Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a43023ee-069c-4ca9-93ca-0ab10c229902.roa
File: a43023ee-069c-4ca9-93ca-0ab10c229902.roa (raw, json)
Hash identifier: RHol2W0MFUIRlHp8lA8x7u9pa94Aw8iIrMon8qTR0IQ=
Subject key identifier: 5B:48:EE:C1:E5:61:FE:EE:9E:54:9E:C0:22:A7:5B:0B:B7:D9:E2:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E7743418C54C935193ED955F68DE2D3DC0AC2AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a43023ee-069c-4ca9-93ca-0ab10c229902.roa
Signing time: Tue 21 Oct 2025 00:20:57 +0000
ROA not before: Tue 21 Oct 2025 00:20:57 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:77:43:41:8c:54:c9:35:19:3e:d9:55:f6:8d:e2:d3:dc:0a:c2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:20:57 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c896d1b33620f343208ca425ec23193f749ea700c4478a4e67965f7962638bba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:aa:94:b3:e5:ce:09:00:ea:04:e9:e9:ad:
f9:57:7a:03:d8:c7:12:98:dd:2e:b2:fa:34:61:2e:
6a:42:1c:cf:95:4e:5f:a2:3b:a7:69:04:6e:ce:dc:
b8:55:a5:64:4f:7c:f0:89:c6:f5:93:93:a7:42:20:
e2:e8:0e:cc:85:cd:55:51:4e:47:52:26:a7:62:79:
44:d4:9e:98:a6:9f:37:13:4b:38:a5:40:cf:b3:cd:
1a:15:08:b2:88:5d:57:d3:45:89:9a:c1:9b:c5:7b:
72:1d:df:3f:d7:b4:8c:7f:44:10:11:37:41:31:6f:
72:af:b7:64:1b:52:db:f7:ab:c1:c2:fb:42:f8:f9:
de:a5:75:38:83:79:eb:33:7b:a4:cc:de:99:30:f1:
ca:b7:e4:81:b3:1f:36:95:5f:ba:6c:52:28:16:37:
7a:c7:a7:c5:9f:02:0d:be:35:08:a4:39:e1:a2:0a:
b0:6d:f7:e7:bb:09:18:12:e1:b6:be:f4:6d:d9:fa:
24:05:57:46:21:87:3a:8b:8f:65:67:c2:01:67:73:
43:dd:b7:c4:74:0e:76:56:59:50:00:f2:6b:28:8b:
18:43:19:e2:9a:1f:48:a4:00:3f:f9:b1:b7:a0:2c:
47:73:d4:27:a0:99:18:c8:88:86:cd:fb:88:13:d2:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:EE:C1:E5:61:FE:EE:9E:54:9E:C0:22:A7:5B:0B:B7:D9:E2:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a43023ee-069c-4ca9-93ca-0ab10c229902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:dc:5c:2c:b5:48:18:62:ab:38:fb:26:c6:13:a1:bf:3f:b9:
d5:41:dc:e9:30:2c:19:24:7b:49:2d:4c:26:29:8c:6f:3f:e7:
4f:69:a0:3c:b2:2c:48:cc:51:f0:97:ae:f8:a7:67:e1:a1:d5:
3d:d6:b3:fd:c1:6e:07:58:67:8e:cb:09:c8:39:43:1f:78:e9:
cb:f8:be:c1:d9:00:eb:ec:d9:60:b5:a8:0a:d2:86:60:53:98:
c3:a5:14:d3:07:cb:ab:5a:20:27:f6:89:07:5b:f0:fe:a6:61:
f5:3c:01:f7:49:8b:89:dd:9e:a3:fa:36:aa:71:19:ab:2e:54:
3f:5a:01:cb:13:49:9c:09:79:51:18:30:43:01:c6:e4:c3:21:
00:69:47:31:84:e8:b4:bc:9e:f3:cf:15:97:52:95:2b:22:04:
57:5e:f0:15:2b:f2:97:84:6e:52:2c:96:08:41:d1:bc:4a:03:
e5:5f:51:02:bf:ba:16:f4:3b:d3:b5:db:e9:38:62:8a:0f:a8:
00:c2:12:f6:db:5f:3c:cd:38:f9:b5:e2:6c:a7:b7:c9:1e:c2:
9a:35:63:ed:64:27:1b:f3:39:9a:3e:2b:64:97:a9:c5:63:98:
53:76:e3:f6:7e:df:0e:bb:b6:c7:17:d0:2a:6b:e0:39:3f:af:
29:5a:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:54 2025 by rpki-client