Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e20983f-78cd-411a-8209-cb234b78525f.roa
File: 0e20983f-78cd-411a-8209-cb234b78525f.roa (raw, json)
Hash identifier: 13DCRgoCi1VSbpQ6rTF8izqmOcNg7mdSLVpiLjT/jMw=
Subject key identifier: 46:98:73:E4:53:7C:37:69:AD:71:FD:1C:D7:69:AE:C9:AF:59:DC:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 041345BBBB0F3CE8BD9F15C3AB8412B8F87242E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e20983f-78cd-411a-8209-cb234b78525f.roa
Signing time: Tue 07 Oct 2025 00:52:40 +0000
ROA not before: Tue 07 Oct 2025 00:52:40 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 50.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:13:45:bb:bb:0f:3c:e8:bd:9f:15:c3:ab:84:12:b8:f8:72:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:52:40 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=5b5130ae5b95a7a1d57031e3e5fc3a0cdd588b07a807d202172268b19cf564f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:a8:51:a1:10:46:6c:6b:2f:4d:c2:f0:c5:
73:78:4d:3d:67:5a:fd:6c:e8:bd:b6:4f:4b:72:4b:
a8:ba:41:cb:7a:c4:cc:ad:b4:1c:64:90:96:d5:d5:
33:3b:80:97:70:8f:5e:1d:90:3a:3b:04:71:9e:c7:
79:a8:00:d4:1b:3b:4f:18:09:47:6a:89:5b:4c:cd:
5c:bb:61:a6:dc:8d:08:ae:6d:51:87:ca:8e:f1:96:
4a:0e:2c:a6:1d:b8:5e:a1:3f:10:9a:25:36:5d:63:
40:09:8e:eb:8d:17:5c:9a:57:f5:9b:7e:14:14:66:
ed:36:e2:1f:45:5b:a8:10:1a:d9:2a:73:7b:8d:c7:
fd:cd:15:72:0d:69:cd:7d:c2:90:e4:b0:80:4e:2a:
79:dc:93:d8:e8:e2:16:f3:e2:6f:45:71:c2:6c:f9:
5c:48:f9:75:44:7f:b9:56:1e:00:3f:4c:9e:04:98:
37:f4:8e:ae:a3:c5:d6:22:37:27:bb:96:3a:b7:f3:
69:8d:29:8e:93:b9:bc:d5:42:e3:5c:ec:ba:c8:24:
5e:f7:1d:dc:40:1f:76:24:5d:95:e0:f8:d8:58:1c:
47:a7:42:8d:af:1d:eb:00:cc:25:39:ab:b2:e6:53:
1a:83:fa:6a:9c:08:92:f3:c9:51:83:e2:35:9e:8e:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:73:E4:53:7C:37:69:AD:71:FD:1C:D7:69:AE:C9:AF:59:DC:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e20983f-78cd-411a-8209-cb234b78525f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:fd:3a:d7:65:62:37:8a:76:db:06:98:a7:c8:24:cf:cb:9d:
d8:85:76:93:28:90:35:98:f4:a7:54:7c:07:de:54:fd:84:36:
02:17:df:ae:ca:2f:d2:33:bf:fb:82:d6:0a:75:63:20:ba:0f:
5b:7d:d0:e7:ee:63:ff:1e:b9:17:bb:b5:4a:d1:bb:d3:11:0e:
16:2f:6a:67:a2:7b:d0:9f:68:ee:db:4d:bc:f4:ae:27:b8:6c:
cb:26:25:be:61:80:38:a9:27:0e:1d:82:8b:73:96:d5:80:6a:
9b:7d:4f:ac:ad:07:68:d6:e2:08:98:98:0f:ea:c9:ed:db:8d:
32:a2:ab:6f:b0:4e:4d:48:24:6d:6f:e7:1c:67:d8:f6:0b:70:
9d:22:33:21:d2:99:bf:fe:f2:e2:79:43:62:11:74:d6:e8:a8:
23:3f:80:1a:90:c7:62:fc:1e:15:3b:79:f1:38:40:a4:1b:36:
49:ef:ad:b6:92:e9:2e:54:85:e9:e3:c2:1f:0b:00:18:c3:47:
ee:81:2b:22:2e:a7:60:d1:51:4b:d2:f4:ee:4c:0d:eb:de:eb:
2a:20:90:3f:9d:6b:e8:78:36:35:95:05:30:e4:ad:58:f4:94:
51:1f:d5:14:80:6d:23:4d:da:d3:e1:4d:af:2a:79:fe:66:c8:
01:c9:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:44 2025 by rpki-client