Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48af1dfe-0e61-4862-8ae2-75b053bcc924.roa
File: 48af1dfe-0e61-4862-8ae2-75b053bcc924.roa (raw, json)
Hash identifier: 6C1eREeRuGuQKRz60ZhvRU3gBKr+egebIzJ7VcYDg1o=
Subject key identifier: F5:0C:D2:60:16:F8:F2:AD:C0:F5:6D:95:B1:02:73:E0:E4:21:1E:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B75CC3EDED03F0875F8591D556B4EB637AD1B29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48af1dfe-0e61-4862-8ae2-75b053bcc924.roa
Signing time: Fri 31 Oct 2025 00:20:07 +0000
ROA not before: Fri 31 Oct 2025 00:20:07 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.215.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:75:cc:3e:de:d0:3f:08:75:f8:59:1d:55:6b:4e:b6:37:ad:1b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:20:07 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=3e8ecaabf9dabd8fbd81d43bf53d99888b57a2c5a1d626c8f086d7361a822ffa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:3a:e7:f5:be:b4:20:8d:62:5d:4e:79:13:
99:b8:85:9e:ac:66:10:06:ea:17:ea:fb:9f:d1:fc:
5e:16:b0:d6:58:2e:fb:ac:fa:9e:59:32:81:29:15:
10:46:44:94:da:9e:08:a1:ad:1a:de:09:cc:a3:77:
dd:9b:0d:cb:6e:4c:83:b3:52:3d:30:07:30:4d:5a:
08:32:66:33:43:7f:6a:ce:41:23:d2:1e:67:e4:a2:
75:35:6a:f4:c1:a4:65:d8:48:d5:14:e6:70:c2:49:
27:17:f9:5c:42:e1:57:b0:84:5b:27:4d:5d:23:90:
a3:83:ff:87:82:a8:e9:c2:ec:88:d8:fe:4e:c4:b5:
89:8b:6d:fc:41:00:28:12:6d:65:44:de:6d:f9:5a:
c5:1c:26:5d:5c:7e:4e:1b:7b:9f:5e:5d:e8:f0:aa:
2d:f7:39:47:27:32:c5:31:93:3d:ad:87:b8:cc:14:
9f:90:87:35:ca:ee:f1:5b:2c:2b:db:e8:bb:60:37:
b2:16:d0:b8:e9:7d:6a:68:fa:44:ba:d6:19:24:33:
45:32:71:fa:e3:81:65:d6:54:ab:86:30:04:1a:99:
08:29:1d:49:d6:38:d0:c3:da:71:de:fb:c8:3a:c3:
ab:54:ad:00:38:92:cc:02:79:0c:42:2f:f0:1a:1f:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:D2:60:16:F8:F2:AD:C0:F5:6D:95:B1:02:73:E0:E4:21:1E:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48af1dfe-0e61-4862-8ae2-75b053bcc924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.215.136.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:63:29:b0:37:cb:4a:d5:78:5e:bf:72:3f:ff:74:55:dd:bd:
34:f8:27:2e:3b:79:7a:fe:9f:ed:02:f7:11:28:b8:44:2a:ad:
fd:f7:b8:29:f9:72:bd:80:e0:db:e1:59:4d:e8:f0:f2:e2:64:
9d:32:fc:bb:56:88:61:38:70:3a:dc:09:b8:5b:77:89:5e:2d:
14:8f:35:1d:df:87:13:03:b7:6f:1c:f7:74:f7:ba:4a:6d:fb:
ac:f0:bb:d0:16:8d:18:75:ab:c8:da:dd:b3:d6:4c:99:7b:7c:
6a:a6:59:ea:0e:4b:e0:61:6b:bc:f8:73:44:26:8d:42:70:03:
8b:a8:de:4c:4f:93:a2:36:a3:66:eb:13:fe:c5:6c:a6:b3:ac:
81:14:00:56:98:32:9c:ce:30:33:e3:51:40:dd:b3:a2:a5:e8:
db:60:b3:2f:8c:82:eb:41:a7:c7:27:be:69:e4:70:36:e3:f2:
29:8a:5a:66:a1:24:d2:f7:86:65:31:72:2c:29:38:e6:c8:ce:
15:a9:30:8d:76:ad:c4:db:75:ef:6b:40:18:47:d5:f6:44:05:
41:df:d0:47:4a:95:55:57:79:3c:90:3a:2f:12:a0:62:05:52:
3a:46:d4:02:51:45:78:fe:20:56:11:56:8e:5a:80:47:ef:61:
b8:bb:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:07 2025 by rpki-client