Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce2fae80-d610-4666-9018-7eb9a4b508c4.roa
File: ce2fae80-d610-4666-9018-7eb9a4b508c4.roa (raw, json)
Hash identifier: fG5ukwHe3k+VBF//Exk1muZQevRjclSfIRVgAgcTGac=
Subject key identifier: CF:EE:AA:F1:3A:7A:FD:25:DB:D7:B4:A5:1A:87:39:AE:F2:61:22:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E5511D1AD53CF3BA4A77E0832814099B195E3AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce2fae80-d610-4666-9018-7eb9a4b508c4.roa
Signing time: Tue 04 Nov 2025 00:10:07 +0000
ROA not before: Tue 04 Nov 2025 00:10:07 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.44.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:55:11:d1:ad:53:cf:3b:a4:a7:7e:08:32:81:40:99:b1:95:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 4 00:10:07 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=954806e2db3849426f3761a9e984ac9b77aa2803da8e04bc4854d78742563faf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:fc:cd:cd:ea:58:0e:a8:b6:03:8c:64:ef:
f6:2b:77:c0:40:ab:58:22:9b:25:83:48:e5:e5:1f:
7b:06:bd:22:a3:ad:43:5e:bc:86:bb:cf:7c:fe:78:
8b:be:8c:89:c1:8e:9f:68:83:bc:a4:a8:84:aa:a5:
ff:a8:cb:af:fd:f2:6c:57:98:b4:9d:56:09:c2:3f:
93:f8:e2:c7:7c:dc:9b:aa:2f:cf:d1:bb:4d:83:b6:
07:a0:67:09:8f:44:3a:05:01:cb:81:ff:51:9a:88:
80:4c:49:f2:85:fa:0a:9b:3d:d9:79:6d:d2:ab:b2:
82:5b:7b:72:93:5d:ca:70:60:cf:69:5f:7d:4f:cb:
be:5a:4c:62:40:d3:7c:36:57:4a:e6:73:2d:5d:f6:
72:4b:31:c1:1f:df:f8:f5:fa:30:d2:f5:f5:90:27:
2a:2b:ca:e1:88:4c:49:43:92:0e:e1:9e:02:f5:a3:
0d:ff:8c:ec:6e:16:c9:04:8e:af:7b:27:be:1d:29:
84:ff:72:7c:7a:c6:a5:70:63:1b:2e:27:c3:4a:1e:
c1:73:a8:0a:9a:ee:8a:9a:08:14:85:51:0e:10:4e:
6d:84:ed:88:54:c5:16:6c:22:c1:6f:9e:13:88:3e:
a9:19:5e:7c:09:dd:b9:7a:cc:a8:26:d2:47:7f:91:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:AA:F1:3A:7A:FD:25:DB:D7:B4:A5:1A:87:39:AE:F2:61:22:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce2fae80-d610-4666-9018-7eb9a4b508c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.44.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9c:40:d7:53:4d:d4:e7:89:48:ce:99:81:3e:7c:8b:ae:3f:07:
fb:20:29:13:ef:98:0d:3d:c4:46:c4:a7:3c:82:db:96:f2:61:
4c:da:32:dd:19:c8:13:4b:47:32:8c:3b:9e:a4:81:fb:ba:f1:
d3:03:aa:4d:9c:bb:2d:83:88:24:8b:da:0c:9b:f7:8d:9b:8f:
c8:38:25:52:c9:db:c5:6d:49:05:2a:d4:d7:44:04:3d:a9:47:
56:19:1f:fe:ee:69:65:57:61:8d:f0:75:62:37:fc:c2:c9:ec:
9d:d6:12:18:46:6d:d0:ea:44:52:c5:e6:34:8e:2d:f1:db:21:
54:f7:6b:5f:dd:4a:cc:46:54:ba:73:e1:06:8b:f4:8e:d5:80:
2a:6b:f6:31:f5:24:63:36:b9:68:c6:b7:f0:a6:7e:b4:f4:da:
bf:86:46:8c:6e:ad:ad:98:90:3a:fb:73:80:9c:77:b5:2a:c9:
a9:cd:f7:2f:fc:4b:03:d5:af:a5:0f:cd:65:00:95:dd:6f:c7:
1d:6b:2f:63:aa:a5:5a:08:64:c4:ce:d0:e8:24:a9:e3:64:8d:
08:0a:a7:b8:a0:88:10:9b:94:d8:92:0a:48:0a:16:2b:89:89:
8c:4a:bd:c7:88:51:46:05:bd:f3:93:ee:35:70:89:54:58:41:
6a:ba:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:01 2025 by rpki-client