Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f69e0f-af75-4a08-9d97-31505d87d67d.roa
File: f8f69e0f-af75-4a08-9d97-31505d87d67d.roa (raw, json)
Hash identifier: dt+DzGjJmm3MhTDd7bkPoZACuGNkMw4sRQMgHRHxOgw=
Subject key identifier: 30:D7:EC:E3:D4:92:9E:83:CC:C1:9C:C4:73:67:F8:D9:7D:C0:80:80
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7702CC807C526B96F258DE6D78F035AFC2290DB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f69e0f-af75-4a08-9d97-31505d87d67d.roa
Signing time: Thu 13 Nov 2025 00:00:15 +0000
ROA not before: Thu 13 Nov 2025 00:00:15 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:02:cc:80:7c:52:6b:96:f2:58:de:6d:78:f0:35:af:c2:29:0d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:00:15 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=ff17be9c686e842853b32b80d5240aedbf70db3f0bdd93ddff3b7ab594dbd70f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:9c:9d:b0:6c:37:df:6e:c5:01:03:ce:6f:
d4:c3:83:61:b8:d7:38:48:18:b7:1a:3c:a8:d4:94:
bb:77:39:65:ad:c0:2f:63:d6:e1:37:2a:61:1f:00:
6c:75:a7:32:75:95:b6:ac:53:3f:4b:ff:83:06:db:
50:4b:ca:cc:9e:91:df:e7:a3:a6:d4:3a:87:d7:ae:
b7:7a:cc:67:87:8d:93:c4:86:a9:e0:6e:9b:c1:c9:
57:80:f1:2a:7a:82:97:3b:e6:32:4c:d6:1c:70:68:
3e:d2:1c:ed:c7:8a:49:d5:c7:8f:89:30:b6:b2:98:
cc:ff:30:50:04:17:a3:67:27:15:7d:42:ed:4e:ad:
0c:9e:3f:79:57:d2:5f:44:b5:54:12:6c:0d:75:48:
d7:15:d5:3d:c8:46:dc:8a:66:c7:fc:b7:f0:b4:8b:
86:ae:90:a6:fc:d0:5a:62:23:33:9a:2a:64:c7:97:
6e:55:eb:64:ed:94:0a:11:12:64:21:44:6f:b3:49:
c3:b4:13:d1:4d:39:32:4c:5c:dc:aa:d6:7b:cf:b5:
2c:9e:96:d2:c9:b2:80:71:0d:df:eb:15:f7:87:d3:
a2:30:e2:e2:2e:53:40:77:05:e3:aa:b8:a8:51:37:
f4:ff:c9:44:5f:4b:14:96:00:d4:7e:43:70:b8:20:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:EC:E3:D4:92:9E:83:CC:C1:9C:C4:73:67:F8:D9:7D:C0:80:80
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f69e0f-af75-4a08-9d97-31505d87d67d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:0a:63:b8:4e:a5:6b:4b:b9:5d:7b:7a:77:47:e6:39:b6:fb:
ce:53:b2:65:87:29:89:95:fe:e1:d7:05:3f:38:46:07:ff:27:
fb:f7:77:ce:69:c2:60:10:25:d2:c8:0e:6d:73:8f:1e:5e:80:
d3:47:dc:87:bb:ab:96:b6:27:35:bb:64:92:8d:e4:df:df:39:
c5:46:71:d2:98:bc:d1:b9:59:63:d1:7f:8d:6f:bd:7e:c8:f5:
82:df:7b:f2:f4:e8:37:79:52:1a:33:8d:72:25:b5:ee:32:a2:
9a:ed:b9:29:7f:e6:39:57:be:8c:3a:42:cb:31:d6:0f:6a:65:
c1:50:7e:e4:36:8f:90:89:22:54:2b:63:69:c5:12:0d:62:bf:
d8:30:38:72:5d:e3:90:f6:d8:84:8e:a9:41:e6:02:d7:ee:2f:
7d:d9:5a:d3:26:51:a2:3d:cc:e1:54:28:4f:aa:6a:ff:f1:0a:
dc:87:24:af:a2:60:c4:e8:88:14:91:1d:5e:db:e1:d2:67:ca:
90:88:b5:7a:f6:79:f5:1f:f5:50:62:62:a6:af:06:d0:18:eb:
c1:c3:f4:26:a6:e4:56:6f:48:5e:80:bd:8c:2c:02:9c:f7:f1:
ef:dd:ff:f6:17:87:a6:57:f6:6c:f5:82:59:f6:06:8f:c8:e0:
11:05:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:53 2025 by rpki-client