Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
File: f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa (raw, json)
Hash identifier: LnaEVE9OSRTSzX1MKUhfoiJsn9bHG2SPNTkinLg/3ZM=
Subject key identifier: 16:17:28:A9:88:BD:B7:8C:F4:BD:45:05:F2:DE:7B:DC:D3:30:6F:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B2D89074510EF757D384C1DC680B0ECCCC6E361
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
Signing time: Wed 01 Oct 2025 00:52:49 +0000
ROA not before: Wed 01 Oct 2025 00:52:49 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2d:89:07:45:10:ef:75:7d:38:4c:1d:c6:80:b0:ec:cc:c6:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:52:49 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=d7f9a8e306588d86f5d2e4aa5dabc933da8d38709adef13834b1db61d8bff6e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:f7:9d:0a:1f:20:df:13:95:75:26:9b:d5:
54:2a:d3:a5:f5:7e:df:98:6d:93:14:89:78:61:1b:
59:de:90:66:19:00:68:bf:e2:52:ff:cb:a8:eb:ff:
b0:2c:61:85:94:14:92:12:05:6f:8b:01:cc:9f:76:
3e:27:c2:73:92:43:f5:2e:f9:b1:bf:4e:5b:78:d9:
89:dc:f9:f4:1d:3b:7b:9d:2b:c1:e1:d2:ac:0e:68:
a7:fb:6e:a8:53:25:f9:6f:c6:86:ed:76:0c:ae:92:
b7:bf:49:86:22:e5:9d:4d:f3:77:5f:3b:4d:49:cf:
9d:10:31:f2:47:76:78:94:ae:dd:ab:f2:18:9d:7d:
c7:1e:b6:50:77:a2:9b:16:7c:8b:5a:ae:a0:7f:f3:
8d:e0:b6:8b:b9:08:dc:76:9e:ee:46:39:4c:1e:2d:
b9:da:61:72:28:3c:fa:96:da:20:ac:13:59:ba:03:
f9:5a:2d:7a:07:32:f7:94:fe:67:3f:72:f8:6a:4e:
38:10:d7:7d:59:14:33:55:53:2b:d3:b4:ef:c4:9a:
44:d0:ef:0f:19:9e:2c:9f:73:45:e2:99:2e:a7:de:
92:cf:4d:8a:53:29:fd:c6:cc:22:35:46:f3:29:fe:
1a:7c:66:a6:cd:0c:fe:95:10:9e:7a:1a:f4:9b:29:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:28:A9:88:BD:B7:8C:F4:BD:45:05:F2:DE:7B:DC:D3:30:6F:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.104.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b7:2d:08:00:98:44:61:e3:7d:36:aa:53:44:57:af:bf:bd:
e0:a5:df:d9:b9:77:4d:96:a9:e2:ef:a6:39:74:cd:de:40:0b:
23:e6:95:41:1b:85:0f:79:7a:65:cc:5d:a6:5e:52:dd:c0:98:
f0:bf:00:17:2d:db:46:b5:1f:46:c3:01:16:ea:fa:f4:ee:5b:
48:d8:34:2f:90:b8:c6:59:3d:be:8c:31:9d:a5:34:2f:7c:ee:
00:59:cd:a3:4d:59:bd:cc:3e:0f:f7:5b:c4:2b:60:a7:90:92:
c0:14:c5:06:0a:25:81:90:e0:34:32:9b:54:fd:ec:18:e5:ee:
ed:c0:3c:1c:41:27:0f:54:1e:44:ac:35:83:31:6d:10:c2:a2:
12:e8:34:05:fa:51:6a:90:3e:d9:be:62:fe:ab:d8:d2:d2:e5:
e0:e3:31:45:eb:6c:9c:48:c1:64:d2:4c:6b:8c:72:29:76:6d:
70:80:c2:0b:8f:6d:b7:53:ff:46:43:7f:96:8e:61:60:76:5c:
38:43:ea:74:3f:9c:5d:84:07:b7:41:fe:25:47:eb:bc:36:db:
26:2c:21:2f:71:79:77:37:fe:6d:27:09:73:1d:33:39:e6:0e:
00:43:49:39:fb:bd:7d:dd:39:55:9f:f3:ec:59:4c:7e:b6:39:
83:cb:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:39:57 2025 by rpki-client