Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b638a86e-2174-4795-b7a4-540333a16485.roa
File: b638a86e-2174-4795-b7a4-540333a16485.roa (raw, json)
Hash identifier: ryUR3oXqpit0hRvN3rdBI4f2qUiMIbfjMs/gRYi52P0=
Subject key identifier: 48:23:9B:DA:54:28:59:9C:78:B2:3D:18:CB:D3:1F:CE:03:A8:39:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F20478FEFBEE3DCEE1A3F4C2E195DF432D34F31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b638a86e-2174-4795-b7a4-540333a16485.roa
Signing time: Tue 21 Oct 2025 00:00:06 +0000
ROA not before: Tue 21 Oct 2025 00:00:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:20:47:8f:ef:be:e3:dc:ee:1a:3f:4c:2e:19:5d:f4:32:d3:4f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:00:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=1f36f4cc6b2dbb5df2f2cc0ee1ee81ced471c1495b217644e6ea5b23eea0be1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:2e:68:cb:9c:fb:06:b0:28:7b:e2:41:f5:
78:15:31:27:8d:1d:9a:1f:01:8e:e6:44:ba:5b:0c:
f3:81:81:7c:fc:46:48:b2:28:50:6a:54:02:7c:96:
f0:93:bc:10:28:7c:08:c0:8f:24:d0:44:15:ca:2c:
34:f4:73:07:5d:b0:c7:13:f3:22:d4:bb:01:a7:60:
fe:a3:6e:11:0b:f8:53:c4:13:75:24:86:d1:b8:7a:
e9:2a:77:51:a5:74:c3:7b:b1:4a:14:e3:ff:79:23:
9a:d4:08:01:d7:ec:f9:bf:d8:a3:03:b9:9a:d3:a4:
20:73:53:83:60:bf:2a:ec:59:d0:80:92:24:fa:29:
29:dd:c1:41:0d:d7:12:d4:a0:39:4d:aa:ba:79:ae:
b5:7e:80:17:fc:79:ee:7e:b5:ff:c9:19:a7:46:8d:
97:df:66:e3:5e:dd:3c:14:4b:ec:7e:92:5a:21:62:
29:7f:59:40:74:8a:47:c1:05:31:39:80:d6:79:c9:
c0:e1:79:c2:5c:52:e2:94:76:76:f1:56:08:ff:d9:
04:fa:a0:ea:21:00:6a:5b:6e:2b:0c:e4:3f:63:5b:
72:e7:f6:e2:4f:01:04:d9:23:7d:47:92:64:d5:5c:
fb:5d:15:d6:35:1a:17:62:06:08:91:e4:a4:7f:e5:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:23:9B:DA:54:28:59:9C:78:B2:3D:18:CB:D3:1F:CE:03:A8:39:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b638a86e-2174-4795-b7a4-540333a16485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:ae:ae:4d:4a:d1:3d:3e:25:10:80:66:66:ef:67:2a:26:81:
1b:3f:d2:7b:3d:a4:e0:ea:d0:c7:21:cd:90:4c:75:0a:e9:27:
66:3e:48:0f:57:2d:9d:e0:02:9a:19:cb:e7:73:59:4c:be:89:
82:3d:4c:94:31:74:13:6c:db:d3:73:29:c6:00:a1:25:92:8b:
b7:bb:5e:1d:47:5d:95:83:73:a9:32:d2:13:19:54:ee:7e:05:
bc:a9:23:90:fb:a9:a7:27:c9:13:fb:d7:94:94:fe:2d:15:dd:
90:fe:2f:c6:f6:e9:47:c6:2a:b8:cd:4f:9a:97:44:f9:fd:1d:
6f:8f:dc:c1:86:fa:54:80:8d:63:33:b8:8d:72:94:ef:61:cf:
37:da:4d:35:7c:ab:04:9d:4d:bf:7c:63:00:27:2c:b9:11:d2:
ee:3e:ef:3a:5e:09:d3:0d:7d:f6:d6:a8:9a:a0:fc:7c:6d:b4:
b4:d6:fe:bd:80:6a:1c:59:24:57:b6:21:03:41:e2:70:07:d4:
83:2d:a0:95:4f:f7:48:73:90:de:f8:d2:33:c8:59:fe:39:3d:
3a:71:8d:1b:02:e2:ac:2b:47:1c:4f:59:b7:81:d3:28:8e:c1:
36:3a:fa:16:96:1f:a9:c4:87:b1:ec:e6:a8:c6:da:98:43:b7:
1d:97:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:13:49 2025 by rpki-client