8e:e9:57:4a:d5:33:95:58:e8:fe:ec:
8a:1a:05:51:9b:b5:16:90:e5:0e:df:13:eb:08:2e:3e:c5:a5:
b1:f7:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:08 2025 by rpki-client