Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4714e74-7b34-4615-a9e8-94d381af06c5.roa
File: c4714e74-7b34-4615-a9e8-94d381af06c5.roa (raw, json)
Hash identifier: dDvltESMxl6Y/diaM8If/DD6xAU8Af8t4lkdLCaErcI=
Subject key identifier: 0E:15:52:2A:87:D2:F7:6C:CF:DC:44:68:26:89:6A:74:17:1A:E3:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 47818624C577B4E7589BC65190BA35FE8F4698C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4714e74-7b34-4615-a9e8-94d381af06c5.roa
Signing time: Tue 07 Oct 2025 00:21:40 +0000
ROA not before: Tue 07 Oct 2025 00:21:40 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.112.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:81:86:24:c5:77:b4:e7:58:9b:c6:51:90:ba:35:fe:8f:46:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:21:40 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=e54e2bccb23b9bc3400a39ec6f12c7d5f4716c2d406e511bc390593898f10ea5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:83:e7:af:8a:f6:7f:b6:48:23:f5:f2:2e:
c6:29:98:e9:3c:4f:3f:5d:62:dc:d1:38:33:49:7e:
3f:0d:30:ab:d1:6a:8e:76:e1:13:c2:97:5a:3c:98:
30:d1:d6:ee:34:a7:86:04:90:d4:18:38:c6:15:68:
72:a5:eb:e1:1e:57:49:a1:d4:12:70:0f:75:67:d5:
b5:e1:3f:5a:f7:13:15:36:60:7b:80:11:13:61:42:
61:a6:ac:17:9e:aa:e0:59:f8:78:88:06:c6:e2:8b:
5c:b7:a2:6e:f8:dd:7a:0e:bb:2a:10:9d:91:64:2e:
8b:06:00:32:a6:19:19:bc:d9:2b:1e:df:7b:93:5c:
6f:c9:66:ef:34:9b:0f:9a:d8:f8:39:37:5b:b3:ee:
ce:c2:d7:4f:c5:fb:c2:ae:89:af:da:8d:56:31:f1:
2d:9c:74:57:3e:01:e2:4b:70:7d:45:62:58:88:53:
0c:13:7f:c4:58:d5:27:6f:85:cc:25:8b:d0:d7:82:
f0:87:6a:ea:59:c9:b5:b0:85:c5:49:ee:c6:d6:d8:
c0:96:c1:2b:86:a6:e1:b3:d4:1f:da:ee:fd:d4:28:
67:52:c5:b6:d6:56:1a:7b:05:6e:b4:71:19:19:de:
f3:68:b2:04:ce:4a:cf:d4:33:12:70:36:e8:32:a6:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:15:52:2A:87:D2:F7:6C:CF:DC:44:68:26:89:6A:74:17:1A:E3:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4714e74-7b34-4615-a9e8-94d381af06c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:93:ec:19:4f:bb:bb:c7:8c:fb:2f:a4:43:33:01:c9:df:0d:
c7:60:40:1f:f5:56:05:cd:ac:c2:5b:e3:c7:ee:31:6b:f4:0e:
23:43:4b:ca:b4:8c:f2:95:d8:7d:58:19:c3:a5:c0:e6:bc:3b:
bb:f8:d4:90:ad:c1:cc:eb:21:02:80:48:f9:0e:b9:24:39:09:
57:df:f0:2b:a3:bf:08:fa:99:36:6d:e5:dd:5c:2a:35:1e:14:
8f:9b:f6:d1:58:2a:4b:8f:a4:7d:43:5a:aa:3f:01:9d:19:4f:
dc:66:2b:07:61:21:d7:30:45:29:5c:ca:fc:e2:6a:e6:c4:02:
ca:26:59:03:0c:4c:e7:94:d6:a3:a0:aa:58:68:18:b1:d8:b0:
59:33:5b:f6:80:ed:d4:9e:71:9c:50:6a:bd:cb:2e:67:56:8a:
85:01:07:6e:8e:a4:f9:77:96:26:de:8f:3c:af:81:af:bd:fe:
ad:3c:0a:74:d8:ae:d6:30:a7:d2:ad:4f:6d:ff:8d:f6:36:2c:
48:22:7a:ee:fa:ca:c8:51:b7:4e:6b:5a:9d:d7:78:97:6f:e4:
3e:ae:e0:0b:2c:50:cc:12:83:a5:a2:3b:52:dc:4a:a4:a9:3c:
d8:bb:cf:9b:3d:86:c2:d0:38:f6:83:77:d9:5d:29:5c:f8:b7:
e6:a6:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:19:46 2025 by rpki-client