Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa
File: f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa (raw, json)
Hash identifier: DDHq+Sj2gcK2DxEL4jz5eTL741m5NTfVMXlPpWXyP74=
Subject key identifier: A8:AA:60:F0:47:5C:F9:95:AF:1B:22:57:31:CE:5E:BB:EA:31:E8:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11932BC1CD154FF9014FC217DC5CE10A37F980C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa
Signing time: Fri 26 Sep 2025 00:11:27 +0000
ROA not before: Fri 26 Sep 2025 00:11:27 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.56.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:93:2b:c1:cd:15:4f:f9:01:4f:c2:17:dc:5c:e1:0a:37:f9:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 26 00:11:27 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=6296de77e3775d69a043d99b11637652787e7010558728106b1bfd02b68a6a9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:63:39:57:ea:d9:a0:dd:91:01:fe:1a:41:
ef:7a:2d:f0:df:22:ad:68:f8:ee:04:44:ad:b2:ce:
d6:a2:99:23:cd:c7:dd:b3:c4:c9:af:0b:e0:26:3a:
0b:d6:67:ac:11:fe:55:de:eb:e9:7e:33:c7:b3:22:
6a:85:c9:0c:e4:9e:fb:d2:8d:f6:23:a9:8e:6f:fb:
6a:06:03:90:a6:69:64:c0:05:2d:ff:9c:d1:8e:cd:
f3:cd:a5:17:cf:7d:b0:d1:13:7d:c6:62:62:dc:c3:
66:68:a9:79:3d:28:19:cb:50:63:b2:fd:29:1d:96:
5c:1e:1b:9f:4b:75:0e:82:df:ab:25:a8:9b:21:7d:
7f:8d:0d:ab:b2:cd:39:e3:e6:06:28:55:30:09:57:
9e:5b:01:03:a1:b3:29:2f:86:a9:48:2b:59:67:f0:
97:02:e3:4b:37:a3:c8:77:ab:5d:67:b0:2b:ca:50:
41:89:07:ea:89:e4:d9:43:bc:7a:f3:57:6c:46:cb:
e8:9b:21:72:f4:d8:fd:d1:db:fe:d4:16:e7:22:9f:
92:41:f7:d1:4b:e8:4e:d6:f9:44:c5:e0:0b:b5:d3:
fe:59:0b:5b:37:4f:e5:cb:68:48:c0:72:04:e7:78:
22:e5:74:94:0a:ca:0a:35:90:b7:0e:3a:31:3a:08:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:60:F0:47:5C:F9:95:AF:1B:22:57:31:CE:5E:BB:EA:31:E8:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.56.192.0/18
Signature Algorithm: sha256WithRSAEncryption
22:b7:ac:28:34:fd:1b:d0:8d:97:ef:0f:1b:d3:62:94:19:ae:
1f:d7:44:36:41:5b:dd:84:c5:86:e0:20:bc:6d:61:f5:17:91:
f4:41:cf:1d:46:41:21:fb:20:a2:fd:3f:4d:f3:f4:49:d2:ea:
33:59:bd:4b:28:9a:3f:39:91:75:76:06:45:5d:1b:59:85:3a:
a3:5e:3a:95:b0:eb:b9:9a:b8:a1:df:d8:bc:3d:4d:c0:2e:b1:
e2:75:86:68:33:5a:62:d8:5a:8a:81:ca:d2:84:9d:d7:b3:58:
64:5a:25:94:9f:9b:12:59:eb:98:c1:da:45:cf:f8:73:e2:86:
00:f4:68:ba:2b:2d:27:e5:a0:28:f1:34:82:db:ca:95:81:ef:
d5:55:4f:50:55:33:65:1f:09:32:4a:c7:5d:00:ee:67:33:0a:
ff:3f:92:a9:62:78:03:39:77:60:60:69:04:5a:cd:80:09:e2:
78:47:3a:d2:38:86:95:da:5c:db:63:2c:5e:20:44:af:fe:40:
bc:5d:7a:db:60:a8:6a:a6:4c:59:89:a1:e2:41:04:53:c8:01:
3a:e2:9d:93:14:3d:f9:16:cc:5e:d2:52:aa:1f:29:ca:52:4d:
5a:e6:24:7d:d0:02:a3:28:32:5b:0e:c7:5f:ae:86:f3:c1:c3:
cd:49:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:52 2025 by rpki-client