Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cfb6694-c6b3-46a7-9fef-95d78c4987c8.roa
File: 4cfb6694-c6b3-46a7-9fef-95d78c4987c8.roa (raw, json)
Hash identifier: mmMzr4HeZmi52eWLAs/FNbBSevk1HHjz8qVY6WHchGQ=
Subject key identifier: 4F:63:E1:32:C8:31:B4:8E:B9:35:7B:5C:29:AE:70:2D:E0:56:4C:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E568513D302D62A02B297A4D12F7E100C6091F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cfb6694-c6b3-46a7-9fef-95d78c4987c8.roa
Signing time: Fri 31 Oct 2025 01:01:29 +0000
ROA not before: Fri 31 Oct 2025 01:01:29 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.234.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:56:85:13:d3:02:d6:2a:02:b2:97:a4:d1:2f:7e:10:0c:60:91:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 01:01:29 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=230f168e11727ff998d6c128d5ce169747c95c85482f9b00d328905cdcdff62a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:36:16:67:47:5b:db:1e:6d:38:5c:ab:50:
e4:6e:22:43:3d:4a:18:c4:4c:36:f7:b2:72:c1:c3:
f4:3d:c7:8d:d6:ad:6d:5f:3a:5e:4f:86:9e:60:35:
31:a4:5f:11:de:97:b9:82:83:20:b5:55:05:7a:ad:
93:fb:30:a2:ba:26:fa:d4:d7:64:7e:d5:84:7a:4a:
51:96:e8:b8:b7:eb:01:d6:79:a9:84:1e:27:d3:78:
e9:e5:50:d7:12:d1:91:4b:60:67:b6:f5:f9:db:5f:
45:b5:ca:bb:29:35:3d:ff:2a:0f:c0:fd:71:1d:87:
ba:20:ed:66:27:c1:26:6e:0e:5c:cc:04:e7:01:f1:
52:fc:8f:8b:90:35:56:23:ad:c6:e2:b1:07:88:31:
e2:59:5d:b7:be:86:31:cf:37:bb:d7:c4:4f:03:c4:
92:d7:d2:d9:32:2d:97:98:83:8c:cb:d8:1f:0f:3f:
7c:05:51:a9:3a:41:cc:f5:93:ad:2b:06:cc:93:4c:
46:08:08:be:07:c8:46:a3:2c:16:c8:57:6c:f5:de:
c0:e6:dc:88:3a:22:38:75:98:dc:46:00:79:ad:40:
99:db:11:f8:ef:99:b0:cb:57:d2:1a:aa:69:35:e2:
05:7c:49:55:74:2e:68:ca:f1:b9:38:58:f4:81:67:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:E1:32:C8:31:B4:8E:B9:35:7B:5C:29:AE:70:2D:E0:56:4C:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cfb6694-c6b3-46a7-9fef-95d78c4987c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.234.106.0/23
Signature Algorithm: sha256WithRSAEncryption
31:dd:f5:a8:99:76:b2:4a:b5:dc:51:f8:88:2e:51:70:5f:7d:
f8:25:4d:ec:02:a2:db:31:e0:10:fa:7a:77:25:14:c2:1f:5e:
84:91:1c:47:00:7e:51:e6:4d:4f:7d:9c:74:d1:62:81:f6:ef:
7f:0d:de:fd:88:ef:eb:e1:d5:97:9e:21:bc:59:32:b1:1b:34:
a1:ca:53:8c:03:1b:71:25:91:98:d2:9b:96:57:d9:c3:61:4b:
b7:9e:91:f5:c1:98:50:86:75:6a:9a:a6:b9:ca:ef:3c:cf:03:
49:63:54:68:cd:af:07:03:90:bd:7c:07:6c:ff:b7:47:5e:61:
3b:f8:d7:bc:26:c1:34:49:07:2a:c9:1d:c7:37:d5:4f:85:ed:
2d:ee:b7:96:53:b7:3d:73:9d:30:23:7a:24:c1:4b:20:19:a8:
d4:65:a6:a8:1e:51:bd:21:28:90:2d:ca:46:48:f9:8e:d5:61:
3b:b2:2f:3f:ff:61:a2:34:0c:22:b5:0c:d4:c4:c1:60:82:79:
da:29:d7:49:72:af:ab:d4:43:92:63:29:da:8a:f3:bc:ad:0b:
c4:45:eb:4e:5c:fd:22:1f:7e:3e:67:bf:a2:6a:a7:a3:7e:d4:
3b:1b:56:a9:b0:09:7e:24:d9:73:c5:ce:b8:d7:40:26:e8:4b:
82:d3:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:53:08 2025 by rpki-client