Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a894a0df-a7bc-4945-b877-55f4b5cfab38.roa
File: a894a0df-a7bc-4945-b877-55f4b5cfab38.roa (raw, json)
Hash identifier: YuZc9hKAbRJ+N2miyMZm/2lr5s++pP4YqR3nEIOn73g=
Subject key identifier: 7C:F0:F3:46:08:08:96:1E:02:C8:2C:4A:0B:96:96:39:34:1F:3C:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73FE13C91E7A50A8812C3E104586D020F81B6226
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a894a0df-a7bc-4945-b877-55f4b5cfab38.roa
Signing time: Sat 11 Oct 2025 00:42:43 +0000
ROA not before: Sat 11 Oct 2025 00:42:43 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.235.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fe:13:c9:1e:7a:50:a8:81:2c:3e:10:45:86:d0:20:f8:1b:62:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:42:43 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=92466692983a0956d7869294a23092d603d494c1bb6bdebc4e62806eb182ab6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:e4:1f:9b:1b:c8:47:27:de:51:cb:54:9a:
81:7b:82:2a:9e:9c:c5:b9:da:57:ed:d2:b1:bd:0a:
b0:01:7b:6a:a8:1d:92:d1:18:47:d1:e4:e4:73:ca:
1d:2d:2a:5b:7c:1d:f9:28:dc:f4:d4:40:8c:15:16:
e7:a8:0f:e5:9e:81:9f:f6:67:92:8b:b3:87:57:d0:
1f:c4:65:92:91:a6:80:7c:1a:84:4a:9b:31:3d:20:
2d:47:75:76:9c:fa:f0:b1:54:df:fa:82:33:17:d6:
a0:aa:a1:e3:e0:1f:2c:91:3d:b6:ce:f2:2e:a9:78:
fe:0f:d3:7e:92:a4:96:8a:8f:25:c8:06:ce:f4:aa:
a2:3b:e7:df:72:db:34:3c:97:d6:79:2b:6a:f0:61:
57:d8:9a:32:ad:3a:39:f0:cc:09:69:e6:ee:42:56:
4b:b0:58:ac:8c:04:3d:c9:4f:d4:9d:40:1a:49:e6:
af:10:ff:3d:ab:8d:06:6d:8a:33:fe:9c:29:54:35:
0b:ef:a3:44:06:40:8c:ec:a0:a8:21:1b:e2:c5:3a:
0e:41:c3:b7:9b:3c:0c:97:a5:e6:eb:51:2b:25:b4:
c4:3f:e5:b7:60:6a:6e:70:a9:38:56:c9:06:fb:79:
51:ac:e9:e1:99:e3:9b:93:c9:e3:ad:da:8f:85:66:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:F3:46:08:08:96:1E:02:C8:2C:4A:0B:96:96:39:34:1F:3C:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a894a0df-a7bc-4945-b877-55f4b5cfab38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.1.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b8:79:d0:81:c4:99:78:cb:f5:82:12:2a:31:48:2b:13:88:
bc:e9:95:fd:ba:fd:cd:ea:27:6e:74:d7:1d:a5:13:bf:00:90:
5f:58:c3:50:dd:ab:42:90:3f:b4:d5:58:ec:50:3f:31:3a:08:
46:a8:56:00:a4:c0:f5:ec:1f:7a:ad:f4:27:5d:31:de:2e:9c:
d7:7b:0a:d6:da:7c:75:ca:77:a2:2a:a5:11:22:51:39:8d:9d:
27:0f:9d:e5:b8:90:d2:c8:a7:b7:b7:1d:78:0f:7f:e6:59:cb:
0d:ff:32:5d:18:1e:ee:e6:de:9c:d8:70:c2:db:f4:1b:db:ed:
36:4c:e6:5a:b6:57:85:2e:7f:49:76:44:20:bb:3a:5c:b2:0b:
5c:bf:19:7d:2d:bd:17:73:12:20:05:3e:f1:0e:b7:6e:e6:72:
8e:c4:30:b7:3b:d3:f5:85:cf:28:86:4d:94:21:b4:ab:f4:da:
49:83:a2:cc:da:15:05:87:d9:90:ed:b4:fd:5e:85:82:3c:82:
c6:27:00:ad:b3:5a:b5:61:19:19:d1:9b:15:93:ee:97:49:3c:
db:ad:3e:1d:6f:21:ae:db:4d:84:db:fb:62:78:da:d3:9e:09:
b1:c8:de:28:c3:89:07:1e:b7:5d:03:5d:fd:4e:f5:e5:99:c3:
19:9b:20:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:29 2025 by rpki-client