Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd6c4f2f-fdc2-4a1e-a462-aaed4c356b9f.roa
File: fd6c4f2f-fdc2-4a1e-a462-aaed4c356b9f.roa (raw, json)
Hash identifier: DQg/hkggHN8iCA40xS7HsXbW+EXxD0Fbu4dfjojncdM=
Subject key identifier: BA:87:CF:69:D6:7C:20:CF:0B:0E:2A:40:11:93:92:12:DE:1D:C0:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D61BD269D4E80A1A800C121A60B105E9F1BBB80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd6c4f2f-fdc2-4a1e-a462-aaed4c356b9f.roa
Signing time: Wed 15 Oct 2025 23:07:51 +0000
ROA not before: Wed 15 Oct 2025 23:07:51 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.92.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:61:bd:26:9d:4e:80:a1:a8:00:c1:21:a6:0b:10:5e:9f:1b:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 23:07:51 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=5a7a4d38bcfc7a9a629236d43a99344276e5b8106db5815f21f726c52ac388b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:25:cd:67:48:6c:76:24:38:91:16:14:66:
6b:69:b0:64:3a:91:bb:80:01:9f:2a:ed:e1:7e:fa:
40:4b:b1:b0:38:85:af:67:50:66:75:5f:8f:d5:64:
d4:22:5f:e2:c4:8b:62:ba:9a:9f:92:a4:97:ca:29:
97:a3:c2:28:c3:f7:b4:77:e7:90:f8:67:00:5c:39:
65:da:4c:a7:b6:76:81:1d:d9:55:21:6b:e9:a3:68:
21:51:d0:2c:44:50:f6:9f:14:24:18:ee:2a:8a:2c:
b8:c6:01:d9:32:f3:f9:6e:e9:91:1e:9e:ff:03:6a:
93:54:0c:3d:3e:31:e8:1d:c0:5d:73:24:a4:5c:c2:
d7:ca:61:41:bd:e1:09:54:21:35:b3:06:de:65:d9:
ff:e6:23:ba:a5:dd:a6:97:a2:ed:20:f7:bf:b5:a8:
a8:61:3d:bf:1e:2c:24:d4:36:7e:b0:86:1a:cb:87:
73:da:e6:d4:0a:30:7a:f6:c4:5b:8d:b6:7e:3d:47:
aa:4c:d4:41:61:ab:6a:88:f6:a9:dc:26:17:e2:69:
fe:7e:df:05:1d:a2:a7:e4:b8:78:02:87:1f:31:ff:
fa:02:c4:45:8c:34:d9:05:9d:36:f3:72:1b:49:7a:
a5:1d:73:48:93:66:a9:ca:52:7f:0f:b7:5e:67:ef:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:CF:69:D6:7C:20:CF:0B:0E:2A:40:11:93:92:12:DE:1D:C0:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd6c4f2f-fdc2-4a1e-a462-aaed4c356b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:87:8d:e7:1a:51:9d:08:62:f8:1c:15:e9:a4:7e:12:78:ef:
44:4c:3d:03:5a:10:ff:40:2d:80:f7:b4:3c:26:66:ec:a0:4a:
3d:0b:11:18:90:b5:15:d5:fb:36:c1:c4:eb:80:a7:81:f2:09:
0c:07:c7:0e:b9:96:33:ed:04:71:54:16:d7:1b:1c:0c:cc:49:
7a:ef:05:f1:c2:d9:48:e5:e3:d9:bd:0e:68:75:71:0a:6a:77:
ec:b0:4b:33:c6:f3:ad:cf:fe:1d:c5:46:ce:4a:37:be:20:c7:
1c:d8:41:3c:c9:7c:c4:65:6d:ca:3a:83:46:fe:ab:25:d1:c1:
a0:0c:0f:38:3e:97:dd:b7:41:11:97:54:58:65:73:c6:64:f5:
b4:3d:ec:f8:ec:a2:06:97:ef:8c:48:96:6a:61:9e:fe:fe:74:
d4:07:56:9a:a6:fd:c1:cf:c4:a6:f4:7d:5a:f7:38:3b:bb:22:
5a:1a:06:0b:7d:cd:73:a7:6f:aa:a2:b7:72:c0:76:13:d1:ad:
98:34:8b:02:f7:d4:e1:b9:02:5d:d5:97:70:38:51:93:49:d8:
e8:c7:a8:45:c3:9a:b2:46:7d:d0:97:f5:5c:43:4e:70:e8:8f:
c8:bc:00:3a:cc:85:ad:23:c1:c4:ff:0c:0c:78:1e:6e:8a:eb:
1c:7e:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:31 2025 by rpki-client