Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
File: 6c4ab783-ed8f-407b-a600-2e828e4c1279.roa (raw, json)
Hash identifier: 5H51ywF8q7cb/WKUQLV6e4QBv6WPatu/Xku2sOnK82E=
Subject key identifier: AE:C1:27:9D:29:44:19:2A:AC:52:3C:2E:65:F4:A3:06:62:C2:1E:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EA84E40861E97BF0BBF085443D3523A30583CA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
Signing time: Fri 31 Oct 2025 00:40:09 +0000
ROA not before: Fri 31 Oct 2025 00:40:09 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.223.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a8:4e:40:86:1e:97:bf:0b:bf:08:54:43:d3:52:3a:30:58:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:40:09 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=17757985fdbb8d7919d712c12c1dfbb931289e40ce273442583d31e14693c14a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:4f:5a:d6:14:df:35:fe:dc:d3:9a:3a:29:
e9:8b:89:46:78:db:0f:cc:47:12:a7:38:d9:33:14:
21:32:65:58:26:91:17:33:00:9a:8a:7b:2b:0a:6c:
71:11:4d:b4:2d:9d:c9:c8:80:b2:b4:31:83:24:62:
b7:94:80:2a:04:39:1c:ed:c3:f7:cf:94:1c:93:1f:
7c:92:d8:b4:40:5f:07:37:17:49:c7:9c:10:ba:bc:
f2:00:16:44:e2:74:e5:8a:04:a9:17:12:24:53:ef:
14:11:dc:39:77:d2:67:2e:68:9e:86:3c:ed:03:cb:
ca:f7:3f:46:53:a1:22:97:e0:ff:8b:a5:56:6c:12:
c6:97:5a:28:20:a9:61:87:eb:fb:10:ee:2b:0b:1d:
f3:48:36:0f:59:82:6c:46:2a:e3:30:45:78:a4:a3:
61:b4:84:19:3c:64:3e:28:7a:35:f0:fb:fc:42:99:
d0:91:99:26:85:bf:d7:96:33:df:8f:6d:3e:03:7c:
e9:9c:07:db:af:b5:81:db:0e:55:57:f0:22:eb:79:
6b:dc:53:be:55:0d:90:b3:df:68:63:fe:df:36:d1:
55:15:be:da:4a:27:b7:3a:bd:e8:9e:21:d9:d1:df:
a4:fc:0e:2e:a0:c4:44:bc:ff:71:7a:a8:d1:c1:36:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:27:9D:29:44:19:2A:AC:52:3C:2E:65:F4:A3:06:62:C2:1E:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.223.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:19:80:20:c7:c5:8d:4d:c2:ce:9c:83:0f:55:f2:22:7a:bd:
63:9e:6b:c5:8b:69:91:cc:2a:d8:c4:94:f1:15:0f:a4:f3:6b:
13:a3:2c:7d:1d:05:7c:16:fe:90:03:ad:bb:f0:42:fb:fb:68:
c1:2b:78:d9:b2:07:f0:6d:34:01:77:bd:55:23:f0:ea:6e:0b:
c7:64:d6:e6:00:a9:34:e6:22:cf:fa:ca:6f:ee:2f:c8:e1:82:
a4:94:b2:fc:6a:3c:95:b9:44:0e:1f:2a:1b:b3:c0:0f:29:03:
60:57:25:1e:38:bd:12:03:f2:0a:17:91:1e:dc:c8:20:89:7e:
7f:3b:9e:27:f8:79:1a:4d:83:3b:f9:2d:5e:de:70:c3:a1:46:
5f:be:49:fc:b2:1c:e5:05:c2:5a:ef:bb:36:51:68:7e:39:06:
af:b1:a4:43:63:fe:05:42:c8:0e:fe:27:c4:f3:a0:c5:c0:5b:
49:36:24:e2:cb:54:53:77:93:06:6a:ce:75:8c:73:1c:f4:80:
4d:ab:41:67:29:05:36:7a:f8:79:cf:00:6e:6a:eb:d1:e8:ff:
d5:4a:f6:a6:ea:4f:02:bc:95:e8:3a:6c:a3:3c:d7:2f:7c:fc:
02:9f:f8:c8:6f:30:23:76:ab:17:68:fd:e5:87:c0:03:1c:19:
c1:35:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:46 2025 by rpki-client