Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa
File: b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa (raw, json)
Hash identifier: mDPmfyzn8wH7FEc85yoc0OIQD31+WnUTqbBEaU9kHBQ=
Subject key identifier: 80:15:7E:67:BE:70:8D:5B:50:80:28:4A:08:19:47:04:35:B1:54:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 673B45EF8CCCE66B2399655A35E1DC7EC2BBDCD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa
Signing time: Sun 19 Oct 2025 01:40:10 +0000
ROA not before: Sun 19 Oct 2025 01:40:10 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 75.101.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3b:45:ef:8c:cc:e6:6b:23:99:65:5a:35:e1:dc:7e:c2:bb:dc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:10 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=37b076fe7112185ca2dba659afc464e900bde12fc9299c5a452347bc9a89b49b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:cf:d9:e8:cf:47:e6:b3:14:ef:ab:b0:82:
37:80:39:dc:d7:94:ef:20:22:d2:b4:19:bf:be:09:
74:5d:66:72:be:5a:25:cf:7a:bf:3c:e4:c0:5c:dd:
9f:4c:6a:0d:77:82:e8:51:a4:08:b4:99:97:92:02:
f7:9a:53:b9:7b:ef:1f:1a:49:5e:8f:ca:30:98:b3:
ea:a8:e7:97:eb:37:9d:b3:12:ea:90:d7:0e:75:e3:
b0:f0:fe:18:f0:f8:da:9e:de:27:b3:81:33:e7:1d:
f8:09:d9:78:c0:b9:e5:93:7f:cc:f0:35:5e:22:df:
d9:f8:55:35:1a:bc:e3:cb:74:1d:6f:e6:29:95:c0:
ff:e3:fa:3c:8a:7a:21:5d:5d:fb:8a:0f:6d:db:9e:
21:d5:88:60:6f:10:36:47:a9:96:b7:3e:fb:e7:3d:
93:c2:34:86:52:e7:60:12:4b:2b:77:85:b5:6a:bf:
01:39:32:83:d3:e8:48:fc:6a:1b:04:7e:3c:5f:1d:
26:d7:91:dc:4c:98:87:1b:e4:59:8d:96:6c:5d:c6:
3b:3f:2f:75:cd:72:6c:db:1e:e9:66:f0:04:0c:8b:
16:d0:a0:9d:ea:5b:0f:01:df:cf:74:23:10:f5:1a:
83:77:08:5b:84:9f:b7:75:94:f8:72:5d:c4:49:3d:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:7E:67:BE:70:8D:5B:50:80:28:4A:08:19:47:04:35:B1:54:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b11e0f5a-7bb3-4d22-8a87-3f940a7da023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.101.161.0/24
Signature Algorithm: sha256WithRSAEncryption
41:62:48:dc:c7:42:22:ca:dc:38:8e:ef:32:fd:85:46:8e:af:
aa:79:2f:92:77:71:13:c4:fb:43:43:76:4d:57:1d:b2:ab:ff:
89:49:43:8e:b2:61:06:32:6c:fd:1c:a7:85:1b:91:93:08:a6:
a3:74:cc:12:fe:7a:98:ce:62:1b:49:b7:57:38:f0:0f:92:f4:
63:ba:0d:fc:4d:04:2a:d8:f7:5e:70:ba:a6:14:fb:db:e9:2d:
c9:c9:3d:14:ee:4b:0e:ac:12:5c:4f:f5:a7:bd:38:6f:d3:41:
b8:80:14:5a:90:fe:91:db:35:08:bc:83:5e:96:4b:ba:ee:bf:
78:94:f9:18:25:8c:f4:64:b9:d0:b3:76:3e:8f:f8:dc:83:66:
ae:9a:6a:08:6f:6e:f3:c2:17:5f:30:a2:48:2b:90:8c:46:a3:
7a:4e:48:c2:3d:36:92:a2:35:c3:94:1a:ae:26:7f:24:ab:98:
ed:76:a5:fe:01:17:8f:bd:02:41:31:9d:ff:cc:8f:41:8c:1f:
f0:31:aa:04:53:52:8f:08:d9:8d:22:b4:0b:ec:7c:10:33:c0:
2d:d1:db:83:35:a2:dd:9c:14:b0:a6:5a:a7:f7:f4:1a:06:81:
4b:ed:84:ca:23:dd:f6:d0:ac:03:7e:fd:74:90:61:a6:7d:73:
a7:89:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:36 2025 by rpki-client