Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
File: 6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa (raw, json)
Hash identifier: t1dm5LUEE+VwnCj29oPqLfvt6+HMqekUrbsam1F/KAw=
Subject key identifier: AC:63:7F:4B:66:1F:1C:6C:9D:8F:6A:A8:A6:00:C5:D1:71:EE:03:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 220E72D6B1FF57F1657FB773FEEDBBC271DA931F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
Signing time: Sat 01 Nov 2025 00:41:09 +0000
ROA not before: Sat 01 Nov 2025 00:41:09 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.19.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:72:d6:b1:ff:57:f1:65:7f:b7:73:fe:ed:bb:c2:71:da:93:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:41:09 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=8a8eb07122334e8a1475e8be3b3973b0b04561203a40ec2030924d493675098e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:1f:97:dc:ca:11:7f:c6:a2:16:80:19:85:
c8:67:42:55:1f:1d:99:c8:4c:2f:f4:b5:22:2d:0c:
d3:2c:a3:0a:09:80:2b:0f:12:ba:99:c2:32:9c:b4:
83:85:a0:0f:97:63:b6:08:35:30:8a:de:60:58:26:
37:18:89:0e:79:e3:a3:fc:25:0c:41:0f:05:67:e0:
0e:c8:1c:23:5f:bc:cc:f4:d7:28:9a:b4:fb:36:82:
02:61:da:50:5a:c9:41:f6:7b:31:31:1b:bd:1e:13:
89:fb:f0:4f:f2:c9:95:4a:6b:84:c3:99:31:af:17:
6f:44:d8:0f:44:4d:a8:81:e3:5a:f4:af:92:df:03:
0c:c1:15:33:41:2e:9a:0b:12:d1:14:6a:be:84:52:
21:e6:31:ff:a8:66:67:99:cc:95:54:59:31:4c:3c:
11:30:b6:af:12:47:42:44:f0:ea:57:7e:1d:3f:43:
fe:ad:83:6b:80:9a:3e:dd:da:89:c4:38:82:85:92:
00:be:3d:66:c1:3f:54:d7:29:02:0f:60:9e:92:ba:
2c:4a:95:ca:7d:68:86:3c:96:92:b0:38:a9:a9:c0:
2f:84:ec:ba:fc:74:1b:c5:27:66:44:4c:cd:f5:6e:
9e:0a:4d:75:68:90:b6:11:73:05:cd:7f:f2:15:b3:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:7F:4B:66:1F:1C:6C:9D:8F:6A:A8:A6:00:C5:D1:71:EE:03:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c9:d6:61:4a:66:89:55:73:ed:7b:8f:e1:30:5e:67:01:0b:5a:
fd:23:a3:cc:47:d1:86:eb:36:37:2d:e1:ab:66:9c:b8:61:69:
8e:1c:b9:15:22:3e:d5:ac:2e:2a:de:78:11:25:42:c2:9f:98:
05:b1:51:97:60:41:3f:fd:e8:f6:d2:b3:3f:40:65:65:a3:ef:
cc:58:41:0b:cf:fd:46:b8:0e:90:c9:e0:b4:06:a7:8a:09:10:
70:f0:82:53:37:0b:dd:ca:5e:f1:53:ca:92:14:3c:e0:bf:d0:
dd:09:25:d4:90:94:8a:7f:6f:53:d1:fc:1d:cf:c5:81:75:64:
15:a6:94:00:72:82:e5:9f:db:46:95:ab:b8:7e:16:15:dc:d0:
2d:88:32:61:6f:94:3e:14:e1:ee:28:4e:51:65:2e:7b:13:26:
60:e7:ba:54:75:7c:71:0c:ba:73:57:29:e7:f0:f8:9b:7b:30:
55:3b:fa:99:74:7f:1e:c3:69:af:48:8c:9e:85:82:eb:7f:b0:
bd:71:f6:38:7d:32:98:fa:3a:49:01:d6:5e:4f:11:15:b8:d6:
01:f3:f5:71:52:da:ca:9b:06:ed:f3:55:a5:ea:ff:a4:df:e9:
9a:e7:e5:c3:11:8b:9d:17:66:10:63:cf:d7:8d:f8:2a:76:25:
a1:3c:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:43 2025 by rpki-client