Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a2fbad4-ef20-49dd-9b21-8abbc46cef31.roa
File: 0a2fbad4-ef20-49dd-9b21-8abbc46cef31.roa (raw, json)
Hash identifier: UN82aCUiudPhdKuKZjyhwc7f6MDSYZVdN5lYSWT2eek=
Subject key identifier: 6A:04:D3:82:05:E4:E1:76:F2:E5:E9:0F:F6:3F:19:CC:8D:57:BA:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0746FC4F0581214A5EFC484E72560D2604D37EBB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a2fbad4-ef20-49dd-9b21-8abbc46cef31.roa
Signing time: Tue 23 Sep 2025 16:40:46 +0000
ROA not before: Tue 23 Sep 2025 16:40:46 +0000
ROA not after: Tue 28 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:46:fc:4f:05:81:21:4a:5e:fc:48:4e:72:56:0d:26:04:d3:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 23 16:40:46 2025 GMT
Not After : Oct 28 23:59:59 2025 GMT
Subject: serialNumber=39e5dc063c557a67b1321550d9f6df6931180858b0e3f0390f43f19cd240e040, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:21:75:53:5b:99:e4:1e:ec:b1:fe:52:9d:
15:ca:3a:99:9c:27:65:cf:16:48:20:c8:30:73:89:
b2:66:03:1a:a4:7f:4f:a1:20:6f:40:98:fb:d5:07:
3d:98:9f:5f:6f:58:ac:94:4e:83:cf:43:cf:18:1b:
db:74:3d:a6:9d:52:25:9a:79:92:f3:8b:7b:79:b5:
93:26:30:ad:3c:20:16:6a:d8:1a:0c:fc:78:d0:59:
a0:2d:a7:5d:62:45:2d:ce:18:be:20:fb:ec:73:7f:
30:47:6d:c7:17:63:ab:b6:8e:60:c8:a3:89:9b:1f:
ec:9e:6c:24:bb:4d:ee:93:83:b2:f6:cc:27:db:0e:
e6:ba:4d:ee:be:21:df:4e:78:63:29:d1:87:d6:d9:
0b:03:2c:52:7b:2b:a1:b6:9f:d9:e0:6b:15:8f:98:
5b:ec:83:cb:33:ca:bc:3f:33:65:ab:3a:5c:d2:aa:
3e:74:bb:31:30:3f:3c:2a:09:5c:14:4f:a4:49:09:
ba:7a:02:93:98:19:24:75:c0:8b:7c:65:54:a9:ae:
36:41:c2:53:4e:8f:1d:77:0d:fa:11:b9:6d:49:24:
9b:db:75:ef:e5:85:d6:cf:88:4f:16:cc:a0:a5:d3:
40:12:10:01:37:6e:33:50:a3:e8:17:50:92:39:43:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:D3:82:05:E4:E1:76:F2:E5:E9:0F:F6:3F:19:CC:8D:57:BA:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a2fbad4-ef20-49dd-9b21-8abbc46cef31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:01:ea:e6:ca:61:e9:21:57:7e:fa:e1:9a:9d:dd:11:62:2e:
86:dc:d0:d0:7e:c0:75:7d:d0:a1:94:4d:16:d6:43:f4:5a:4e:
9d:6c:6f:3f:58:97:e4:2c:ad:7c:02:d7:ac:2e:df:fb:85:1f:
fc:73:ac:1a:51:65:de:a1:c5:f6:21:5f:c2:64:4a:db:79:7b:
17:7a:b6:fa:7b:a7:27:8a:fa:7d:20:51:90:a6:0d:8b:b6:07:
10:e9:28:df:03:ec:b7:60:03:c6:39:b7:26:d7:1f:69:48:ba:
4d:ef:30:9d:6f:b7:12:cf:a8:4f:a5:eb:8b:6b:84:63:99:8a:
35:5c:10:bf:8d:ea:6d:1f:64:41:34:9b:b0:e2:45:9a:2a:61:
d0:ea:6a:ca:e4:ec:28:d8:06:81:81:ab:69:66:3d:bb:6a:f3:
3a:10:28:a1:6c:13:96:32:e3:e1:91:e8:39:be:1f:01:59:7e:
5e:02:e8:63:a2:17:02:b7:1a:7c:68:1b:d7:c8:e9:44:38:05:
1a:6f:d1:97:fe:dd:14:bf:cb:e3:b2:8c:cf:c3:1c:e7:54:7a:
c7:d4:23:ef:44:df:9f:64:5b:a3:02:7a:ea:cc:69:ea:fa:2f:
c1:de:ce:4d:2e:6b:d6:4c:9b:97:63:72:eb:5c:d6:be:a2:90:
c7:6e:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:05 2025 by rpki-client