Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
File: 8d552d63-bbe6-4c64-9bf6-4790de201429.roa (raw, json)
Hash identifier: MHgMq/kLeY8anOtXaP/ZL0nPq/yZ828iGHXiU9VZtfI=
Subject key identifier: 01:07:9F:4F:CB:E8:50:69:53:09:4C:7F:EA:E9:F6:1D:7B:67:C3:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4225649ACCF87D8EC97C0FB287BA59E018349198
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
Signing time: Wed 01 Oct 2025 00:39:51 +0000
ROA not before: Wed 01 Oct 2025 00:39:51 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.51.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:25:64:9a:cc:f8:7d:8e:c9:7c:0f:b2:87:ba:59:e0:18:34:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:39:51 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=e852c3f52b9a3bfa29ce649795b7124c541f78ef0e5854b0d3b5975c97e271e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:48:69:af:b5:12:b3:53:47:c2:d4:03:fb:
72:60:25:7f:7b:c3:e1:90:83:25:d2:bc:ed:86:44:
c9:77:9c:0c:f4:ee:99:82:2c:e4:06:da:a6:23:09:
d7:68:5c:85:af:c6:86:60:9d:81:ef:b3:56:a4:f1:
0e:ea:ca:ad:5e:79:19:4f:c5:36:dd:67:3b:10:c1:
57:50:2d:d5:ca:13:55:60:ee:42:1e:10:4b:c7:83:
78:b7:67:40:9c:4c:63:13:8c:48:a3:57:43:8d:6e:
71:3c:b2:bf:60:87:c2:a1:2e:06:f5:91:41:14:b9:
2b:c0:f2:e2:e0:7b:a0:f6:af:bb:04:e2:47:f6:24:
e5:72:e1:ee:8c:73:a7:64:1e:fb:01:de:aa:da:ee:
e2:ee:0a:68:28:06:ae:3b:69:4d:44:07:cd:06:bb:
e3:9f:99:66:8a:b0:b9:c6:03:b8:97:51:d8:1c:a3:
f4:eb:3b:99:da:f1:04:30:0e:88:fa:22:0d:bd:12:
7d:74:f3:4f:b9:8b:91:f5:8d:70:50:fc:7c:81:dc:
1b:79:34:b7:45:38:bd:93:e0:47:6b:81:52:4b:9a:
4f:a1:1f:79:b7:19:40:62:8a:23:28:00:4a:3e:fe:
ce:5a:25:20:1d:48:c9:c9:88:9f:10:01:fd:2e:21:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:9F:4F:CB:E8:50:69:53:09:4C:7F:EA:E9:F6:1D:7B:67:C3:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:1a:9f:c0:a5:f4:74:63:3c:b2:01:3d:2e:ea:50:41:05:0d:
fd:c3:ab:55:4f:a5:c1:4a:8e:de:23:8c:b4:98:9a:1c:65:d9:
bd:ea:f8:b9:7b:90:f9:88:03:d2:bd:84:62:2d:22:e8:db:54:
1e:65:52:12:41:d6:86:d3:da:f8:7f:f1:5e:35:59:ee:c6:a0:
51:d7:05:17:e0:df:38:6d:24:ee:bd:c5:03:1e:b1:67:07:83:
a7:e9:c2:ce:23:e8:3b:e6:cd:43:66:23:ab:20:c7:48:19:b0:
0d:71:d7:79:c8:70:5f:80:ac:eb:04:c4:c1:7f:a1:00:bc:aa:
09:42:65:7a:76:4e:7d:6d:7c:8f:40:6e:d7:ca:38:0c:57:ba:
b0:e9:3c:bb:01:f8:15:00:79:a0:a5:47:9c:e8:84:60:37:19:
02:f3:b4:30:7e:04:34:13:e5:7f:27:4b:b8:60:4d:4b:4a:4a:
0f:9b:2a:68:df:22:a8:b3:3b:5f:90:5e:8e:68:df:7c:8f:09:
92:56:ce:f3:ce:d3:88:c7:3e:5a:c7:ba:55:f0:01:4b:a7:ff:
4e:40:83:53:27:c9:2b:d1:f7:9f:74:09:b0:22:50:af:22:08:
40:4d:35:57:dc:41:87:53:80:47:53:9a:3e:4c:d5:de:d1:85:
42:92:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:58 2025 by rpki-client