Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657974f1-94c0-4624-90be-8e1120bd47b0.roa
File: 657974f1-94c0-4624-90be-8e1120bd47b0.roa (raw, json)
Hash identifier: UHWK0RCrfbERASi4o6iRhbwCry8ZO1dwAmfzymyJHmA=
Subject key identifier: 70:BD:24:CC:E8:94:70:42:75:45:84:D5:2E:02:8A:24:A8:F2:32:00
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31F3BE8829FFD612A1B55A7F575BCAECB97B2F6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657974f1-94c0-4624-90be-8e1120bd47b0.roa
Signing time: Fri 31 Oct 2025 00:10:11 +0000
ROA not before: Fri 31 Oct 2025 00:10:11 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 50.17.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f3:be:88:29:ff:d6:12:a1:b5:5a:7f:57:5b:ca:ec:b9:7b:2f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:10:11 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=998583d0e9d57683b520003c64930ccb14fd709576dfa0a3cb07fd2082e1f72f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:20:ef:57:06:50:1c:9a:9f:a5:ed:53:9f:
3c:26:6c:1f:c1:ac:f4:ac:11:55:f1:be:59:9d:1e:
0f:49:51:52:88:97:ec:92:f0:34:0c:f4:ee:1d:9b:
e9:45:70:8c:8a:b4:06:3f:68:49:94:8d:98:74:cc:
27:29:48:0b:b4:79:70:50:74:6b:96:e6:28:99:c3:
ad:ac:f3:58:2d:3a:c5:4b:25:46:74:86:66:48:32:
fb:82:3d:0f:0b:4d:79:a6:ae:d5:9d:14:95:fc:e4:
c2:ad:3f:61:78:93:2c:94:0a:0d:d4:77:c8:9c:cc:
cf:6e:e0:5c:93:49:b6:8a:65:0d:04:dc:9a:04:11:
40:61:a8:fe:2e:88:fc:c2:8a:81:eb:00:62:df:68:
ea:79:96:67:20:68:8e:f7:09:7d:0f:b8:eb:42:1c:
cb:82:e9:02:04:30:8d:d0:a6:93:0b:fa:8c:3d:1c:
8d:a0:17:43:59:6d:f4:31:2b:5c:8a:b5:0c:67:20:
11:ba:af:7c:b0:0a:c8:e3:e7:4c:3b:70:b8:ab:5e:
14:b7:01:1a:f9:0b:e9:78:c9:d8:af:68:b0:12:18:
7a:3f:01:3a:e6:c1:2c:b1:85:fa:cf:d3:de:95:85:
27:46:a5:2e:83:b9:10:83:eb:b2:61:25:d2:61:77:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BD:24:CC:E8:94:70:42:75:45:84:D5:2E:02:8A:24:A8:F2:32:00
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657974f1-94c0-4624-90be-8e1120bd47b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.176.0/22
Signature Algorithm: sha256WithRSAEncryption
19:48:91:2d:2b:47:4d:d8:1a:49:96:66:c9:8e:a9:28:22:4a:
f9:81:ff:88:60:b1:fb:f9:75:ed:73:4b:66:54:14:b3:37:4d:
e0:35:c9:7b:07:f5:e8:df:20:8a:72:d7:22:e0:09:28:a0:f9:
12:bd:3e:89:60:90:43:a6:3c:e9:7e:0d:74:20:07:7e:cf:2f:
b2:7e:8a:72:09:a7:11:1f:6f:ac:fa:38:ab:9f:4e:30:1f:1b:
5a:0e:f9:87:7e:f5:ac:b1:7f:37:77:f4:27:82:cc:4f:cc:00:
83:4e:e2:a7:31:c9:32:7a:3d:cc:f9:b6:98:85:12:f0:59:1a:
ef:e2:f1:1e:29:f4:ec:48:7f:1e:ad:f9:42:d7:22:3f:7e:14:
82:1b:98:52:5d:e1:63:f7:55:4b:1e:13:5e:e3:46:4b:88:6e:
fd:68:48:7e:29:5d:59:27:50:c1:5d:22:84:dc:1a:96:64:33:
38:27:c9:2d:bc:d5:7c:86:5b:2d:63:9a:da:1c:7f:46:dc:49:
6d:d2:65:2b:b0:7e:e3:3f:ac:c8:4a:98:11:d1:ed:d4:bd:b3:
5d:fc:f8:b4:46:7d:36:e2:6a:a3:a3:42:60:23:ea:02:66:db:
0e:c8:8e:5f:42:af:e8:26:85:47:dd:76:b7:2e:f9:d0:79:da:
25:1b:6b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:36 2025 by rpki-client