Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d99657c-d45f-4b75-a930-2545678e0845.roa
File: 1d99657c-d45f-4b75-a930-2545678e0845.roa (raw, json)
Hash identifier: S2acUuCBt1OirOieCYCrl+ex00kehOIe3SQJcGnNUXk=
Subject key identifier: 61:11:23:CD:A0:A7:FB:0C:27:82:4E:01:B4:BC:6B:F9:35:05:67:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4DFB9541E6819FC5AA34DE2CB62636B4D529F442
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d99657c-d45f-4b75-a930-2545678e0845.roa
Signing time: Sat 18 Oct 2025 04:40:48 +0000
ROA not before: Sat 18 Oct 2025 04:40:48 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.177.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fb:95:41:e6:81:9f:c5:aa:34:de:2c:b6:26:36:b4:d5:29:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:40:48 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=d2283bb4cc7b18855ae48a4966464599209f69ebbb025f0ac6d978599dd63ba3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:9d:72:e8:f5:63:d3:9a:6e:25:8a:93:6b:
71:e5:a6:16:38:80:bd:73:02:92:a3:bb:11:50:ef:
eb:31:1c:40:2d:89:b8:a9:9d:1b:34:60:c6:8d:f8:
bf:8b:31:0f:13:09:fb:c6:0a:bf:a2:c6:fc:9c:f2:
fa:56:60:f1:32:4f:38:eb:3d:4c:e8:09:41:df:e7:
46:26:94:7e:aa:c4:63:13:2a:c8:5b:bc:dd:53:d8:
4e:2e:3d:74:31:b9:ef:23:c1:17:07:70:74:65:ed:
92:0d:39:f1:fe:31:3a:94:5b:92:9b:78:5f:f5:12:
24:ba:6a:ff:97:fc:34:fc:09:2c:ff:4f:ac:e9:c8:
17:28:20:38:21:d1:a0:f4:34:36:80:7f:44:8a:58:
d0:4e:53:f6:0c:dd:ed:f7:ce:a9:ae:74:a8:65:90:
8b:3d:23:81:06:99:b3:fa:49:8c:28:87:3d:0d:f9:
e0:98:5c:5e:af:74:e3:95:89:06:66:d6:06:41:50:
11:6c:25:24:43:e1:87:37:e2:6d:cc:79:4b:f4:08:
4f:46:de:bd:87:73:e7:29:bc:d0:b0:df:a6:ed:86:
e0:b6:6a:9a:37:f1:a9:34:c8:c1:c3:1e:d4:b0:40:
4d:bf:2a:10:51:3a:54:20:18:41:7f:fb:93:54:5b:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:23:CD:A0:A7:FB:0C:27:82:4E:01:B4:BC:6B:F9:35:05:67:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d99657c-d45f-4b75-a930-2545678e0845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.177.52.0/23
Signature Algorithm: sha256WithRSAEncryption
78:aa:ff:f2:fb:74:78:cb:b8:46:67:b3:42:2d:0b:c2:fb:1c:
a7:56:21:76:d6:b2:fc:26:38:6a:48:e1:dd:2c:83:02:aa:71:
64:a5:e7:f6:65:0a:02:01:b5:60:01:6f:03:b6:fb:cc:e7:59:
97:d2:5c:fb:ba:50:4f:e4:6b:d9:84:29:04:1c:05:99:1e:ff:
4a:10:fd:96:78:d6:f8:6e:5e:27:39:aa:69:f2:76:1c:77:c5:
db:f1:93:e9:c6:a3:b1:42:52:e7:32:aa:3c:90:67:a1:f8:47:
4c:5f:40:24:bb:af:96:fb:04:ec:71:ef:e2:8b:47:b5:ce:d9:
88:c7:d6:b4:a7:21:06:8f:f9:a2:d8:30:77:75:64:f8:cb:29:
41:91:65:c7:16:20:24:34:ac:47:b4:f7:08:4f:84:d9:cd:41:
ae:e8:1f:3f:08:b6:c0:78:c7:01:85:4a:db:bd:49:3c:a2:82:
73:07:08:4d:e5:41:a8:5c:30:27:c6:07:ef:f2:ba:fc:33:29:
36:c5:a2:ac:a7:4d:b2:58:92:ba:81:a9:ab:3f:71:d9:a7:2e:
e8:59:59:8b:d7:53:ef:c7:43:29:b0:b3:5b:1c:b9:56:45:00:
c5:88:97:cb:f2:fd:93:04:fd:7d:ad:0b:f7:65:34:7b:30:98:
3e:1f:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:44 2025 by rpki-client