
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c20a4339-eb63-46d8-abbf-87327eb50023.roa
File: c20a4339-eb63-46d8-abbf-87327eb50023.roa (raw, json)
Hash identifier: UJo4BTnDQ7Y89fj8yGrhVoptnuAiXLWMN25AxaC+Nlo=
Subject key identifier: 5B:B8:8A:AB:AF:D6:2C:58:8F:80:65:E3:CD:40:B3:12:C5:EA:2B:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56A622F236D3E16E079671B87058632CCB5E0585
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c20a4339-eb63-46d8-abbf-87327eb50023.roa
Signing time: Sat 18 Oct 2025 04:01:45 +0000
ROA not before: Sat 18 Oct 2025 04:01:45 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.193.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a6:22:f2:36:d3:e1:6e:07:96:71:b8:70:58:63:2c:cb:5e:05:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:01:45 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3f05fd22582cdb443dd06bbbe1b4cced050116ea2605cbece0309a852cd359bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:84:4a:18:ed:ca:cc:df:77:b7:99:a7:ea:
38:7f:d9:19:fd:7a:dd:08:2d:32:eb:36:0e:26:39:
21:75:3f:fd:e0:97:61:51:75:4b:89:81:03:d8:4f:
0b:36:39:03:e9:4f:9b:66:73:27:67:90:fd:e3:77:
1f:f6:5f:d6:25:a1:79:3b:1d:27:91:fd:4d:b6:4b:
a9:a8:b8:87:4e:9b:b4:69:64:0d:04:e4:e5:e8:ae:
34:f7:2b:9e:84:c1:19:c6:17:fe:f1:f5:94:30:a0:
c7:da:19:60:c5:53:25:08:5b:cb:c0:28:24:d7:c7:
a4:c0:4b:69:9b:9f:66:e2:81:d4:2f:9a:56:ef:8d:
a5:e3:53:2c:49:b6:e7:48:3d:98:31:5c:82:68:14:
d4:0d:a0:fe:dc:2e:a7:3d:34:e3:0e:eb:55:13:6b:
c8:2e:b2:f7:19:7c:ca:53:4b:9d:d0:b4:d6:b9:1a:
60:0e:c6:38:01:ab:89:d2:ef:aa:23:5f:79:bf:30:
a2:5c:3b:b3:a8:54:7f:23:be:fc:86:1a:be:36:e5:
6d:2a:d3:be:21:59:35:ab:7d:e6:74:ef:93:4f:2a:
ed:d4:70:40:39:9d:46:8e:f4:6a:a6:55:76:40:ec:
c4:f2:53:23:47:9f:60:15:64:50:19:ac:8e:db:a2:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B8:8A:AB:AF:D6:2C:58:8F:80:65:E3:CD:40:B3:12:C5:EA:2B:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c20a4339-eb63-46d8-abbf-87327eb50023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:16:3e:12:8a:e4:87:9c:aa:ce:2d:45:cb:ff:0e:24:1b:23:
bd:c8:82:e4:60:a3:65:10:0f:36:3c:fb:f4:50:dc:1d:59:08:
da:78:7d:2e:2c:53:26:17:a7:67:96:8a:34:d3:cc:ab:04:b5:
db:c1:52:e8:67:41:7c:c7:cd:b9:7a:68:26:68:26:0e:3d:53:
a7:6e:c7:72:2e:db:36:f4:59:3d:aa:c6:31:5e:e2:d1:2c:05:
06:cf:f4:1d:43:ba:90:f5:cb:c5:7c:e1:5d:aa:12:03:97:f1:
95:54:9d:75:ee:f6:bb:d6:ff:3f:aa:96:51:68:26:3f:c5:8a:
24:cd:41:d6:78:58:8c:d1:f5:5b:f3:b3:d8:66:6a:77:f2:e0:
34:ee:a6:80:ae:71:4d:d4:e3:97:a6:4a:ca:82:70:c3:76:ea:
91:58:4d:49:be:ba:da:ed:5a:d5:98:86:b9:67:86:67:56:48:
7b:7f:76:e6:97:87:32:05:80:88:06:f2:ce:b3:c1:94:8a:a2:
12:5f:66:5f:5c:43:bf:53:2e:8b:ca:ce:69:21:ac:fe:3a:70:
4a:69:36:de:bf:fa:32:fc:57:d0:d9:0c:93:52:24:54:c3:2e:
e9:46:e4:be:50:af:cb:74:96:e5:a3:85:47:4c:d8:26:21:69:
46:b9:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:26 2025 by rpki-client