Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9251918-220f-463e-a002-9fff11aface6.roa
File: e9251918-220f-463e-a002-9fff11aface6.roa (raw, json)
Hash identifier: iCNA8DebzftvslRnAPWXMstGXT/mbNcr+qVoz/t8ZlE=
Subject key identifier: 0D:44:56:E3:25:87:76:FA:52:9E:91:3B:08:E0:27:78:31:93:F9:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4457C1ECE04A9204C659B00FFD74E39502E048E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9251918-220f-463e-a002-9fff11aface6.roa
Signing time: Sun 19 Oct 2025 01:40:08 +0000
ROA not before: Sun 19 Oct 2025 01:40:08 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 63.184.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:57:c1:ec:e0:4a:92:04:c6:59:b0:0f:fd:74:e3:95:02:e0:48:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:08 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=080afcd610a2347b410de4b2ea0a4dfea386fc8f568c629fcd63063504396eaf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:24:db:ab:ff:a0:19:76:7e:f4:76:aa:b1:
30:bc:2e:c2:55:6a:71:c4:7e:0c:c1:8a:c9:ce:ac:
3a:5a:e0:b3:37:cc:c6:ba:23:50:8c:98:18:fa:56:
9d:cb:03:2b:36:e0:b5:b1:52:83:4a:5d:e9:76:a6:
2c:6e:15:59:87:39:d7:b7:5d:f4:be:3d:55:02:bc:
2f:6e:d2:01:09:46:29:7e:93:51:e2:65:b5:0b:8b:
05:14:92:13:f7:04:5b:58:22:e8:de:2f:1d:b4:e8:
e8:4d:17:9f:47:d3:c5:b7:cf:99:e8:cf:65:89:a6:
e2:df:fb:8b:08:2e:b4:ce:91:b2:67:21:d4:57:01:
da:81:5a:6f:16:aa:82:ee:be:63:6a:da:f9:81:a0:
56:13:77:e2:00:dd:e7:5d:f6:7b:32:71:49:2f:1d:
1f:6e:08:49:1f:88:ed:14:47:8b:5e:c5:f9:ad:0f:
3e:1a:ef:a7:f9:41:f1:29:3c:9c:90:fd:9d:f2:3e:
dc:67:ca:09:b3:f5:6f:18:3b:2b:2c:4c:b0:aa:df:
1e:ee:44:6a:0d:d3:d6:5e:e4:24:84:00:f1:31:10:
49:6b:d3:9b:b4:33:54:2a:9c:1f:f4:df:87:44:21:
58:f4:39:ee:87:bc:6d:b4:3c:51:d2:b3:88:11:53:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:56:E3:25:87:76:FA:52:9E:91:3B:08:E0:27:78:31:93:F9:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9251918-220f-463e-a002-9fff11aface6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.184.0.0/13
Signature Algorithm: sha256WithRSAEncryption
be:2f:ce:d9:20:f2:bd:97:84:c4:04:63:e2:12:73:ff:32:b0:
cb:12:02:35:ff:5c:ac:49:c5:dc:81:db:f2:d5:bf:06:80:3b:
53:3f:44:0d:04:56:56:f4:d6:77:db:9c:6a:11:41:dc:10:43:
07:f3:28:85:07:92:c6:5a:76:04:dd:31:ce:aa:64:a1:48:a2:
8e:b4:dd:fd:78:a1:cb:9a:49:34:d4:fa:49:fe:0c:99:66:54:
5c:81:45:87:d1:5e:c1:be:94:05:78:58:35:1d:07:7e:e8:bc:
9d:c6:2b:54:eb:14:0f:b4:bf:da:98:75:73:c9:b6:e0:68:ed:
dd:82:5d:5e:47:6d:85:69:37:2f:d2:05:65:84:8e:73:ee:bf:
4d:ee:bd:4b:2a:99:0a:46:c9:d9:6c:8c:d7:85:82:c0:b8:75:
67:ea:44:91:b1:27:3e:06:a9:d1:87:2f:09:00:12:c4:99:0a:
9c:9b:c8:2d:7b:97:26:d8:52:ed:46:38:a3:10:6d:0d:52:b2:
0f:b4:03:28:d8:5c:a9:76:c2:10:ee:cf:ce:84:67:20:4c:33:
86:6f:97:6a:fa:d9:03:24:82:71:0d:0a:f2:d7:68:64:21:10:
4b:fd:ae:a9:0c:ab:37:32:70:8b:d4:1f:cb:23:4a:a6:ab:35:
de:21:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:24 2025 by rpki-client