Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa
File: adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa (raw, json)
Hash identifier: YLrJq7TWJc+6LC/LgeQHyF+0jB6IWZA1CRQU2m8vP2I=
Subject key identifier: 97:15:EB:7B:2C:97:61:3A:1D:B9:84:42:E4:BB:05:68:D5:CE:21:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B47DA50CA9A4CBA004A9C50872F32BE1299E3F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa
Signing time: Sat 18 Oct 2025 02:21:33 +0000
ROA not before: Sat 18 Oct 2025 02:21:33 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 5.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:47:da:50:ca:9a:4c:ba:00:4a:9c:50:87:2f:32:be:12:99:e3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:21:33 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=a7f3de2aba4f4e8aecbb2ced9f28ca277b4e3ee1e2f4352c7903611c6375914b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:47:b9:33:f4:3d:fa:47:7a:83:ea:a9:e0:
cd:30:c6:d1:e4:4d:a4:a6:48:d5:93:2e:be:9b:c3:
0e:fa:43:26:f0:d3:ff:f4:eb:b2:c1:c0:fc:74:e6:
1d:a2:66:06:4d:95:87:1d:81:3b:7c:8c:a6:81:db:
d8:ea:b9:91:89:9b:a6:3c:16:17:e9:1d:a2:4b:bd:
d7:de:eb:e0:04:12:48:ae:cd:91:9f:84:10:a4:fa:
71:fc:6c:4e:98:26:13:a8:3c:af:75:c8:f2:59:89:
36:72:35:d7:14:f9:8f:c0:52:51:1d:19:eb:05:fa:
c0:28:fa:c1:12:4d:ab:3c:83:cd:79:46:af:2d:e0:
8c:bc:4b:c5:ed:1c:0c:e5:c9:84:d5:57:1b:fd:41:
b9:0d:be:b3:5c:bc:43:1b:c5:49:b2:dc:a0:68:47:
5e:8f:73:8c:04:71:3d:cc:9e:57:ec:fd:64:29:27:
5f:37:59:db:8d:be:9e:f6:7a:98:28:e8:d9:66:7c:
b4:a3:ce:da:9a:3b:c0:a4:c0:2b:e1:1b:e3:8d:52:
71:15:f6:ed:55:6b:2a:d2:55:49:54:5a:60:a3:a6:
b1:65:90:50:1f:b0:56:e5:70:cf:12:b6:35:44:6f:
b0:c2:c5:79:40:d2:fb:0f:9b:c8:86:49:70:8a:71:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:EB:7B:2C:97:61:3A:1D:B9:84:42:E4:BB:05:68:D5:CE:21:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adf81dfa-321d-42a4-a1e7-eefec7d0a384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:d8:81:d2:47:bc:b2:91:18:d0:26:79:67:39:2d:6d:ef:8a:
3a:70:77:b3:59:50:b5:79:ef:42:31:52:cc:8e:7e:e9:f0:2c:
6d:12:62:67:2a:b9:5f:8e:cf:fd:1c:1e:7b:d0:0f:44:d8:b5:
3d:ed:75:b5:1a:37:a4:2d:9f:a2:fe:b7:dd:e3:ce:2e:13:55:
44:52:96:de:59:8c:30:8e:23:41:3d:61:eb:a2:15:3c:23:05:
11:21:65:bb:48:37:d8:dc:56:13:e4:88:f6:f5:8b:ab:2f:a8:
a8:ea:71:95:43:16:85:28:a7:df:6e:97:a7:e2:88:25:cd:17:
70:fd:04:46:8c:aa:cc:86:ce:af:8e:21:f7:8c:1b:7f:47:dc:
3a:cd:d9:e8:ab:c1:5b:64:ea:c5:c8:62:c0:b7:a4:6c:cd:cd:
c4:18:19:03:33:31:26:3c:4e:2b:12:7a:6b:54:9b:38:fa:af:
a6:91:8e:f3:7a:90:b0:dd:6c:b3:aa:9f:dc:e3:46:ca:34:e2:
44:95:ba:fb:47:4f:70:c0:c9:24:b9:3c:d9:dd:78:ba:91:ac:
bf:ab:24:8f:34:6c:d1:6d:53:66:e5:53:09:53:0f:b1:3b:f9:
71:be:88:a3:ce:ce:52:d6:e4:22:c4:5c:40:3f:c6:b7:35:85:
f9:31:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:07 2025 by rpki-client