Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
File: 110221ea-3727-4ae8-a95a-c96075931bf2.roa (raw, json)
Hash identifier: ZBUvSWwbqAxEymf/Tga4iUxLrphVW2z9tu76RSj56EQ=
Subject key identifier: 79:FC:DC:6E:6D:CF:3E:A8:6F:00:C7:62:F2:ED:EA:E4:CE:4A:45:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62492FF41267278346042A789F38938105CDA6B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
Signing time: Tue 07 Oct 2025 15:01:14 +0000
ROA not before: Tue 07 Oct 2025 15:01:14 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:49:2f:f4:12:67:27:83:46:04:2a:78:9f:38:93:81:05:cd:a6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 15:01:14 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=b63603c0dd88e37d345d75d4452be44f9cf1d17eaf3c94eaa2310a81f5625ae7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:bf:f5:e7:4b:fe:1f:89:7d:f1:33:df:e1:
c5:22:aa:73:1e:0b:06:70:d3:c6:59:3a:93:a6:06:
c6:f8:e6:4c:1f:5f:c0:2c:e4:98:2e:0a:08:4c:e0:
9a:b9:19:e5:e4:0b:89:ea:d8:94:b1:88:dc:1c:05:
65:0b:6e:e8:54:d4:97:07:f9:6d:b8:db:7d:e5:e6:
bc:cd:44:30:5d:9c:cb:b3:f6:b0:49:90:60:dc:05:
a5:8a:85:74:b6:e5:f6:10:fb:2e:8f:a4:e1:1e:14:
d8:5c:82:2c:55:95:fc:e4:af:d0:ff:81:64:14:ad:
8f:63:d2:01:38:5c:f0:33:43:9c:68:bd:9c:c2:37:
b3:4e:8e:00:4c:e0:8b:61:9a:f0:13:05:6d:70:5c:
f6:87:77:03:5e:35:59:cd:cc:21:03:f9:91:d4:b3:
ee:67:c5:9d:16:ad:4a:60:2f:c9:25:dc:c4:5b:fa:
b5:cc:6b:ea:f5:37:d5:3d:0f:58:66:70:08:f5:d2:
82:e0:d1:f9:65:26:d8:4d:40:0b:b6:9a:33:12:f9:
86:3e:90:9f:85:ac:05:6d:24:d8:74:a6:bd:d1:c8:
3f:b5:21:09:36:4a:b7:36:ae:15:63:80:00:4a:58:
08:69:39:35:8d:8c:a0:4c:11:53:9f:2b:38:d0:bc:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:DC:6E:6D:CF:3E:A8:6F:00:C7:62:F2:ED:EA:E4:CE:4A:45:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:da:46:f5:c1:e2:d4:fd:92:fe:eb:29:42:02:b7:f3:5e:ce:
88:67:de:cd:0c:cb:f5:07:7d:42:d1:f5:8e:90:c5:45:09:ef:
76:a0:0f:8d:33:97:b9:a0:29:27:f0:1d:bf:0c:8c:85:60:9b:
0a:72:62:87:eb:5f:c8:35:04:74:77:6b:38:45:22:56:d5:19:
27:7f:3e:6e:68:83:05:68:5d:61:b5:7f:6f:97:22:cd:62:31:
1a:1c:06:89:19:80:4e:c1:7c:28:ae:92:2c:0c:3e:5f:08:fc:
03:66:b5:4f:ee:62:0f:b2:69:42:1f:35:97:b3:a8:35:d2:1b:
b0:64:b0:75:f0:78:64:4e:68:99:14:83:32:6d:25:b9:87:c6:
1b:b0:72:1e:8c:6e:a8:1a:60:be:d5:a9:08:ab:96:c6:51:a6:
1c:8a:ab:73:25:50:3b:05:b6:73:4d:10:ab:79:97:72:22:79:
56:6c:00:06:15:a3:3d:d3:e3:bb:95:f3:20:d2:e4:dc:e9:96:
db:f1:26:8b:a3:b7:96:99:a5:14:de:b1:50:60:c9:e0:30:61:
66:ae:55:38:e9:c6:78:c9:88:61:32:ce:37:cb:51:80:fa:22:
45:14:f5:4a:86:bb:b4:0e:d8:06:56:48:4b:c7:6a:87:0e:05:
f9:a5:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:48 2025 by rpki-client