Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c590db87-4707-46ca-8c28-ace87ad34efb.roa
File: c590db87-4707-46ca-8c28-ace87ad34efb.roa (raw, json)
Hash identifier: N9kbsQSd6osOAPgc4MpZQBuvaPUExZfleXtIWvPqaLU=
Subject key identifier: 5E:03:9D:FC:22:0A:BE:B9:E8:74:B5:E4:42:0E:2E:FA:DC:2C:99:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2CD91F83438C8026B40E83DD1F2EC567FD08ACF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c590db87-4707-46ca-8c28-ace87ad34efb.roa
Signing time: Tue 28 Oct 2025 00:51:30 +0000
ROA not before: Tue 28 Oct 2025 00:51:30 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d9:1f:83:43:8c:80:26:b4:0e:83:dd:1f:2e:c5:67:fd:08:ac:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:51:30 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=36eef95084422976c5b14738d7cddb54f07562f5d6d85bcae688c9ee93da5686, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:34:43:87:e6:e3:20:93:7a:1a:ae:bb:71:
7c:82:bb:be:25:87:3e:3d:52:20:27:36:55:ce:7d:
86:c6:49:55:be:1a:17:d1:ab:69:cb:b9:af:35:85:
b4:be:0b:ef:df:68:42:e1:90:4c:64:fa:50:76:c8:
86:e3:35:33:e6:d4:47:43:a6:cc:7b:a6:13:08:f5:
09:a9:b3:10:1d:e2:22:48:0f:e0:59:19:50:d0:f4:
d9:4b:04:17:ec:e4:f4:32:78:36:ad:08:2e:3a:dd:
85:5d:db:83:36:dd:8a:0a:72:8a:75:03:dd:06:d3:
4e:64:11:98:71:b2:19:8c:1d:cd:e4:57:5a:72:77:
15:45:b5:76:f5:a1:6c:e7:ec:8e:96:87:04:2d:8e:
e5:24:0f:56:1b:4c:dc:34:2d:ad:e5:ed:fe:43:51:
4e:eb:7b:ed:3b:58:ef:95:06:9e:d6:64:13:7e:b2:
ac:06:67:3b:96:26:6d:0e:d4:4e:a3:e3:7c:8a:75:
5f:f5:cb:7b:a4:65:d6:32:47:12:de:13:5b:00:e7:
09:65:67:a7:0c:9c:16:e3:c6:9b:c5:e4:d6:11:0c:
fd:42:75:4a:95:68:15:1e:67:3d:ad:9c:d5:ab:be:
8b:74:99:fe:80:47:92:db:5c:bf:14:25:eb:ea:e5:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:03:9D:FC:22:0A:BE:B9:E8:74:B5:E4:42:0E:2E:FA:DC:2C:99:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c590db87-4707-46ca-8c28-ace87ad34efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.33.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:b8:fa:3d:04:f4:0f:cf:f3:fc:be:16:b9:a4:33:2b:f4:ef:
5a:13:57:b9:33:6a:0b:aa:07:d9:c2:9b:53:a0:ef:a0:3f:8e:
82:ae:1b:c0:9a:6e:44:ca:8f:ec:f2:27:b8:df:08:a6:ec:70:
22:4d:68:2b:21:98:55:48:2f:b2:77:74:a3:d2:5d:6b:b7:a2:
88:f6:8c:61:72:68:78:f6:58:55:af:b3:db:f8:ef:18:b3:dc:
4e:55:40:79:02:a4:8e:5a:6a:80:df:59:94:07:ca:47:74:ec:
b4:84:19:cf:31:55:26:1d:ab:e8:90:f5:30:7f:8d:b2:bc:4a:
d8:68:d8:2a:34:43:98:69:36:4f:02:98:5f:b4:c9:4e:2f:90:
a0:fe:e4:27:21:03:3d:8d:30:7f:cd:70:15:2d:06:90:e0:3f:
e9:4f:fc:ff:3b:4d:a3:eb:a4:0f:db:10:4c:bb:d0:a3:a4:23:
34:c1:92:ca:c2:85:2d:ec:df:1b:98:7a:f4:6e:ae:04:8c:f6:
8f:03:28:86:d7:39:9e:c5:5a:84:87:47:9b:95:ee:ca:2d:b1:
d7:4c:dc:72:f0:a9:03:72:df:f9:e9:2b:fe:8b:bb:f2:7d:18:
cd:c2:7d:f2:69:a0:37:c2:52:10:cc:a6:aa:b2:f3:bb:5b:34:
69:d5:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:55:44 2025 by rpki-client