Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa
File: 2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa (raw, json)
Hash identifier: BEd0oHJ5+abdmj/F4xE91pYQ7mSjrVHRlWqCEA8q8jw=
Subject key identifier: FE:4D:D7:00:C2:F0:CA:93:D3:F6:B4:07:CB:B3:D4:2B:DD:60:D7:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5811A97E5B7CD997E4E4BFBF218DF2D3A744A1DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa
Signing time: Tue 21 Oct 2025 00:00:07 +0000
ROA not before: Tue 21 Oct 2025 00:00:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:11:a9:7e:5b:7c:d9:97:e4:e4:bf:bf:21:8d:f2:d3:a7:44:a1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:00:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=4a1247c97158a3b54914ccc891cf3fd03e1f847226a20185d9d12048522e81e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:2e:39:18:f1:3f:a9:71:34:01:b7:c9:a7:
ef:ee:26:eb:41:bf:a6:96:d9:f9:e6:05:84:6b:91:
69:b3:d3:d3:ac:34:c5:ef:c3:70:df:89:99:5d:d8:
1b:bd:82:36:9a:6c:6a:f8:ba:ef:49:e1:5d:16:76:
72:45:95:1e:6a:f5:9a:c7:96:d8:eb:7b:69:57:20:
19:56:ed:ec:a6:e5:a7:33:45:5e:b5:00:7f:2f:92:
f1:95:05:79:39:4b:f4:01:76:d9:c6:23:bb:c1:9f:
6a:54:b8:7a:70:c0:cb:4c:33:57:0b:d8:bc:cd:34:
5d:c9:bf:72:43:01:d9:23:23:24:64:28:d8:76:d5:
23:a5:fd:37:fa:d6:e0:69:ea:b5:2a:e3:fb:92:f1:
7d:36:cf:d7:b4:45:9b:79:f3:db:46:d9:62:8e:b6:
69:ec:d1:07:f4:7b:5e:38:d9:9c:ad:af:06:87:d9:
4e:1a:1f:27:22:63:9b:dc:67:18:5f:df:38:39:86:
9a:73:cd:e5:c9:29:dc:2c:81:11:61:7b:c6:0e:a9:
9b:29:64:8e:49:3a:42:b6:fa:01:90:68:24:0f:c5:
62:b5:f2:f9:8e:68:7c:9f:50:50:ec:36:9a:98:fa:
59:c6:c1:e0:9e:6e:8a:70:b3:50:f6:83:8e:94:21:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:D7:00:C2:F0:CA:93:D3:F6:B4:07:CB:B3:D4:2B:DD:60:D7:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:27:fe:55:53:b9:4a:43:dc:98:ef:b6:7b:55:3a:55:21:16:
f4:e4:93:ad:73:eb:f8:09:bf:3f:c3:90:9a:81:b7:f6:77:dd:
5d:e4:4e:37:90:18:1c:0c:1d:34:9a:0e:9c:57:16:fb:5c:4d:
9e:d3:e9:a8:95:4a:ab:64:b5:f2:d3:57:da:59:5c:49:5a:4d:
dd:fa:87:4a:4a:42:fe:7c:36:85:0b:f1:c6:04:34:fa:22:39:
a5:49:0d:bc:7e:66:39:30:58:b1:43:c8:22:e6:1f:f3:c5:ae:
15:2c:06:27:96:b3:83:7e:4e:e0:0f:15:8e:b7:f6:57:cd:03:
07:0f:02:b2:51:1f:28:6e:6c:58:f9:55:fd:db:c7:f9:3e:94:
c4:12:79:73:ec:be:ca:b8:88:d5:d2:ef:b8:97:c1:09:5b:4e:
8d:e3:b2:ee:f7:45:10:f8:47:ce:cc:2a:62:ab:b5:77:d6:c1:
57:47:ec:0f:80:06:c5:da:9b:e6:38:e1:2d:3d:6f:e5:b2:2d:
cf:ca:81:a4:79:94:2b:46:0b:13:b2:8f:3a:7b:bb:95:1a:00:
61:81:1b:3b:70:c5:b7:69:0d:e4:0b:5b:5e:6c:17:18:b4:06:
2b:1d:7d:a4:f3:29:a8:29:f2:ea:b3:96:f6:b9:95:1d:32:7e:
36:73:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:29 2025 by rpki-client