Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa
File: 80966667-e6df-4a84-a91e-10054d3673cd.roa (raw, json)
Hash identifier: m7uDMf2z/zc7caiHEZWiEZHzBxEMFM9/YcFjHoLkFL4=
Subject key identifier: 88:A3:49:28:F5:79:C4:9A:36:78:DF:C9:A1:E1:F6:9C:2D:9B:21:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EDA23CE8284B249E3A981951CA46F0749A70FD5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa
Signing time: Tue 28 Oct 2025 00:51:29 +0000
ROA not before: Tue 28 Oct 2025 00:51:29 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:da:23:ce:82:84:b2:49:e3:a9:81:95:1c:a4:6f:07:49:a7:0f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:51:29 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=ec35946d0d6f758dbf014f3f8966a8f0981d8cdb6d0cabf3764d459d062f27f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:41:d1:7b:b5:e2:71:46:0b:ec:a5:4e:d2:
5a:8b:78:9b:d5:0b:32:6a:d9:49:14:55:2c:01:e0:
5d:15:a2:7d:d4:b2:4e:9a:75:eb:26:ca:d3:ae:d8:
04:b2:24:e1:ea:9c:bf:82:87:5c:bb:de:70:2b:bd:
56:95:76:94:55:9f:47:99:29:3b:35:4b:ee:86:50:
52:4b:49:58:a3:3f:d8:b8:b0:10:31:4f:b5:62:ef:
cb:06:ae:19:4f:3b:4c:c9:93:20:b5:43:19:ad:ba:
ff:e4:50:be:a3:97:20:ef:c0:ed:56:26:e9:4f:d9:
a3:d0:4e:d2:ba:10:b0:d8:33:93:95:4d:f6:61:9d:
2b:e2:32:03:f2:a3:33:20:50:14:d8:dd:38:f1:ee:
09:b2:aa:ee:8c:68:a4:32:09:15:aa:75:88:31:30:
a2:7b:df:88:13:67:af:57:ad:20:77:bc:8b:7a:b7:
af:53:a8:fd:d8:14:86:3b:05:ac:6b:62:5f:f7:1e:
03:a0:92:3e:76:42:ac:c8:11:0a:dc:76:15:f2:78:
5f:dd:8d:3d:ec:05:31:4b:cd:3b:09:c6:37:87:04:
3c:2c:70:28:80:39:61:b1:da:25:00:ca:75:0c:c4:
b5:3e:b8:af:71:91:db:d1:f9:cd:39:26:9b:3a:b2:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:49:28:F5:79:C4:9A:36:78:DF:C9:A1:E1:F6:9C:2D:9B:21:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:3a:e8:69:02:78:2c:8b:d6:dd:0f:4c:2b:f1:78:03:92:21:
4a:ff:5a:35:e6:3e:b2:09:da:a0:ad:14:62:82:c6:78:f4:4e:
02:5a:80:c6:52:e3:af:54:37:b8:d4:e9:46:f0:ee:a9:05:76:
d7:44:e1:1a:c2:34:5c:ee:12:c4:f0:13:2b:1f:86:be:c6:7a:
0a:f4:76:dc:1c:66:6a:85:9a:c7:6a:7c:ae:30:b7:ff:99:d9:
23:43:46:5d:47:b7:85:70:ec:13:b5:5e:aa:d6:d7:27:4b:72:
a8:2b:ca:b9:e1:5a:48:9a:fd:43:df:7b:22:da:34:7c:9b:7f:
af:d0:5a:1c:4c:3b:a2:ca:65:78:a4:fd:2f:9f:19:b4:a9:ae:
a9:1c:4e:51:57:18:52:08:e9:9d:a9:fa:e7:25:a3:af:6c:a6:
a4:01:9f:94:88:e1:e6:4c:c6:f3:ff:f8:e9:7d:ec:f8:5d:d4:
94:7d:d8:95:22:c6:05:bb:2a:ad:1d:b6:54:92:0e:c2:25:a6:
95:34:06:ba:71:4a:cc:85:68:38:84:b0:bb:e4:38:96:3d:1d:
9d:33:b4:2f:2b:34:61:fc:f2:ad:b5:5d:9c:45:11:ff:ba:7b:
94:7a:2c:17:8f:1e:98:b7:76:f4:ca:ff:c0:75:63:13:b9:3c:
82:bd:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:51 2025 by rpki-client