Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a8de1a-1488-427e-a09b-887d90de5699.roa
File: 91a8de1a-1488-427e-a09b-887d90de5699.roa (raw, json)
Hash identifier: 5bCuBcL8aQUy2DhnY2AVbjVlnYVoQtmjv+82js1t0a8=
Subject key identifier: 83:8C:D1:33:B5:42:26:F2:2E:F1:FA:59:FE:FD:F7:6E:18:12:F8:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 378D26085A4A0077FC69912E6292C261F9E6F52B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a8de1a-1488-427e-a09b-887d90de5699.roa
Signing time: Wed 01 Oct 2025 00:40:32 +0000
ROA not before: Wed 01 Oct 2025 00:40:32 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.219.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8d:26:08:5a:4a:00:77:fc:69:91:2e:62:92:c2:61:f9:e6:f5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:40:32 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=30a9d019db65168ce3a87da64e300786adb30eeea06c304266b007ce03c24c31, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:d8:c2:f2:64:be:d6:04:e0:89:fe:c8:58:
67:e4:06:92:8a:d6:0c:7f:47:04:ea:8e:c7:82:cc:
d5:b3:5d:1a:98:2d:85:32:ec:c3:f2:a5:99:ab:ad:
d3:12:06:ce:aa:d1:2e:af:26:cf:eb:b6:87:6c:ca:
1b:06:5d:0a:7e:b4:f9:34:ab:22:ea:f4:18:be:f7:
be:e2:0c:0d:1c:83:e4:15:13:27:11:09:8f:53:8a:
84:ac:da:b7:61:29:7a:0b:ec:cd:24:5d:8f:e3:63:
2b:99:92:95:f6:29:b4:cb:11:46:40:3b:38:8b:ab:
23:67:63:a8:c5:95:a1:ad:0a:b7:6c:6d:1a:dc:5d:
0d:49:06:af:c8:8d:23:c4:b5:94:ab:2f:21:96:34:
00:15:3a:d2:02:17:f4:7c:87:cd:10:09:76:ba:5c:
71:60:35:4b:ce:77:86:4f:bf:45:3d:89:64:e2:16:
bd:b0:1a:96:6a:d7:90:f7:09:fd:d7:d0:2c:f6:0d:
71:3d:78:2f:83:64:31:2d:98:12:c1:04:ff:44:9f:
62:ce:28:57:3b:21:1d:a1:a1:68:52:15:fa:b5:2e:
34:55:da:c6:ac:27:63:bb:48:83:6c:28:6f:b1:22:
42:7c:c3:b0:4f:71:66:59:a2:05:ac:b2:c3:d7:25:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:D1:33:B5:42:26:F2:2E:F1:FA:59:FE:FD:F7:6E:18:12:F8:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a8de1a-1488-427e-a09b-887d90de5699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:f0:6a:86:94:56:3d:18:2f:6b:57:f3:6f:ad:79:16:28:c4:
cf:13:3d:c6:45:10:9e:8e:1e:a0:ad:29:6f:f1:a8:80:0d:49:
53:63:58:70:60:f1:50:d4:36:67:f7:38:64:ed:20:df:3b:42:
4b:8f:7e:06:48:3e:78:26:93:25:23:39:27:aa:fc:49:b2:28:
7c:89:f7:28:b1:07:1b:05:70:c6:51:95:8f:9f:a6:bd:4d:fb:
bf:c8:7d:4f:6e:11:37:c3:6f:09:80:72:ea:09:ad:dd:95:51:
92:52:b0:11:eb:96:c7:8d:10:1b:62:b4:3d:5a:7f:ee:3c:0a:
5f:eb:93:b3:cd:34:7d:29:6b:2f:58:67:ff:5c:fb:7c:bb:00:
8b:33:33:21:1f:65:0f:1d:01:2d:23:b6:2c:6e:bf:ba:10:12:
99:f7:35:2b:95:d8:d6:08:7e:f0:96:2b:b7:90:7c:04:a2:01:
04:fa:b9:03:24:ba:33:12:2a:c0:6e:c6:32:64:3a:9c:76:a6:
11:c0:dd:d6:4b:8c:c5:76:71:3e:fd:dc:13:5f:57:97:99:a0:
5f:43:80:05:a4:02:31:a9:47:2b:b1:36:0c:9e:95:60:5d:7a:
ae:3e:e8:5d:07:d4:24:c6:fe:ec:3e:cd:c1:d7:8d:85:5a:b8:
cd:3a:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 18:00:27 2025 by rpki-client