Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7bf8567-580c-45f7-af98-9d5e0edb7a93.roa
File: e7bf8567-580c-45f7-af98-9d5e0edb7a93.roa (raw, json)
Hash identifier: 0iPh9RsHFwnkStQ0sszc9W6zjj87a/yYYe7gxSYGGPo=
Subject key identifier: FD:0D:B9:C9:BB:CF:36:4B:D4:00:3E:62:98:31:EE:2C:5A:4F:E8:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 557E23AD42ED51086ED363041D9CA5B44476BE57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7bf8567-580c-45f7-af98-9d5e0edb7a93.roa
Signing time: Mon 22 Sep 2025 15:51:15 +0000
ROA not before: Mon 22 Sep 2025 15:51:15 +0000
ROA not after: Mon 27 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7e:23:ad:42:ed:51:08:6e:d3:63:04:1d:9c:a5:b4:44:76:be:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 22 15:51:15 2025 GMT
Not After : Oct 27 23:59:59 2025 GMT
Subject: serialNumber=7d2b6f2f96faff888217143287d4acb4e3498395cac46c236e7385dc5ce38300, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:34:d3:42:a3:d0:a3:bb:a1:71:93:a0:e4:
dc:7c:e7:36:f2:61:98:cf:2d:16:41:fc:65:f2:c6:
d2:52:1c:36:d4:47:75:15:ba:dd:ba:08:43:f0:72:
b8:69:85:f1:24:2f:dc:61:a4:a5:eb:cc:98:09:02:
30:96:88:96:85:88:8f:aa:d6:fa:f3:c7:49:02:b7:
84:89:db:60:30:3c:c5:e0:06:86:03:48:bf:03:e3:
99:4e:72:0e:e6:b7:2c:6b:5c:a4:12:f8:35:ab:08:
37:03:a1:2a:2d:99:a6:fb:a4:00:cf:64:f1:fc:d5:
61:a6:0f:f2:98:44:3d:80:a5:44:bd:06:4a:32:c1:
b5:7b:b0:60:dc:33:57:03:77:eb:a3:c5:40:3e:ac:
6d:27:6b:42:56:41:e0:91:ac:66:f6:8a:03:98:d3:
0f:ff:d3:a3:d3:58:13:c3:69:f3:2e:cb:eb:6a:e7:
14:1b:67:4f:63:36:b6:db:1d:13:45:86:03:32:ed:
bb:b2:15:09:37:0c:41:a6:ed:57:be:7a:99:93:b9:
1c:81:86:4a:fc:06:6f:20:82:0e:99:4e:60:c1:9e:
af:34:39:a6:3a:f0:1d:8c:39:e5:7b:98:f1:a5:12:
25:19:46:bb:e4:dd:87:54:b8:61:40:c4:a8:4e:0a:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:B9:C9:BB:CF:36:4B:D4:00:3E:62:98:31:EE:2C:5A:4F:E8:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7bf8567-580c-45f7-af98-9d5e0edb7a93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:7a:70:9f:c8:b7:0d:7d:6d:f7:ad:4b:3e:ea:b5:48:82:95:
ae:c8:a6:75:86:ee:7d:5e:3e:6e:3c:6e:86:4b:ec:eb:21:46:
3e:99:a1:51:7c:e0:57:90:b9:af:32:7f:3e:79:1b:1a:4b:a2:
9f:0f:c6:66:fa:29:8b:5f:0b:03:5d:91:14:1a:b1:b5:ff:dd:
54:57:58:01:a4:51:ed:14:3c:bb:ab:6d:d8:72:45:22:4d:6b:
0e:3c:1b:05:94:bf:e2:3f:8a:19:44:85:93:f0:00:44:62:4d:
77:e5:b3:30:72:1d:e5:e4:f9:a1:28:2c:4a:71:a1:4c:9c:82:
e0:7b:b1:5f:5b:79:87:3f:3c:33:3b:ed:f5:1b:f5:7b:8e:2d:
c6:b1:bc:71:2f:37:a8:4b:b0:a0:f3:f0:22:ab:0d:81:fc:ee:
e9:67:a9:2a:b9:79:67:36:db:60:32:c0:ee:93:53:13:a7:f8:
2b:92:be:a8:14:58:ab:d0:2b:03:d3:4d:06:e7:71:92:56:0c:
73:f2:43:80:42:cf:dd:a0:f8:47:69:39:54:50:6a:fd:83:fc:
2d:b3:81:f5:8e:ed:7c:e4:16:24:51:e6:19:e0:ba:4c:0f:21:
24:c5:c8:f8:53:7e:07:73:90:f8:a6:0f:e2:d5:7a:79:69:ad:
76:30:a8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:39 2025 by rpki-client