Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1228244-3699-40b3-9192-99a86487e304.roa
File: a1228244-3699-40b3-9192-99a86487e304.roa (raw, json)
Hash identifier: cwTi14j6iyV0XWNmrWxcKDiH2Wsr7RkQflN+jNzeHt8=
Subject key identifier: AD:26:2E:9D:81:EC:6D:11:D7:F6:DB:E3:FF:24:22:1D:71:1F:EB:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C9A330515C4F4FBA1D5920E5442CF56668CD3B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1228244-3699-40b3-9192-99a86487e304.roa
Signing time: Tue 07 Oct 2025 00:52:33 +0000
ROA not before: Tue 07 Oct 2025 00:52:33 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 50.19.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9a:33:05:15:c4:f4:fb:a1:d5:92:0e:54:42:cf:56:66:8c:d3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:52:33 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=f98c4bb14d7b15e185a16c7ef75c3410fcd27c1d060da3d54a45201c074d1a05, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:db:9c:63:e2:ed:c6:13:3a:05:97:22:70:
a0:55:a6:79:7f:4d:71:2c:3c:35:ff:be:49:e4:e6:
20:2b:3a:a1:36:23:ba:a1:af:28:77:13:3d:82:7b:
f3:33:18:ec:d2:b9:28:17:e1:29:43:02:e9:ba:15:
08:34:8e:e5:75:34:60:96:e2:67:d7:c5:5f:ad:91:
0d:1d:c0:b7:e2:b0:d4:9c:de:44:cb:14:a0:28:06:
ec:a8:5d:76:36:f0:b2:11:7d:ff:57:a5:89:2b:4d:
a9:9a:05:7d:33:37:de:e6:e2:ba:2e:09:a9:c5:b4:
17:88:b0:89:0f:97:3a:9e:2a:fa:3f:de:e0:6e:a3:
c7:93:3a:7f:14:d1:c9:27:9b:71:d1:4f:88:09:74:
b8:6b:a5:1b:6e:92:37:c9:1e:ce:68:35:f6:a6:ea:
df:47:cc:26:04:95:d1:19:07:c1:9c:ac:00:86:0c:
70:3b:38:78:62:d4:cc:dc:cd:8c:c9:d7:26:c9:b2:
f9:32:68:0a:95:54:26:f1:20:24:0c:a1:ee:0b:4b:
f8:e6:70:41:99:bc:2c:77:59:58:b8:64:26:a8:36:
3e:df:cd:82:65:95:5d:ff:40:4f:12:f5:82:76:34:
6b:5b:28:c9:8e:43:d2:51:5d:03:01:a1:d4:1a:0a:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:2E:9D:81:EC:6D:11:D7:F6:DB:E3:FF:24:22:1D:71:1F:EB:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1228244-3699-40b3-9192-99a86487e304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.0.0/18
Signature Algorithm: sha256WithRSAEncryption
85:f2:21:84:25:7a:c9:a7:41:e8:01:71:16:75:ee:43:32:23:
0f:7c:71:d6:b3:31:8c:16:9c:f2:88:6e:35:62:98:db:92:4d:
f5:b2:fa:07:2c:00:d8:e2:24:54:02:fb:3a:d1:a8:f2:d3:a1:
d7:82:a6:ac:cb:06:2b:23:4c:cb:56:69:57:5c:3f:44:41:4a:
1d:26:9f:b9:88:4d:b3:7f:b4:fc:c4:2a:d7:f5:16:7a:e2:6d:
b3:34:97:cb:d3:8c:c9:58:35:2a:bd:5b:af:36:ad:58:b3:19:
af:fa:74:88:6b:35:f4:c6:17:96:98:fc:74:95:61:d3:87:73:
50:de:6a:01:42:a6:42:b6:6c:2b:91:cd:f3:ac:ec:e0:95:f8:
e4:5b:8a:5d:16:74:5a:76:99:9b:39:8d:74:c0:1e:62:74:29:
04:97:9f:80:f9:cf:0e:e5:81:51:88:7e:f9:21:d7:22:41:f9:
65:dd:c9:06:39:a4:5b:5d:db:25:21:01:7e:b3:56:ca:cc:ea:
e8:80:a1:c6:4e:41:86:89:c2:18:eb:f7:80:96:46:77:f4:e7:
21:c4:b5:53:3a:03:68:de:a1:b7:6a:14:07:8a:86:22:0b:b3:
6a:6e:84:4d:7e:29:fd:3d:5c:07:5f:fc:46:c3:7b:4f:8c:cd:
12:46:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:39 2025 by rpki-client