Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
File: a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa (raw, json)
Hash identifier: oOTsMNd4BQW3W0NMvqPI0KEGdYIsPDW9f/pUqhyxw+M=
Subject key identifier: 7E:20:B9:0B:05:FC:70:C3:71:C6:DA:DC:BF:6A:C5:84:96:44:BA:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3452E43E53CAF3F5835A4D2E326B27BD70745C61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
Signing time: Fri 31 Oct 2025 00:40:50 +0000
ROA not before: Fri 31 Oct 2025 00:40:50 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:52:e4:3e:53:ca:f3:f5:83:5a:4d:2e:32:6b:27:bd:70:74:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:40:50 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=07f97a3770fe43762364e842f7a1bb3e23a789f0fec084751f9e88186d33a100, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:cd:1e:74:96:0b:ac:d6:be:f1:a1:3d:ce:
9f:e3:18:66:e7:4b:81:13:c1:86:da:0c:68:0c:1c:
aa:e8:d5:83:6b:be:a3:95:e2:a5:27:31:2c:6b:ee:
ca:df:e9:04:37:d5:5e:7a:48:22:1c:70:00:34:a2:
3b:f4:66:a1:f2:53:cd:78:a5:7f:be:b0:06:61:b0:
c3:da:1c:c9:4e:c1:83:d2:38:bb:d4:df:4c:1e:fb:
ce:fc:63:eb:30:21:f2:b5:85:45:0e:11:a7:ab:ad:
a9:83:40:ff:e5:f7:6f:d8:7a:4c:ea:6d:37:a8:15:
96:69:20:0c:90:4d:a1:2f:52:48:17:bf:3c:fa:be:
6b:67:42:cc:0a:d8:e9:71:eb:84:0f:44:95:45:4c:
63:3e:95:50:af:44:e8:b6:15:4a:d2:a0:ed:b1:a5:
3b:af:59:95:fd:db:53:a0:56:c2:75:78:ed:f9:09:
65:35:67:44:6f:99:28:98:54:af:85:96:74:e2:18:
10:0f:37:68:f3:17:68:11:cd:ed:19:0d:14:df:a8:
cb:01:ef:32:0d:28:5e:64:c5:14:2b:95:29:48:88:
7e:8e:f6:d0:4f:be:2b:1b:d7:82:f6:95:01:e8:46:
db:97:78:48:39:ec:8e:40:59:68:45:2b:89:f4:0d:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:B9:0B:05:FC:70:C3:71:C6:DA:DC:BF:6A:C5:84:96:44:BA:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:e6:21:1b:1a:95:0b:d5:d6:50:28:f5:6b:71:da:ea:45:31:
65:01:c2:04:72:e4:25:8c:81:02:5a:a1:bf:9a:e8:95:d6:3d:
29:9e:37:1f:fd:67:e9:ae:1d:86:76:3c:79:56:67:ee:33:34:
87:66:a1:9c:61:bc:f3:ee:39:cf:b7:85:e3:34:7f:4c:6a:37:
31:30:b3:00:1d:31:ed:4d:05:47:50:e7:ee:48:2c:d2:c7:3b:
54:22:1e:c3:d2:ac:09:7f:21:bb:80:00:31:fd:21:03:c6:a8:
96:26:ee:cb:91:21:a5:f1:98:da:90:c0:31:09:9a:43:c6:f7:
f1:c5:6b:3a:43:03:7d:bf:4f:9a:a3:de:9d:38:45:6a:f7:5c:
0c:02:2f:33:d8:33:0a:96:61:dd:d9:3a:6f:93:91:8f:b3:b8:
65:eb:bc:0c:8d:3b:6e:c4:c1:8e:6c:d4:04:76:97:4e:d8:d7:
68:d6:c0:39:c8:1c:68:d8:d5:80:6f:fd:9d:d5:06:e4:65:77:
5d:32:81:74:37:c9:3e:47:03:ce:c4:ec:87:39:94:13:50:b6:
d7:0b:42:a8:ad:7c:4d:11:36:33:c6:3b:92:50:d6:c6:77:5e:
2c:c7:6d:22:41:01:bd:e8:c4:38:46:bd:8b:65:b2:98:e2:a6:
e4:37:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:48 2025 by rpki-client