Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa
File: b8a1d699-66bf-4eac-bb45-6e3527625d81.roa (raw, json)
Hash identifier: sGhAYb+mo6iOXoDFmdm0iZxTPVFef2dbt9gmBAcuERs=
Subject key identifier: BD:CA:48:CB:28:17:38:7C:A2:9E:00:44:04:3E:E4:6D:CA:3E:B3:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7612C8069D386674F4A21D1DAE605591127F9D23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa
Signing time: Fri 17 Oct 2025 20:01:20 +0000
ROA not before: Fri 17 Oct 2025 20:01:20 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 192.43.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:12:c8:06:9d:38:66:74:f4:a2:1d:1d:ae:60:55:91:12:7f:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 20:01:20 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=6a6d2034a06c03deeef42c355cdbad3d1f06136b237fb996ddff57189c25fd2c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:c3:3a:e9:c1:00:3c:24:ca:f4:51:ab:8c:
ad:99:05:91:af:ee:f4:4d:13:46:0c:48:5b:ca:f5:
3b:70:3e:22:76:d4:74:ba:a0:53:b8:aa:3a:e5:92:
58:ee:51:05:00:e1:e0:41:a5:48:3b:e7:a2:ff:5f:
59:20:62:a2:95:6d:23:e8:e5:80:60:08:87:66:c0:
b0:ab:69:0b:e6:d2:96:19:98:f7:66:b2:ba:92:bb:
f9:4c:7d:c2:e9:e9:af:25:dc:a9:70:fe:c3:eb:57:
e7:1d:90:0f:30:f1:48:9a:6a:2d:3a:70:3a:be:51:
8f:ce:5c:35:5e:fb:d2:79:f5:03:4c:3e:75:a3:37:
34:40:2c:06:15:a2:97:af:83:ee:ba:c8:96:40:e4:
4a:ee:4d:c1:07:96:04:b0:bc:92:19:d9:c6:c3:ef:
80:30:00:8c:ef:cc:b9:89:65:ed:a0:18:ca:5b:bd:
d4:c0:e1:55:3c:62:58:17:81:0e:5e:01:83:9d:68:
98:09:d9:51:08:d2:1e:03:45:ad:7f:d9:86:66:03:
7f:8c:29:8c:b5:7e:7f:b5:dd:71:f4:2b:7b:56:f2:
c9:0f:66:6f:69:84:ef:79:54:e5:0b:b2:40:07:5a:
1c:11:47:d4:1d:cd:41:d8:45:1a:9f:c3:3c:42:bb:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:48:CB:28:17:38:7C:A2:9E:00:44:04:3E:E4:6D:CA:3E:B3:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.43.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f6:19:ab:61:8d:4e:9e:7b:20:55:d3:7a:59:04:e6:19:d5:
61:ee:da:83:c3:1d:f3:5b:ae:6f:8d:86:30:13:88:45:b7:aa:
16:50:b2:a6:21:e5:39:33:eb:67:61:be:b1:78:10:b6:04:ac:
c8:ee:76:56:8c:3a:0c:c7:e4:e4:3b:e8:1f:eb:06:cc:ea:cc:
dd:41:f2:b6:8a:a2:9b:e8:34:e6:fd:4b:eb:1e:71:d8:e6:45:
74:d3:ea:0e:2d:74:12:61:9c:68:6a:8d:5e:d0:c7:4f:d2:0d:
50:27:b6:d6:f5:ad:fb:d6:8c:74:f8:c6:e6:a3:59:b6:d3:59:
44:ca:18:36:52:63:12:94:4e:5f:39:ed:e6:72:67:40:50:a8:
3b:7a:b1:c4:23:11:62:01:e5:a7:c3:19:aa:ee:6f:b5:89:1f:
45:bb:d3:25:95:78:f6:aa:8e:f6:ef:77:3e:7e:ef:0e:81:81:
f9:51:14:99:f9:e4:b7:a9:4b:8a:dc:d8:9a:9a:82:fb:46:f7:
6a:df:bb:9d:a0:84:f1:74:43:be:88:39:2f:59:db:35:1a:41:
ec:a4:0d:98:50:5b:eb:39:64:76:86:6c:23:5e:28:b7:4b:cb:
4a:29:ff:39:58:74:02:6d:32:a8:28:2b:85:36:51:a6:51:e2:
8d:cb:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:33 2025 by rpki-client