Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b28ce88-8fb5-43d8-b8e6-ea04b862ef32.roa
File: 3b28ce88-8fb5-43d8-b8e6-ea04b862ef32.roa (raw, json)
Hash identifier: 2L1T2ZtpW8GtpAAce27R868pIS4Ddg6sQJFg2moUuH4=
Subject key identifier: 3A:E5:61:F0:D7:5C:C2:E1:AF:EF:A0:4D:71:F6:6A:9A:E2:3D:E3:CD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54193E92F6ECD2F0ACA507608ED4DF8182BAA8AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b28ce88-8fb5-43d8-b8e6-ea04b862ef32.roa
Signing time: Tue 30 Sep 2025 00:37:55 +0000
ROA not before: Tue 30 Sep 2025 00:37:55 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:19:3e:92:f6:ec:d2:f0:ac:a5:07:60:8e:d4:df:81:82:ba:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:37:55 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=c1fabf585c9f8173a63bdf824944b6a574b5f39595b6bd4e366601116ec711fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:47:b9:68:c5:70:42:44:34:7b:cf:44:98:
3b:b4:d2:8b:3b:9f:cf:30:93:40:dd:13:d4:86:04:
3c:38:a0:e0:36:ca:e7:db:f0:eb:0e:81:24:df:8f:
54:8e:c0:27:f3:1f:1f:0c:80:7d:37:8e:00:50:0a:
a0:7a:98:93:27:f9:d7:23:d4:ae:c6:53:1e:1b:80:
b0:18:17:8b:b0:9b:8c:d6:19:7a:15:83:16:7c:53:
b9:7f:ee:af:90:d2:e9:62:85:c3:59:32:12:4d:76:
5c:25:4a:15:ba:33:e7:4c:31:6f:01:27:c3:de:b7:
c3:43:a1:bc:71:41:27:43:87:d1:03:53:57:d7:ef:
f8:4b:67:97:6d:64:b1:99:ca:35:d4:1c:c7:6b:8c:
f7:92:d8:a8:4c:50:dd:09:68:72:83:cb:33:78:67:
cf:1b:dd:b0:78:a8:28:c6:1e:fb:51:09:1d:d7:f2:
4e:a1:26:04:34:bd:ea:4f:d8:02:15:79:e0:bf:88:
20:9c:99:96:94:83:f5:32:ec:1e:57:87:76:d2:af:
a4:28:88:30:61:10:ef:6b:78:b6:89:ec:2c:3b:b2:
8f:72:fd:41:af:31:2d:d7:45:4d:ac:7f:d3:bb:c4:
63:63:d9:08:25:1f:f2:54:67:16:3f:15:8d:b9:90:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:61:F0:D7:5C:C2:E1:AF:EF:A0:4D:71:F6:6A:9A:E2:3D:E3:CD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b28ce88-8fb5-43d8-b8e6-ea04b862ef32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.46.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:fe:04:f5:ae:f7:c5:7b:ed:0d:89:bb:aa:e7:4b:f7:be:84:
89:95:96:1b:0e:e0:78:50:48:74:e2:f9:21:ed:c8:c5:77:16:
09:3a:5e:fe:a1:f2:ae:17:71:4c:45:d4:4a:24:35:71:a4:a4:
24:47:65:4f:74:9c:1e:13:a4:d5:de:05:1d:d5:d1:96:8c:2b:
6d:fa:e6:34:5c:9f:54:51:d5:1e:e9:f5:99:1c:98:af:c7:4b:
64:84:d1:b7:2f:f4:c9:4a:f9:15:23:06:00:1e:51:4d:fc:0c:
6a:2f:76:9d:0e:a8:7d:6f:ac:65:41:09:93:24:d9:35:bf:c3:
e7:36:82:7e:18:b7:b0:d3:e8:91:6a:65:4a:d0:1d:ff:41:2e:
9b:a1:0e:4e:a6:45:d0:fe:b5:0a:cd:d4:72:ad:d3:7d:47:24:
a3:80:4c:7d:e3:90:8b:8f:60:9b:09:b9:e1:47:f2:3e:c7:d3:
e7:15:f8:8f:c9:0e:ba:35:01:4c:f9:85:70:0f:1b:9c:ce:a8:
a8:9e:d7:c1:21:aa:3b:65:c9:f1:fa:25:2b:2e:d3:d5:e8:e9:
71:de:df:71:45:4f:47:9a:f9:57:a2:42:df:3e:8c:e6:04:fa:
1e:93:0a:f9:62:6d:61:24:72:f9:28:d7:75:cf:f9:40:e0:98:
be:8d:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:27 2025 by rpki-client