Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d729aa1c-ba17-4368-947b-9641c99e709e.roa
File: d729aa1c-ba17-4368-947b-9641c99e709e.roa (raw, json)
Hash identifier: 7RAesYnh+E0P2087urUEZCMXzCEaZtVbN84yr91bmY4=
Subject key identifier: CB:B0:7B:88:31:B6:27:D1:0D:A9:6B:07:31:81:F5:43:BC:66:B0:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E7CE94B323336E46EA1A3F327E495DB8A90EE38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d729aa1c-ba17-4368-947b-9641c99e709e.roa
Signing time: Sat 18 Oct 2025 01:40:42 +0000
ROA not before: Sat 18 Oct 2025 01:40:42 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7c:e9:4b:32:33:36:e4:6e:a1:a3:f3:27:e4:95:db:8a:90:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:40:42 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=526239c542001623c290244842f04b92313d07a0d3d8352a53c7ec008f70ea19, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:f9:1b:76:e5:37:73:fe:53:45:ed:b9:88:
f3:0d:36:d4:36:c6:ee:8c:80:1f:28:6c:2a:5b:d2:
54:21:7e:f4:89:90:3e:87:0e:40:dd:e1:01:4a:e7:
39:e1:ae:6f:61:3e:4f:9b:b8:6f:31:e4:ca:02:72:
07:46:85:85:5c:71:8f:17:ce:71:97:c5:ef:f7:f6:
f0:f6:b3:7e:3e:f8:61:33:5d:67:18:17:20:f1:a5:
a1:bb:a5:67:6b:82:73:67:a9:8d:5a:5f:28:50:6f:
43:64:17:18:8f:82:8f:28:28:b4:3d:d8:7f:b2:d5:
a4:3f:af:bd:63:16:bc:8f:81:3f:32:b3:ff:d8:35:
4b:d2:1b:9d:c5:5b:27:da:22:fa:a6:2f:94:fb:63:
da:03:7a:dc:cd:c3:f1:04:a1:8a:8a:07:71:18:be:
c1:f2:14:e9:c8:7b:25:a2:3e:80:74:92:43:2a:b7:
cd:0a:e6:06:77:06:43:87:86:38:fd:c0:1c:23:58:
1b:45:0a:eb:55:a1:85:e7:7c:6a:f6:9e:dc:bb:f1:
c5:e9:9b:ba:3e:75:d8:03:a8:c5:c3:43:b7:41:a3:
8c:31:55:bd:ff:3e:2b:b9:35:76:0c:52:73:3e:72:
56:71:7c:91:b1:48:a6:21:1f:76:d0:45:3e:f7:54:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:7B:88:31:B6:27:D1:0D:A9:6B:07:31:81:F5:43:BC:66:B0:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d729aa1c-ba17-4368-947b-9641c99e709e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4e:3b:e0:6c:01:bd:38:ea:2c:fa:20:cf:b9:1f:e1:58:0a:
c7:ac:4d:82:33:b5:d8:99:48:9e:96:9b:c0:59:04:34:89:d3:
46:66:c2:22:ac:96:2f:e0:ef:79:8b:41:fd:08:1b:a0:e0:a5:
98:81:78:cc:4d:38:a8:46:06:1b:09:ef:83:90:77:09:26:bc:
b5:b1:5f:83:22:da:58:4b:bf:71:d2:2a:8d:65:35:65:6a:ad:
af:29:dc:92:25:e6:53:d9:0d:ff:9f:a1:ad:bb:9b:ea:7a:fd:
23:a0:15:d9:2d:d2:5e:83:3f:59:86:4d:82:3c:d1:32:33:6a:
c0:37:9d:a2:d7:4a:e7:95:d6:5e:56:42:1a:68:1a:a2:de:3f:
7d:53:4e:26:ea:94:22:72:8c:31:d0:36:cd:7b:53:a5:46:55:
2a:8e:53:25:76:56:f4:1b:76:05:74:a7:cd:db:a5:22:b4:7c:
2d:10:47:6c:8d:fb:46:c5:fd:f0:56:81:ba:66:bd:17:2e:b7:
17:fd:0e:23:83:3f:9a:82:86:1a:10:ca:ba:e2:49:c3:e9:90:
90:61:bb:36:da:3c:a8:94:66:b4:d2:0b:b1:3d:26:4d:c8:43:
61:f1:b0:b9:c3:0b:17:e0:c2:7d:08:ed:8a:aa:32:0b:4f:c2:
04:e8:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:42 2025 by rpki-client