Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0fd0fbf-4d62-4b63-b020-1b99a1d276d2.roa
File: c0fd0fbf-4d62-4b63-b020-1b99a1d276d2.roa (raw, json)
Hash identifier: 54fC/K6tvVUdydG6p0S10QD03bvUWKSo2cpw7Liy1m0=
Subject key identifier: 83:78:E1:E4:88:BC:48:DF:0C:56:79:81:B6:5D:B3:1E:33:83:10:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EB951AA6DC006F006393E5C40DBE16BDFB0538D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0fd0fbf-4d62-4b63-b020-1b99a1d276d2.roa
Signing time: Wed 08 Oct 2025 01:37:06 +0000
ROA not before: Wed 08 Oct 2025 01:37:06 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b9:51:aa:6d:c0:06:f0:06:39:3e:5c:40:db:e1:6b:df:b0:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 01:37:06 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=058e2310dd29cccbf9c977ef9ebd6aa961307e674d5c871c17dd549516c1f4e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:46:e6:0a:5d:06:d0:93:87:13:79:39:24:
30:82:34:84:9a:4f:51:a9:38:b9:38:cb:71:21:bf:
53:a6:e0:a6:47:64:23:76:46:4a:cd:93:b6:78:f0:
59:46:7d:a8:aa:ae:90:46:47:70:e9:2d:ee:57:ad:
3d:44:c9:9c:05:ea:9a:14:b4:43:95:48:96:23:0a:
e9:91:32:d2:10:bb:20:c8:41:15:11:49:8c:0f:cc:
88:0e:e5:a2:86:80:8b:cf:b5:18:82:93:59:01:53:
76:f4:9d:3b:3b:d1:f4:1c:85:f1:cd:bb:6c:bf:58:
06:54:c8:b6:fc:8f:e6:75:81:fc:55:3a:63:a3:8f:
13:a1:26:03:db:8d:9c:4a:b6:db:12:c0:d1:be:cc:
cc:47:05:0f:5b:5b:27:70:a1:5b:e7:bf:d5:55:ee:
54:91:b7:25:23:67:2f:91:48:27:32:98:c7:4f:b3:
34:8e:0c:4f:20:c5:b6:4b:16:9d:39:c7:8f:68:22:
63:ff:5d:9b:19:d0:16:a3:34:9a:c1:19:21:24:d7:
85:d3:4e:21:6b:04:47:5b:7a:92:88:20:cc:67:18:
d4:79:1b:be:ea:63:bb:82:3a:5d:8e:78:4c:11:f9:
25:cb:b0:bf:5d:00:fd:5e:4b:a8:ea:fc:3f:ca:13:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:E1:E4:88:BC:48:DF:0C:56:79:81:B6:5D:B3:1E:33:83:10:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0fd0fbf-4d62-4b63-b020-1b99a1d276d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.43.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:15:73:d1:6a:c7:91:a3:c8:01:c5:99:b5:58:e1:7a:40:
0f:4a:7b:f2:ae:ac:d1:0e:42:af:62:f6:dc:d1:3a:5e:1d:7d:
a8:8c:f4:0c:f5:6d:d7:b9:ed:0d:8d:cf:6d:78:8f:37:04:5f:
7a:1d:8c:23:1f:38:77:b2:32:52:d0:d3:c7:18:ba:d3:fb:f0:
55:42:16:2c:aa:ab:72:7e:f1:47:54:c1:2a:60:1a:e7:3e:2a:
a6:92:5b:74:9b:f5:b3:55:ab:2b:1d:9a:24:46:4c:d1:8f:f5:
0b:5b:c2:1c:06:4b:5f:77:55:79:18:d0:d8:c7:da:55:11:23:
8f:86:5b:5c:e8:8c:49:66:19:58:ef:9c:15:3b:23:da:73:e1:
f4:81:1d:ab:af:30:d4:ee:73:73:b1:87:04:30:1e:a7:b4:ec:
be:f1:35:1e:f1:75:6f:a4:ea:a2:73:6b:03:48:99:93:d8:cb:
e1:00:36:86:69:c4:9b:43:9b:e0:10:a0:22:15:0e:a5:0e:80:
0b:22:73:45:36:a0:55:34:3d:46:a8:1d:2a:f7:51:1e:30:28:
cf:ab:fc:d4:08:27:14:43:ca:91:06:b6:1c:fb:0a:f9:20:06:
4a:a6:42:f3:13:45:4a:15:2d:20:93:4d:f6:38:62:ac:bc:03:
45:3f:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:59 2025 by rpki-client