Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
File: a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa (raw, json)
Hash identifier: ivxH55naP6tnV6BmU9xztAdUIqrm+5tetxfBmaH0hjw=
Subject key identifier: 9F:C0:19:BD:29:B2:12:5B:4C:8C:63:65:07:F4:4F:61:8C:C2:B6:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 202501DF82A333E7F001596A30C47FC8846230B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
Signing time: Wed 08 Oct 2025 00:22:09 +0000
ROA not before: Wed 08 Oct 2025 00:22:09 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.6.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:25:01:df:82:a3:33:e7:f0:01:59:6a:30:c4:7f:c8:84:62:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:22:09 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=75182d148482aefabbee809189f4259e2ca2714eb1979ae5d79e6e299bd1657e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:b3:26:71:ae:69:47:67:f9:55:9f:25:3e:
af:35:b0:64:bf:2e:aa:5f:df:d0:f2:ab:eb:ce:d9:
af:73:14:29:60:4c:10:29:65:b5:05:d6:fa:ed:3f:
04:9e:80:a8:85:31:cb:c9:d2:2f:0b:ea:15:1b:f2:
73:7e:38:25:7d:86:a6:66:79:7b:eb:7d:c0:5f:21:
23:a6:fd:fa:6d:66:2a:6a:99:31:6c:00:4a:ca:a9:
22:16:a3:db:b3:a8:60:8e:51:2e:fd:ee:66:f6:6f:
a3:7d:af:29:a1:c5:f8:28:35:40:7f:22:b4:48:7e:
e3:21:9e:1a:f2:0d:d2:b1:e7:3d:b9:90:cd:6c:2f:
9b:20:5b:81:3d:d3:c0:8b:95:d0:dc:61:c0:c7:e1:
34:46:24:fa:41:86:4e:6f:b7:57:a5:6c:77:9e:a0:
60:21:57:c1:fa:3d:e9:32:99:0a:7f:12:6a:23:2b:
08:9e:1e:1c:18:bc:db:0f:25:49:0d:4d:26:8b:01:
01:3a:77:9c:9c:e9:9b:54:63:e9:01:0f:d9:12:ab:
ab:89:bf:58:2a:33:29:3e:9c:ee:75:8d:55:f3:47:
69:77:46:e8:77:3c:fd:e2:92:3a:c5:ec:ef:5d:86:
0c:48:23:c2:c8:d2:cd:cd:9b:d4:b8:62:23:8b:17:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:19:BD:29:B2:12:5B:4C:8C:63:65:07:F4:4F:61:8C:C2:B6:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:10:e0:43:67:77:63:b5:26:e6:6f:00:2c:70:64:3c:e9:8b:
7b:d7:e3:cf:14:36:02:4c:92:17:8e:e9:fb:cb:eb:97:a5:79:
df:4b:84:e8:36:0d:f4:4b:8d:11:3f:07:d4:53:ac:19:c0:29:
47:97:49:d9:0f:2e:4a:4f:86:66:99:1d:0a:c3:a7:6c:93:3c:
68:0e:dc:be:4f:57:65:07:1d:a7:2c:74:20:9b:ae:15:0a:81:
8b:73:f3:48:e2:41:9b:aa:5b:c1:32:9d:6a:e6:12:80:a4:3c:
d0:8d:5f:c3:a1:52:e5:42:8f:01:ec:12:8d:67:4e:76:9f:97:
7c:f1:dc:93:03:a5:1a:73:e6:de:3d:52:82:3c:ed:ce:4c:59:
c0:bb:24:6e:d4:86:05:c0:f1:b6:fa:c2:53:99:fe:70:41:82:
3b:f0:fc:4d:1d:03:e2:6e:71:80:d1:16:24:97:ce:5d:33:87:
bc:38:95:6a:f3:3d:8b:b5:59:29:f0:0d:f2:ad:ca:2b:0e:ab:
f2:da:72:32:b4:51:88:6a:4b:be:6c:b8:bb:e7:f1:52:9f:ce:
b1:7e:1a:36:ed:de:59:da:5c:58:ae:d2:e6:4b:1b:e9:72:10:
20:fe:d1:d8:73:96:aa:5e:13:bc:0d:47:c3:33:a1:4f:c5:e5:
94:36:30:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:25 2025 by rpki-client