Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa
File: 3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa (raw, json)
Hash identifier: 94M9unEG3IL9qCjavwnnZaSdgssza2Boeyw98avP3wA=
Subject key identifier: E7:03:57:AA:EC:A2:64:97:51:4A:D4:52:98:72:B1:E3:00:79:80:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 034DD1DD7BDAE875E61A636403970D6967D1120E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa
Signing time: Wed 29 Oct 2025 00:40:31 +0000
ROA not before: Wed 29 Oct 2025 00:40:31 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.56.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4d:d1:dd:7b:da:e8:75:e6:1a:63:64:03:97:0d:69:67:d1:12:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:40:31 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=8bafb4001335981f5a6ba916449b558c793882978d0d04c693f2003b8ed68b08, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:d2:42:f1:d3:fa:ba:9b:ee:b3:a8:5c:36:
9d:58:65:5b:e6:e7:31:ed:ee:88:45:38:13:30:2b:
bc:aa:5a:3a:b5:99:16:9d:af:25:c6:7a:66:3f:2b:
67:25:fb:36:13:02:c5:7d:ed:9c:08:39:7d:6e:a7:
58:9b:b4:07:2a:54:1a:44:a7:39:73:34:ca:9f:d2:
b7:e6:23:00:df:96:52:4f:07:91:d8:94:3d:f1:47:
dc:6e:9d:72:e3:61:c4:14:a0:12:0a:e2:72:3e:ff:
42:16:84:86:df:9f:4d:0a:ce:32:6c:31:05:87:fd:
f4:94:87:67:9e:ef:f6:1f:fc:53:a3:e6:50:78:2b:
88:89:c5:78:cf:41:6b:2c:21:48:cd:f7:77:37:a1:
5c:23:cd:68:b1:cb:91:14:82:27:a0:e1:b1:d1:a0:
67:d2:b8:fb:50:fe:95:2d:ef:e7:90:64:4e:b0:6a:
f7:32:5a:a9:98:c1:87:c6:b9:bf:02:43:3f:1c:45:
99:eb:a3:f6:b5:a0:39:f8:eb:c3:99:ba:3d:a9:36:
45:03:11:13:c0:f4:cd:55:c1:5a:d4:5c:83:24:c4:
1c:9b:65:a1:45:e4:7e:44:2d:b1:c3:6a:ad:b7:5f:
b9:cf:47:f7:14:1f:99:03:b2:f1:37:11:0c:41:90:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:57:AA:EC:A2:64:97:51:4A:D4:52:98:72:B1:E3:00:79:80:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
05:43:f6:c7:ea:78:73:90:08:39:5e:63:e1:29:48:32:30:ad:
8f:95:7a:1e:d1:b6:e6:f8:bf:7e:6a:f7:46:d8:57:50:90:e0:
c4:fc:ad:3a:17:e2:cf:d3:3e:bf:e0:37:8d:1d:d7:d1:0b:4a:
36:7d:eb:61:bd:03:14:a8:fa:fc:ce:30:7c:b2:d2:1b:cd:4c:
a8:89:91:f6:c4:35:5f:d8:83:68:5e:6d:6e:1f:e2:d1:fb:60:
a2:29:5d:e2:ae:a9:00:f4:40:8f:55:e3:46:4f:c0:c5:ce:69:
d8:77:aa:6f:a6:2f:b0:71:02:46:8b:c1:5b:b3:11:ba:a0:3d:
eb:69:98:02:e0:12:3e:3f:df:b9:ba:63:39:b4:a1:97:39:0f:
d5:78:f0:d7:51:99:74:c7:d5:92:9c:2f:84:e6:23:c6:2b:c2:
b8:92:84:ce:12:47:f1:fd:82:cc:0b:4b:33:40:be:df:90:5a:
99:5b:32:07:ce:17:c8:b1:36:81:37:6a:10:d0:8a:a5:4d:8b:
ae:c4:7e:5c:7c:96:49:af:43:be:b2:38:69:00:b3:e8:97:84:
35:d0:1a:14:20:b4:dc:83:7a:28:38:10:d5:c0:a9:34:dc:d7:
d1:fa:94:f9:ae:11:77:4b:b0:b9:76:b8:9f:0c:80:45:60:8f:
aa:e9:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:08 2025 by rpki-client