Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
File: 6751dc8c-51d5-4081-86c9-7c06c81aac98.roa (raw, json)
Hash identifier: t2xHW6xLejL/SSLx7kn82CZZ4uIyFW/2IuqZ3hwGD4Q=
Subject key identifier: 44:8B:CA:09:A6:58:72:60:28:93:81:05:53:94:EB:CE:A7:B0:D8:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 528C5474FB2CEA23CD34835C2A63682B40519ED9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
Signing time: Fri 31 Oct 2025 00:20:10 +0000
ROA not before: Fri 31 Oct 2025 00:20:10 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8c:54:74:fb:2c:ea:23:cd:34:83:5c:2a:63:68:2b:40:51:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:20:10 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=2b2b085c72bf90699871a4366307ce03635ca43a153fa5da4d62cfc7c9104831, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:81:d5:5e:8b:45:a0:ee:14:b5:5f:e1:a7:
c9:a1:18:7f:cd:7d:55:2c:43:6f:63:91:dc:ac:41:
e5:27:d0:07:fe:2d:7b:d7:1a:cd:ab:6b:a3:a3:9a:
dd:13:c9:88:74:58:fb:d6:9d:28:03:f6:da:97:89:
c6:2a:a0:fb:13:0a:45:86:84:05:db:31:22:63:98:
d7:11:db:c7:a9:d8:ba:40:9a:ca:cc:f1:ad:34:ff:
b5:7c:97:bf:f0:4f:1d:24:96:96:94:d6:c9:11:9e:
11:b8:5f:17:6c:34:65:17:8e:a4:b3:90:9c:68:05:
05:4b:f0:01:0d:8f:e4:e0:8e:6d:e6:1e:ed:cd:d5:
61:ef:4e:16:d8:15:7b:12:3d:f9:dd:40:7b:a4:da:
76:1c:28:a3:01:9b:2f:24:60:7b:e4:72:46:d4:53:
95:50:74:71:a8:8b:51:bb:e7:95:2c:23:6a:7f:a8:
d0:a8:ee:fe:85:7c:03:0e:c0:cd:fc:14:6e:44:5e:
71:7d:ed:47:59:2d:a5:25:fb:6e:99:30:74:cc:09:
82:c2:f8:29:ec:40:51:c5:a9:2b:01:0c:39:f9:6d:
44:69:21:ca:0f:0c:26:3b:4b:e2:ad:9f:2b:ca:8c:
1e:6a:d7:5f:80:18:80:e1:5c:42:d8:46:8e:36:34:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8B:CA:09:A6:58:72:60:28:93:81:05:53:94:EB:CE:A7:B0:D8:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:0e:d7:e4:36:f8:09:59:d9:38:92:cb:0d:0b:97:19:f2:65:
ce:91:e3:67:e8:b6:2d:f3:c9:00:6f:3b:c5:1b:75:4e:77:38:
65:c8:52:85:4e:aa:c5:bc:23:86:6b:fc:85:af:bd:ff:34:fd:
72:18:fb:77:8c:a4:cf:53:36:54:f4:08:21:06:ec:97:e9:48:
cc:ae:12:ae:d3:f6:29:bf:59:c2:c8:8f:47:a5:79:ca:2d:61:
2d:1f:bb:1b:47:98:8a:c5:c9:1a:b5:cc:0f:aa:39:d8:b6:2e:
e5:9e:54:f5:a0:aa:6c:75:33:dc:16:aa:69:9c:31:97:44:b5:
a5:78:29:8d:3b:be:e4:6d:2e:23:84:c4:b6:f5:b6:b9:b6:57:
72:58:89:4b:66:06:bd:af:cb:b5:8a:ec:a4:01:49:e0:7e:5a:
a2:1c:55:33:c0:64:be:9c:6f:4a:be:67:5e:d2:c7:e1:ab:75:
97:be:b7:40:85:ad:e9:93:b3:21:65:bb:2d:43:06:af:c6:be:
0b:fb:d6:97:79:ab:a7:a0:fe:12:84:38:3d:29:d1:db:6f:42:
20:24:3d:92:12:df:4f:dc:41:f2:2e:e5:62:c7:47:a4:6c:7a:
5d:81:f6:60:de:73:66:7b:1f:b3:ff:c9:f4:b0:3b:73:f0:3f:
9d:51:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:53:13 2025 by rpki-client