Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60557b3-749f-4957-ae6b-c16e5e584495.roa
File: f60557b3-749f-4957-ae6b-c16e5e584495.roa (raw, json)
Hash identifier: oNcmaVcRT5aCoWYtwi0f3cm7l+hm+hn/Ryw0By0WAHs=
Subject key identifier: 9C:D8:72:2F:83:15:A0:19:E3:81:E4:AF:BD:2F:68:0F:66:49:E0:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CD22C12B4EF598C981EC028AF7F78D24C5B85F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60557b3-749f-4957-ae6b-c16e5e584495.roa
Signing time: Fri 17 Oct 2025 00:40:00 +0000
ROA not before: Fri 17 Oct 2025 00:40:00 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d2:2c:12:b4:ef:59:8c:98:1e:c0:28:af:7f:78:d2:4c:5b:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:40:00 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=dac904d40d7ad96736459f9840eaacdd0d4a8cbdeba223b4409fa3b549a1f1d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:b5:89:e8:3b:30:f7:80:5e:0e:31:21:5e:
f8:1b:42:65:6a:6e:96:84:01:78:be:00:ce:cb:7a:
e8:dd:b6:e1:06:ad:e9:5a:9b:57:9f:de:a6:4c:5d:
ed:ad:c4:f6:b9:8e:7f:f6:b3:e9:70:38:40:dc:1f:
14:3e:f2:03:c0:5e:ea:65:90:2e:7e:7d:e4:42:dc:
d2:1b:a7:08:0e:68:29:e9:5d:27:d8:e1:06:f4:78:
a8:59:d6:be:d0:12:fc:bb:f5:a4:18:ae:8f:a7:a8:
0a:24:45:36:86:43:e6:36:86:b1:fe:d6:54:3d:b0:
75:cb:30:db:65:a2:3a:c7:34:b3:4c:69:5a:29:62:
cd:0a:eb:5b:b5:90:c7:e9:93:d6:99:d0:e2:76:14:
84:e8:8c:52:5a:9e:24:fc:16:ab:40:92:48:13:a9:
c4:e9:6d:0a:84:e4:44:75:35:d0:94:7a:62:36:14:
52:7c:bb:db:d8:ce:55:9c:c1:88:02:86:ac:50:a1:
66:0d:2a:2d:3e:2b:c6:c9:8f:61:7f:bc:61:94:c0:
52:2b:d0:c4:64:bd:d4:4e:66:30:5a:ab:4d:a2:cc:
43:c2:d7:cd:d7:b9:14:dd:e2:2f:c1:2c:ae:d0:8c:
eb:08:06:b0:81:ec:ca:21:ae:20:08:02:e2:45:dd:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:72:2F:83:15:A0:19:E3:81:E4:AF:BD:2F:68:0F:66:49:E0:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60557b3-749f-4957-ae6b-c16e5e584495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.224.0/20
Signature Algorithm: sha256WithRSAEncryption
25:da:58:79:54:ea:5b:23:21:f1:64:6e:0f:35:1d:71:95:32:
88:d9:f6:1b:a2:1b:aa:40:ce:00:24:42:9c:ee:eb:c8:f2:c8:
15:e0:d7:ec:4d:d7:8c:92:6b:5d:d9:46:af:0d:a1:3c:a7:8d:
8b:3c:d2:93:04:79:34:09:c0:e7:99:0f:0c:9a:a3:8f:0a:4a:
51:a0:2a:43:b9:cc:fa:60:c3:c4:2f:b2:0d:aa:98:b0:7a:24:
7d:5f:47:a0:5e:5e:ce:88:e6:b8:67:f8:57:7f:82:59:65:3e:
ff:46:1e:3b:23:e3:ab:ef:9a:84:2d:0a:ab:35:c4:59:09:bc:
f4:e1:d0:76:16:8b:a7:96:d6:4f:15:dd:9b:38:0c:dc:f8:9d:
9d:53:61:37:40:32:b1:8a:1d:08:d5:a5:03:0c:3a:6c:95:18:
a4:a5:07:01:7e:e4:f9:20:10:a1:0d:db:2c:4b:0b:a5:87:88:
dc:92:e6:01:1b:ae:32:0e:95:5e:f6:87:66:03:0c:f7:a4:fa:
dd:1e:1e:57:db:ae:3a:d2:8f:7b:7b:73:0b:5e:91:2c:a8:25:
86:09:8d:b8:22:27:c5:cc:a4:33:fc:7b:19:6e:b9:17:67:50:
b7:d1:9e:c9:22:93:aa:77:ea:37:42:de:50:e8:6d:c7:f9:25:
cb:d7:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:39:07 2025 by rpki-client