Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa
File: 285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa (raw, json)
Hash identifier: 8GM3Ts8KyNraXg+Ebom8TH0iHdKBPLRmrrEQXv0HYFc=
Subject key identifier: 98:0D:A7:0D:14:13:69:B9:26:02:F4:F4:BD:88:6E:12:A7:11:2A:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C97DC3E3EF8B07919CAE800948CA340FADB2E38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa
Signing time: Thu 13 Nov 2025 00:11:41 +0000
ROA not before: Thu 13 Nov 2025 00:11:41 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 72.44.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:97:dc:3e:3e:f8:b0:79:19:ca:e8:00:94:8c:a3:40:fa:db:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:11:41 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=49035beeaad8308ede94340d65aefa02e22ab41887fcfee73e7e8a1c020d4af4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:a5:d5:24:20:7b:c9:7f:b5:f0:e2:7e:c7:
91:0e:56:47:55:1f:15:8f:a0:70:3e:f4:85:90:4b:
13:39:fe:8a:36:07:41:cd:89:5e:01:ce:c5:e8:f8:
0c:9e:a3:2a:2b:dd:ff:59:f7:62:c1:15:2f:d6:59:
b2:90:ef:ae:04:a0:97:fe:d6:df:ef:6a:fb:c7:40:
36:e2:49:cb:f7:dd:fc:88:e5:57:d7:60:44:8c:00:
26:f8:06:05:4b:8b:8a:3b:44:06:68:c3:3a:c0:16:
b6:1e:69:a5:cc:82:a8:7d:00:b1:d1:9b:04:87:a6:
dc:ba:b2:ad:a7:cb:2b:93:6b:e9:fe:df:cf:5a:28:
24:45:33:1d:b5:bb:29:f3:f7:3c:6a:36:e4:bd:50:
2b:0a:66:d9:54:1c:c0:ff:62:79:ee:87:57:6e:76:
fe:e7:24:f4:5d:3f:7a:36:29:6d:81:1d:bb:f9:5c:
eb:a5:8d:2e:c3:f3:67:56:6b:a7:b9:8a:97:5c:b9:
0b:6b:6f:32:e9:d9:36:f1:39:e0:b4:c2:59:2a:83:
b5:67:2e:e8:42:be:80:2a:df:9f:bc:1c:d9:ab:36:
ef:a7:51:03:5a:a5:0c:84:85:f8:c4:3c:12:cf:03:
be:10:30:fa:0f:6c:d1:fe:62:0b:62:40:64:13:6d:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:A7:0D:14:13:69:B9:26:02:F4:F4:BD:88:6E:12:A7:11:2A:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/285ad9f9-46a4-4687-aedf-8c786a7c09c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.36.0/22
Signature Algorithm: sha256WithRSAEncryption
92:ad:b6:c3:6a:7e:d7:6d:3c:26:09:9d:9b:6d:35:49:8b:1e:
46:de:2e:33:51:84:f9:b8:78:a3:e8:a2:12:22:1c:ca:0d:58:
a7:a8:77:45:19:b3:5e:bf:f1:bd:4c:f1:d4:65:b5:7a:a2:ed:
f5:de:7a:92:ef:5a:cb:44:85:75:85:35:f2:92:65:05:f0:8b:
87:72:99:88:c5:6d:05:ca:35:3f:5c:75:4f:8c:79:b9:9c:31:
3b:8a:ce:e1:d2:fc:16:05:99:3b:61:8b:a2:3f:de:3e:6c:43:
f4:59:0b:6f:85:28:13:61:d8:d9:d3:05:2a:43:95:d1:a2:23:
bc:e1:03:ca:57:87:13:5e:2a:8f:0b:20:07:3b:8c:8e:ac:08:
80:4f:8e:b6:6c:01:35:59:28:f6:1b:d5:df:70:87:83:d8:cc:
b6:f9:c3:9f:ac:06:db:27:3f:9b:81:98:72:cb:cc:13:0b:7f:
3d:73:6e:91:39:f5:39:1f:5a:e7:96:c6:6b:d4:3b:80:a7:1b:
dd:84:74:29:8d:60:6c:ee:bd:1a:3c:6a:33:99:71:bb:42:d5:
d2:ad:96:82:10:8c:e4:51:c8:3d:a0:c4:0e:3d:3f:8f:a6:62:
e6:08:07:59:01:73:3f:4c:5c:1e:7a:27:0b:ac:2c:86:8e:c9:
f0:e5:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:51:33 2025 by rpki-client