Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1046f87-49b0-417d-850e-a22bb437a470.roa
File: d1046f87-49b0-417d-850e-a22bb437a470.roa (raw, json)
Hash identifier: 0UfHozWMRw4due1xMwt+6Bn/V+LGWVcymMHOwH0/qJA=
Subject key identifier: D5:17:CD:D7:A1:B8:05:DA:BA:3B:88:21:BA:AA:D4:13:6B:E7:2E:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 449A9C17EE3D0FF6FBFCAAFDAA8E81E0B808A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1046f87-49b0-417d-850e-a22bb437a470.roa
Signing time: Wed 22 Oct 2025 00:00:55 +0000
ROA not before: Wed 22 Oct 2025 00:00:55 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.50.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9a:9c:17:ee:3d:0f:f6:fb:fc:aa:fd:aa:8e:81:e0:b8:08:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:00:55 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=f5aa4ae498397823d08454fb46ffa2d0c6fd54720477171c72e35f5880f40f57, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:4a:27:16:e0:1e:05:2b:8d:19:46:62:90:
44:19:66:8e:01:d7:c1:e4:4a:5f:36:6d:65:93:08:
5e:0e:c4:d9:df:0b:aa:63:28:56:aa:fc:db:10:5b:
84:30:ba:72:42:50:88:2e:a1:62:f4:06:3e:4f:fb:
f7:61:cb:5c:9d:44:bd:bd:b6:e3:e5:e4:23:f7:0a:
b7:dc:4f:f1:ae:38:1f:3a:a8:7f:09:20:aa:67:15:
83:77:4b:54:ee:a6:35:3e:cf:22:d2:4a:47:80:91:
f9:76:5c:bf:78:ea:8d:1d:af:ae:f4:45:02:24:8d:
21:50:e4:87:ca:5a:95:4d:e2:2e:45:09:17:7c:fb:
49:e8:29:27:5b:c5:7f:7f:01:02:4d:b9:64:e0:8e:
7a:07:37:09:5a:92:09:7c:a7:a9:97:79:0c:70:ec:
4b:ae:85:48:02:2d:d4:fa:46:a8:ca:09:88:6f:43:
59:bb:8c:f2:07:73:b5:dd:13:25:87:1e:f9:b2:df:
a1:44:f2:53:86:bc:50:92:72:4d:d5:57:e2:d4:3a:
57:4e:20:7e:29:c6:4f:c2:ac:3d:17:65:5d:f0:94:
c7:26:ad:94:af:31:fb:01:44:f0:4b:d3:4e:b4:df:
e4:09:f5:22:b3:82:fd:a7:d1:d3:2e:15:11:5c:d3:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:17:CD:D7:A1:B8:05:DA:BA:3B:88:21:BA:AA:D4:13:6B:E7:2E:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1046f87-49b0-417d-850e-a22bb437a470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:66:96:db:ca:f3:ff:b4:a7:13:02:74:e8:02:1c:b6:1d:d5:
3c:e7:53:a2:7a:ae:d1:07:96:96:77:8b:e2:3e:76:06:6a:70:
b8:86:54:4e:22:7c:5a:8a:56:b3:e9:d8:e0:c6:82:03:a3:f2:
46:ad:e3:d8:07:bf:44:1d:87:a7:9d:b7:81:7c:35:8d:e4:a6:
b5:34:7d:d3:ae:dd:62:51:b0:7c:b0:19:22:db:23:b6:c4:36:
2b:67:ec:3e:c6:39:0a:4a:97:04:34:62:7f:04:a4:be:50:99:
02:83:d3:2c:52:2e:70:f5:aa:e4:88:d7:8f:66:3f:d0:b5:af:
47:99:b3:72:74:ca:4b:04:31:d8:3d:26:10:cc:38:78:4f:b3:
fc:18:4e:75:54:cd:92:70:89:78:94:55:98:fc:d3:94:df:de:
ed:de:24:f2:05:6f:92:da:22:c8:ec:ce:43:62:4d:a1:c9:74:
6b:8c:3f:d1:9d:ac:87:23:6c:08:3f:ac:fa:52:9c:f1:8d:f7:
a4:e3:9f:5d:fd:76:fb:9f:20:a6:9d:6e:e1:87:49:8f:f1:f5:
c5:50:9a:3f:45:c1:ca:63:2d:b0:5d:13:6e:9c:9a:ca:ea:64:
52:37:c2:53:35:b2:9b:85:02:89:ae:51:4a:eb:74:b7:bb:48:
ad:bc:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:01 2025 by rpki-client