Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc318b70-5b88-4bf7-8b6c-9a26cee65109.roa
File: bc318b70-5b88-4bf7-8b6c-9a26cee65109.roa (raw, json)
Hash identifier: Gx5G3ozkg4WdymX7KsfZ1RGjy+86r9osVRZNNMO0LxU=
Subject key identifier: 42:F6:C4:8B:EF:F5:B4:24:98:24:35:39:25:F2:B3:D3:58:73:CB:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71A1A6B998AD9ED53AD4FFF5E757B126BD3A15F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc318b70-5b88-4bf7-8b6c-9a26cee65109.roa
Signing time: Wed 22 Oct 2025 00:20:59 +0000
ROA not before: Wed 22 Oct 2025 00:20:59 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 72.44.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a1:a6:b9:98:ad:9e:d5:3a:d4:ff:f5:e7:57:b1:26:bd:3a:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:20:59 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=c03e2606c966e4baa686c088ba011f186548474b6d2d67da6a835557a3f2d65a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:62:e5:c6:f8:bc:a6:1c:e5:cf:83:59:e1:05:
23:13:f4:11:3d:95:5b:0e:31:b3:6e:8e:f3:2a:32:
21:f8:e1:d9:2c:e4:dd:72:ff:6b:4f:e6:96:4e:c1:
eb:d0:f8:f4:e0:b4:3f:6c:fc:b9:21:e1:fb:eb:11:
ae:20:73:d6:d9:a7:c9:fd:72:ab:01:be:c6:48:ee:
f7:c8:04:3c:d4:d7:e7:0e:1b:57:5d:90:ee:b6:ec:
cd:e8:bc:3c:fa:77:1b:a1:57:c7:c0:b5:db:fd:e2:
11:76:b3:b4:56:23:4c:54:d8:46:85:84:8d:9f:c5:
4a:50:92:e8:bc:e2:60:28:e8:d3:46:b9:5b:a1:77:
85:d1:dc:02:db:d8:f8:62:40:5f:c7:6f:ec:c7:8e:
80:ae:ad:1b:c1:cf:1f:45:98:13:b4:bc:72:d2:a7:
5e:21:b0:e5:4f:bf:2a:12:37:0f:bc:f1:82:bc:e6:
d4:56:46:24:af:76:b7:3f:b9:b2:13:2c:65:c8:0a:
0b:69:94:52:b2:37:d7:7e:47:6e:cc:ff:67:cf:a5:
29:bd:af:e9:f4:89:45:9e:16:19:89:0b:87:45:c9:
ca:46:75:6e:8d:cf:bc:f1:fd:fc:68:e3:af:24:0c:
ea:a9:bc:8a:2c:b4:ee:95:82:70:0c:08:35:b2:9a:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:C4:8B:EF:F5:B4:24:98:24:35:39:25:F2:B3:D3:58:73:CB:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc318b70-5b88-4bf7-8b6c-9a26cee65109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:63:c2:d8:3f:99:87:9e:2c:c0:1c:68:48:24:92:37:38:3f:
79:1e:ad:b0:4f:20:81:20:e2:48:e5:27:2d:fc:76:18:52:fc:
a0:5a:b1:36:80:44:8a:f1:d6:ae:44:68:a4:d3:70:53:3c:45:
0d:c8:ec:5f:f3:c5:a0:ba:b2:f3:3f:94:9b:2d:b6:d9:b6:92:
5c:66:4f:1a:4c:f2:74:2a:f9:ab:db:24:be:87:b1:98:94:6e:
bb:b8:62:ff:85:54:10:01:18:ea:8f:72:0a:3d:61:ef:9a:74:
d4:e1:b1:25:e1:81:b0:7a:28:99:5d:24:5f:c1:fe:51:c9:77:
53:2d:a5:04:57:24:eb:ff:d9:c8:08:a2:57:30:9f:50:cb:ea:
c1:20:a5:f8:17:46:03:71:8d:3c:5d:c2:94:3f:da:ef:dd:d7:
f0:7b:7d:6e:b6:34:ea:61:5c:90:2f:8e:4b:14:e6:c6:0c:28:
34:d7:3a:7a:db:85:d9:c0:55:06:3b:1e:30:db:c3:80:ac:e0:
0c:7f:36:0c:d1:5a:a3:f2:4a:aa:8c:df:a0:d1:b7:c6:54:d9:
60:14:b3:9f:fa:bd:6f:5c:49:91:5c:08:4e:f5:9e:63:b3:49:
ca:a0:50:a0:88:f9:f2:68:9b:11:a4:17:6f:7a:64:46:7b:30:
57:5a:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:17 2025 by rpki-client