Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa
File: be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa (raw, json)
Hash identifier: k+ccV+43uAZ1b9npBH3u10BBjFQbcuPAH/6j9uRV+HI=
Subject key identifier: BB:39:FF:DB:5E:72:DE:59:0B:91:41:F5:38:71:36:61:6C:84:72:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2FC9FD7FA8CE5D0A535282C68CB006C03B746DA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa
Signing time: Tue 07 Oct 2025 00:41:12 +0000
ROA not before: Tue 07 Oct 2025 00:41:12 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c9:fd:7f:a8:ce:5d:0a:53:52:82:c6:8c:b0:06:c0:3b:74:6d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:41:12 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=0542bec1afcfd5846b106d152aeb78630d714f96ac853b2bf5b1a706e15d82f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:55:b0:b1:e7:e5:ab:73:a9:fa:2e:9b:be:
71:22:d2:7f:97:15:0c:05:af:42:98:8b:1c:06:13:
47:cc:34:9b:41:83:2a:60:f5:c3:06:c4:07:c6:0a:
9c:72:3f:1d:33:45:10:e7:9e:7e:31:df:db:50:a7:
51:ef:ce:b8:28:cd:f2:00:fd:6c:5b:00:1e:74:9b:
3c:d8:2a:b8:1f:26:b7:7b:d4:fd:b2:5a:9e:0c:ec:
71:f4:64:ff:10:6d:da:28:36:88:4a:1b:4e:37:34:
6b:2e:8b:44:14:da:8a:02:e8:c3:0c:eb:d2:6f:53:
9c:8e:d3:0c:c9:5b:cd:d1:16:89:27:49:d8:0a:b0:
68:e3:c9:f9:38:c3:c1:d2:1c:15:c0:3d:11:a3:b0:
f7:59:e4:1e:00:24:5b:79:a3:bf:36:28:87:39:5b:
48:e1:85:56:5e:80:85:25:bc:28:ce:a2:d0:3d:f3:
30:e5:56:b9:77:36:02:d3:e0:81:79:8f:e8:ca:80:
c5:c5:8a:12:0f:76:f1:dc:4b:b5:55:15:ab:41:ae:
a2:c6:df:69:75:44:34:a0:a8:98:54:03:7a:b8:05:
b0:a7:e2:7a:3f:aa:9f:ec:d4:2f:37:0f:e6:e7:d2:
68:9a:07:04:a8:93:78:ff:00:7a:2e:98:15:e8:9d:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:39:FF:DB:5E:72:DE:59:0B:91:41:F5:38:71:36:61:6C:84:72:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:e9:37:37:fd:51:83:d6:da:02:1d:56:c3:c4:a7:ef:d5:f1:
ef:28:5d:29:e4:eb:64:41:a9:13:cf:0e:c2:6c:7c:73:20:82:
a7:7f:5c:39:e3:13:17:f2:64:c2:66:1e:d0:6a:ab:3d:d7:29:
ba:fd:9c:d4:7e:9b:d5:75:63:00:0d:82:9e:58:1b:3c:5b:2f:
59:f0:67:52:1f:dd:60:0f:77:c3:96:08:cf:6e:90:31:f9:47:
76:c4:9c:16:6b:18:34:2c:2e:ea:84:72:4b:a7:d7:39:dd:02:
82:dd:16:7a:b3:58:78:07:cc:f7:c7:af:39:78:6c:7b:41:fa:
cd:2a:ee:7f:e6:b5:08:0c:08:a9:52:ee:39:77:fa:77:ed:88:
45:ac:7b:bd:4f:77:12:f7:57:5a:1d:6a:9a:6e:65:4c:70:91:
5f:e0:8c:8f:f5:33:a2:ac:04:84:da:bf:66:80:ff:dd:e8:3a:
a2:fa:3e:dc:20:90:d8:e0:ea:6f:0a:44:c7:83:a5:9a:58:ec:
2e:f9:e8:51:16:2f:5b:a6:8e:e6:06:f5:46:6c:2c:46:fe:06:
93:9e:bd:5d:65:53:a4:14:dd:69:0a:da:1f:fd:f6:f7:0f:93:
e5:d3:e3:cf:7f:1e:5e:4e:1c:38:0b:7a:b4:cd:46:e6:f6:dd:
86:3c:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:39 2025 by rpki-client