Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
File: 6751dc8c-51d5-4081-86c9-7c06c81aac98.roa (raw, json)
Hash identifier: 9vU7QzuVi3iXP0Lk6G/G83+6bQvAovNEzMpDogbqOjs=
Subject key identifier: E9:C9:61:90:94:D4:15:73:C8:29:6C:AE:EE:AB:C5:C8:C1:89:BA:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52D035CA1CE4EB803507249A7F81CA4C7830BC67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
Signing time: Mon 06 Oct 2025 16:39:59 +0000
ROA not before: Mon 06 Oct 2025 16:39:59 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d0:35:ca:1c:e4:eb:80:35:07:24:9a:7f:81:ca:4c:78:30:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:39:59 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=0a822fac87a6fd196241dac1ae276b448c619ccaf2be9469f1c64e7bb7a6af9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:79:db:61:94:df:60:ea:cf:18:f6:e7:07:
5b:61:ec:b7:11:da:79:57:68:2b:8e:18:8f:6a:7d:
cd:bb:f9:bd:78:40:1f:9b:3c:f0:d8:00:73:90:48:
d5:37:44:b0:16:ab:ea:f9:44:89:f1:31:6f:38:da:
65:33:16:57:6a:7f:2c:47:be:c6:de:bc:36:54:9e:
e0:00:d1:cd:51:59:c6:37:ff:75:a1:60:67:f3:6b:
03:ce:78:de:38:ed:c8:1b:2e:5c:27:d7:5a:f8:a1:
0b:f7:35:21:01:dd:1a:2f:5a:35:da:3c:53:24:c4:
22:7a:6e:7d:e1:bb:23:6e:e1:1f:65:01:0e:26:3e:
5e:17:b2:98:34:9e:1b:8b:c1:50:a8:62:e4:82:46:
6d:da:7a:58:b2:62:de:eb:2a:e2:2b:bf:ea:79:df:
64:e9:e6:72:f9:31:fb:9c:1f:82:76:91:7e:c6:45:
fb:a4:6b:15:43:ac:a6:dd:1b:e0:f3:75:7e:f4:db:
d6:83:02:6c:22:06:8d:d1:c9:43:a0:94:9d:9e:3f:
60:e8:36:7f:8f:f7:7d:a1:16:77:73:3e:37:3a:90:
16:57:aa:07:8f:71:84:64:ab:e9:51:73:ed:90:e5:
5a:82:bd:3c:4e:ec:b1:ec:05:50:d8:ad:8f:e6:69:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C9:61:90:94:D4:15:73:C8:29:6C:AE:EE:AB:C5:C8:C1:89:BA:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.184.0/21
Signature Algorithm: sha256WithRSAEncryption
c7:bc:53:97:09:9c:72:2c:aa:36:b1:bf:71:cd:22:a6:ff:40:
bb:8c:5c:d6:02:fd:7b:84:b0:84:fa:84:a1:3d:3c:5d:9f:32:
ff:8d:67:20:3e:9f:89:35:aa:97:fb:de:76:bd:46:a1:d9:4c:
0b:13:7e:23:b9:c8:ae:58:82:6b:64:b8:e8:ae:ec:f1:d5:fe:
49:30:4f:cd:32:4b:9d:cd:87:6d:2a:cc:9e:3f:8b:2b:15:ad:
cf:d4:3e:18:d1:56:ac:c9:fa:5a:44:f6:2f:97:e8:e1:f3:3c:
be:a8:c2:ed:87:7c:37:ae:d6:fd:95:0f:2e:fc:7a:43:7f:7f:
90:24:45:23:97:52:40:75:87:f2:74:6c:02:7d:6c:b0:73:20:
ba:59:ca:70:75:21:31:80:22:71:80:af:b1:03:35:0c:c3:f6:
20:09:ee:a9:62:0c:2c:46:49:6b:bf:f4:e9:b7:85:e9:80:c3:
25:0a:3d:0d:a9:2c:6f:7f:dc:92:fa:5a:93:c6:22:1c:37:30:
26:6c:66:c8:2a:c2:d8:b9:e2:a2:ed:94:06:22:35:4e:16:77:
24:17:bf:25:6f:07:1c:44:54:94:70:34:6a:e0:fd:34:4f:33:
fb:4b:e3:a5:6c:36:66:d6:bd:ec:fc:53:ed:42:ce:a2:6f:c4:
95:65:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:52:58 2025 by rpki-client