Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759b9909-3340-4a5f-9bee-52807046bf87.roa
File: 759b9909-3340-4a5f-9bee-52807046bf87.roa (raw, json)
Hash identifier: rNNY0FHGZ24hJnYAK0u8Kmms+UivZjNCiMj+C61i2H0=
Subject key identifier: 9E:E2:96:44:ED:DB:09:AE:0F:23:24:21:40:0B:8A:C9:FD:BA:00:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AFA7185DA259673A605EF4DEF2DD96771015927
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759b9909-3340-4a5f-9bee-52807046bf87.roa
Signing time: Tue 16 Sep 2025 20:22:01 +0000
ROA not before: Tue 16 Sep 2025 20:22:01 +0000
ROA not after: Tue 21 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.232.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fa:71:85:da:25:96:73:a6:05:ef:4d:ef:2d:d9:67:71:01:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 16 20:22:01 2025 GMT
Not After : Oct 21 23:59:59 2025 GMT
Subject: serialNumber=0f4f02af288563a1188f918b50c0e7c633552e35b83f19d29492f324d3d97e25, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:5a:fa:a0:00:1f:7b:7b:4c:e8:a1:c4:b1:
52:50:66:c2:47:a6:20:0a:e6:fa:29:00:5f:28:75:
5b:7d:19:a1:5a:d9:6b:11:64:ff:e0:06:ac:2e:b3:
0c:1d:62:c7:9f:14:cb:1b:45:91:b5:0e:a1:37:32:
b9:19:ab:9c:42:17:f5:6c:78:40:25:a3:78:bd:95:
cb:d9:17:63:1c:48:88:b3:71:f6:4d:c1:5c:57:56:
47:e5:fd:4e:06:c4:4d:2f:ce:28:b8:28:32:6b:03:
c2:58:99:0c:df:ab:84:e3:88:28:0b:cb:1a:69:9a:
ef:33:9f:2d:91:0a:76:41:a5:4c:a1:5b:22:08:f4:
6d:47:36:e3:d4:f3:b0:48:40:d5:6b:60:99:13:fd:
db:36:e2:1d:4e:66:fd:2d:fd:1e:90:50:be:4b:0f:
20:f6:f5:31:41:52:8f:9a:f2:92:51:c0:a3:b0:27:
53:31:9c:41:9f:4a:10:74:0a:6a:66:4e:9e:04:d8:
76:47:dc:97:03:00:e5:c5:03:5c:97:6c:45:5d:d7:
50:6a:af:dd:41:9e:1b:fd:97:b5:91:cd:b8:72:ec:
ed:b5:d4:d0:8e:b9:2b:a4:36:2e:10:41:6f:29:4e:
2c:c0:7a:c5:d7:10:bb:ba:a2:88:4b:2d:1c:a2:d4:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E2:96:44:ED:DB:09:AE:0F:23:24:21:40:0B:8A:C9:FD:BA:00:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759b9909-3340-4a5f-9bee-52807046bf87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:01:3c:c0:1b:de:84:df:6f:a2:27:d3:2d:8f:07:5f:40:db:
82:bc:cb:29:04:7a:8f:b9:c1:8a:28:84:a1:fc:bb:7f:d3:82:
8c:c0:df:47:77:f2:1f:0a:ed:6a:a2:c0:04:0c:1a:4b:31:54:
56:12:9c:26:c9:11:d0:aa:03:59:42:39:2a:7f:ec:45:e6:30:
22:eb:20:27:e2:41:01:37:89:f6:21:6e:d9:39:32:fb:b9:31:
93:45:17:8e:bf:3b:e4:56:89:b1:ad:a5:d8:00:8e:41:f9:4a:
cb:c5:8e:5d:30:9e:cc:eb:11:10:6a:5a:df:c8:32:76:5e:8a:
f4:fe:01:a6:a8:c9:e0:99:9f:1a:ab:9c:f6:dd:c7:2f:d3:2d:
6f:26:fe:89:b0:7d:f5:e4:8e:c6:06:1b:90:20:da:9a:7e:5f:
24:16:b1:b2:b8:1c:93:89:f5:22:ea:bc:58:ec:96:3a:aa:c2:
95:e1:02:a9:aa:e3:4d:87:4b:00:6e:93:58:13:71:99:54:a2:
28:0c:0e:17:61:57:89:93:fa:97:55:b4:1d:15:3e:c9:f7:49:
04:74:5a:d9:1a:ef:06:8d:d3:47:f8:14:42:73:4a:16:d3:2e:
c7:d2:33:4a:8f:53:1c:d7:6f:54:2c:a0:a5:ef:12:75:90:ca:
62:55:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:33 2025 by rpki-client