Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e484d7f4-4ecb-4fad-83ce-f09e5e6bd531.roa
File: e484d7f4-4ecb-4fad-83ce-f09e5e6bd531.roa (raw, json)
Hash identifier: Jg5q9xwh39sWDtIILkzU9yu++f3LVBJnUj0ncjpIN38=
Subject key identifier: 39:F6:A1:EB:31:2E:36:85:AE:2E:91:6D:26:B4:F7:92:E1:A7:F9:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0145DB705B163FF2B08C18343194C38FF09ED169
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e484d7f4-4ecb-4fad-83ce-f09e5e6bd531.roa
Signing time: Fri 17 Oct 2025 00:51:59 +0000
ROA not before: Fri 17 Oct 2025 00:51:59 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.184.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:45:db:70:5b:16:3f:f2:b0:8c:18:34:31:94:c3:8f:f0:9e:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:51:59 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=00b50049c327966869543d89f28570d9833d708b434ea9290f25b5a8ba7999a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:97:5e:ac:2e:8f:37:5e:90:bd:b7:5b:46:
3f:58:7c:72:69:de:1f:3e:61:e8:d5:86:99:ce:55:
0e:61:a9:39:69:db:dc:a9:68:20:ac:93:dc:e6:35:
d8:6e:c9:01:aa:9c:e5:38:e8:fe:3b:6f:d3:66:1c:
ec:43:39:3f:c3:d3:19:d6:d2:88:ef:ec:45:d4:df:
4a:19:ec:1c:70:e8:ff:39:d7:20:97:b7:c4:49:2a:
d4:fa:f1:a1:eb:1c:e2:75:b3:bb:81:11:ce:aa:87:
70:60:b8:1d:b4:4f:22:8c:6e:cf:4e:65:67:80:56:
72:ae:41:1f:40:64:85:69:05:3f:ad:0c:f9:e0:80:
78:74:eb:d1:05:6b:b2:26:b7:f5:97:65:f7:b0:01:
df:9d:64:6c:3c:d7:67:77:b4:a3:36:df:6e:14:a5:
74:b7:dd:fc:c1:ac:4f:fa:e7:49:91:7f:6c:26:52:
77:e2:b5:44:ac:ec:0b:2b:d8:11:9a:05:71:a0:bf:
11:d7:0c:61:c6:34:4c:9f:da:df:90:7f:ab:97:6c:
3e:a1:4b:ce:58:cd:2a:5b:7a:d6:50:4d:1b:d8:bb:
41:40:a9:2e:5f:8c:95:fa:b3:77:6b:6e:31:30:e1:
83:74:4a:ab:dd:69:12:46:7b:e1:81:3e:2a:fe:9d:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:A1:EB:31:2E:36:85:AE:2E:91:6D:26:B4:F7:92:E1:A7:F9:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e484d7f4-4ecb-4fad-83ce-f09e5e6bd531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.184.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:ec:c8:c2:50:cc:20:0b:48:9d:43:18:0e:68:4e:0c:07:bd:
97:30:cb:7d:d3:a9:15:c3:ea:93:cf:a9:fb:8f:4f:63:56:71:
4d:98:18:a4:6f:f3:70:10:31:cf:15:7d:d8:54:43:7a:03:a8:
b5:1f:4c:18:eb:48:29:fe:d1:51:52:4b:17:12:9f:d0:6b:cc:
40:7f:e9:6a:bf:96:02:14:03:ac:81:3e:ba:60:3d:22:fd:a7:
f6:54:a2:1c:d5:29:10:15:88:ca:e6:13:90:f3:1f:a2:c5:ab:
e6:1a:1d:8d:1e:8e:98:ea:b8:ac:25:58:fc:af:0e:08:27:f0:
c9:b0:aa:a6:47:30:11:8a:f4:b2:db:68:0e:23:31:0a:74:80:
29:61:db:02:ca:8d:21:3f:01:36:cb:e6:f7:84:59:aa:1b:3f:
7e:81:a8:4f:cf:b2:ad:6a:37:5d:46:69:40:19:b5:c5:3f:53:
09:b2:ad:75:60:44:a6:37:5c:59:e2:2b:b3:0f:71:72:51:47:
3b:7e:09:4c:73:9d:3a:98:80:01:0b:07:e3:18:32:d0:30:d7:
66:7e:5b:f5:d4:65:1f:71:b1:e7:db:aa:3f:e6:31:f7:23:55:
17:14:0e:73:fd:37:08:c3:50:6b:50:56:ff:0f:d9:9c:dd:b0:
f8:b6:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:54 2025 by rpki-client