Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06672a-8335-420a-ac28-2f8c4c774377.roa
File: 2a06672a-8335-420a-ac28-2f8c4c774377.roa (raw, json)
Hash identifier: o/PEcCOzPx6kAml+x4tRJRMkInRsDrvU5d5opMu1pyw=
Subject key identifier: 78:6B:34:D9:32:27:10:57:FA:2D:D8:9B:56:23:78:EA:C4:E0:56:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DB535FFA06030F1D7C02549568523731A3B8E7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06672a-8335-420a-ac28-2f8c4c774377.roa
Signing time: Sat 01 Nov 2025 00:41:08 +0000
ROA not before: Sat 01 Nov 2025 00:41:08 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b5:35:ff:a0:60:30:f1:d7:c0:25:49:56:85:23:73:1a:3b:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:41:08 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=68ac64d6011cbbaf882989ea815f845c8e748bb3e9a217d708079cb3e71171a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:2d:b3:85:56:d0:ef:48:76:46:6f:16:af:
95:0f:2b:e5:bd:a6:bc:ee:28:e1:42:2f:d3:3e:2b:
af:56:64:cb:27:95:55:42:79:61:8c:6b:1c:ea:49:
d6:5e:80:30:61:42:ab:e6:80:8e:64:a1:ea:17:9f:
32:ee:c9:36:a6:75:0b:93:5b:7c:44:37:1c:47:48:
18:56:1f:ef:a7:9b:8f:d8:ba:79:0e:c5:58:62:bb:
ad:07:f0:42:ff:35:c0:d8:5d:ef:41:71:fe:33:82:
80:bd:7d:4c:55:9e:9b:4d:86:27:4f:c8:ed:b9:10:
f2:43:b4:35:1f:59:b6:a4:7a:36:6d:8b:2e:15:54:
4b:e9:38:c1:f6:a5:f9:3f:ec:0c:e8:7b:3b:cb:9d:
dc:37:82:a9:4a:18:e8:09:88:ad:80:1a:66:62:15:
57:2a:f5:1b:a8:eb:8b:8e:cd:05:5b:a5:7e:d0:cc:
a2:9c:04:e8:52:f8:5c:35:fa:b4:8a:7b:41:f8:5d:
37:13:78:b2:20:ca:87:11:ed:90:79:14:6b:50:b8:
43:fa:81:56:b9:54:f2:8b:f4:8b:3b:c8:c5:de:1a:
e2:e1:a7:21:e2:ed:97:c4:fe:54:13:5d:32:b8:eb:
7d:ec:40:89:00:a2:00:ff:26:61:3c:fa:78:22:24:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:34:D9:32:27:10:57:FA:2D:D8:9B:56:23:78:EA:C4:E0:56:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06672a-8335-420a-ac28-2f8c4c774377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9a:21:68:32:58:60:c9:49:1e:ff:3a:2c:dd:55:74:7d:65:98:
ea:63:a9:2f:2a:65:51:00:d8:a1:5f:bd:02:9e:db:12:bf:0e:
aa:bc:60:28:0d:59:14:2f:70:f0:12:d8:ea:ff:66:31:18:4d:
f9:47:fa:f3:6a:fc:70:c2:79:ee:b0:8f:ed:02:bf:59:da:8a:
e3:4e:d0:a4:91:58:60:d1:37:eb:d3:4c:35:a5:7d:32:8c:43:
73:9b:a4:eb:47:52:88:f3:14:0d:b9:11:12:ff:f4:3e:ae:93:
02:11:34:6c:0c:09:f5:86:c7:22:b0:e8:15:58:b0:3b:c5:78:
37:24:d7:52:84:90:cc:1b:7e:44:66:6b:d9:6c:83:a5:d8:1c:
93:18:78:25:5f:a2:01:c8:37:81:42:bf:18:d1:bf:95:fe:25:
13:6d:72:88:fc:6b:0f:27:4c:43:dd:bc:05:90:59:dd:b8:61:
5d:29:4c:18:b4:95:32:b9:07:5f:44:9e:cd:0e:5a:4f:7c:0c:
c7:99:b3:6d:3c:49:36:83:a0:0c:0f:3c:0c:1a:81:f4:05:f7:
94:11:b0:73:c9:c2:84:67:52:9b:9d:4a:d3:31:8b:fa:96:cc:
b0:59:d4:0b:8c:37:a6:f2:c4:11:b8:8f:af:89:c9:e2:19:ff:
dc:07:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:16 2025 by rpki-client