Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35ea9366-057a-498c-b6d6-c4105c0096b0.roa
File: 35ea9366-057a-498c-b6d6-c4105c0096b0.roa (raw, json)
Hash identifier: RGL1XM3trW+9sM+y8EA8TdUhft8g4Muh7Bnr099MM8s=
Subject key identifier: CD:8A:E3:09:B6:CD:7F:68:47:11:FE:FA:F5:7F:46:DC:5A:91:95:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46E3685C78B6ADAC69CFB334BCAC375B07A22D95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35ea9366-057a-498c-b6d6-c4105c0096b0.roa
Signing time: Tue 07 Oct 2025 15:01:13 +0000
ROA not before: Tue 07 Oct 2025 15:01:13 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e3:68:5c:78:b6:ad:ac:69:cf:b3:34:bc:ac:37:5b:07:a2:2d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 15:01:13 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=a7ff38eca8013d3bd1ac95c2f008951a286409863bdd0664d1515e5ee4281595, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:98:6a:59:ab:65:dc:d7:ed:0f:23:dd:de:
01:b9:82:31:fb:c6:30:be:90:35:01:f1:1f:11:be:
00:13:7e:31:33:02:d3:47:74:a1:ee:20:b6:88:c7:
27:de:d3:fe:b8:9c:57:b3:14:c3:29:03:65:88:ef:
38:c7:71:4f:80:e8:c4:e2:45:3e:4e:e4:02:d0:d5:
6f:8f:e5:0b:bf:6b:61:a7:b9:e3:47:e0:e2:40:18:
ed:ac:1e:cd:82:56:fe:c9:a2:6f:ec:9d:86:54:b1:
19:44:21:93:12:9b:24:aa:29:45:1b:3c:b6:28:57:
7f:d4:69:cd:de:3b:c4:c7:ba:99:56:6d:f5:8f:f7:
88:bd:cd:4d:a2:21:cc:e2:9a:f5:5e:89:69:88:f5:
18:f8:47:33:82:c1:a1:f1:c2:f8:af:43:99:3a:68:
ea:4d:7d:ab:67:e5:a0:34:39:0e:76:bf:38:bf:3b:
d5:9b:fe:85:1a:57:46:29:33:4d:77:58:9e:d1:4e:
ac:7d:49:9c:2c:df:6a:5b:c5:80:12:cd:39:c6:b7:
14:ac:56:4e:5c:a7:7a:63:f5:a4:f8:4b:13:7d:b8:
e4:25:d1:8c:fc:aa:19:e9:f0:7f:b8:81:22:d5:c3:
38:f4:83:f5:8a:9e:9e:af:a8:67:20:4a:f9:e8:8b:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:E3:09:B6:CD:7F:68:47:11:FE:FA:F5:7F:46:DC:5A:91:95:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35ea9366-057a-498c-b6d6-c4105c0096b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:13:ac:76:d0:c5:66:2a:e3:fd:d7:4c:a8:1d:55:9e:33:87:
c4:72:49:8e:35:dd:a5:15:06:85:93:22:0a:2c:52:b6:75:21:
1a:09:23:87:7f:55:7b:24:9d:84:c8:d4:32:25:4f:94:c9:08:
be:49:3a:cb:1b:4c:ce:6c:f3:c3:50:b4:e0:96:4f:d5:aa:30:
11:c3:61:a8:67:9c:98:a6:24:13:a9:9e:24:ca:fc:6f:98:79:
2e:59:db:c5:ea:c7:28:c8:7d:42:e4:80:7e:6f:69:04:a9:50:
6a:ee:62:85:76:f2:a5:21:d5:69:d2:e9:b3:69:0e:76:fb:80:
bb:70:56:c1:99:56:b4:e1:08:e1:ac:04:0c:23:e4:09:df:30:
1c:ea:0e:89:f3:70:17:9f:2d:ee:ac:f0:f4:79:15:9b:e0:d1:
39:85:b2:a8:5f:05:dc:f6:17:95:f6:2f:11:7c:c3:d3:01:04:
d7:6a:59:1b:82:fc:c7:93:a0:d3:d8:ad:0d:ae:df:d2:6d:24:
2b:78:05:c6:9c:5a:b3:1d:6b:b5:e7:97:aa:20:ed:14:85:35:
15:2e:27:75:6b:31:01:b9:fa:75:e3:91:50:ff:f4:04:5e:f1:
28:26:bb:e9:39:21:cf:73:c7:4a:f9:a0:d2:44:5d:de:21:25:
5a:89:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:35 2025 by rpki-client