Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa
File: d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa (raw, json)
Hash identifier: nWSLXBF8Jz78TGu9GudLL8uhZj11sceW1ZFbdN2d9Gw=
Subject key identifier: 95:1D:7D:4B:A5:00:E1:04:59:58:A2:AB:83:3A:01:49:77:C3:DB:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 274D6319872AC0F0EAE5DBD29E498791DEEED39E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa
Signing time: Fri 31 Oct 2025 00:51:21 +0000
ROA not before: Fri 31 Oct 2025 00:51:21 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.210.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4d:63:19:87:2a:c0:f0:ea:e5:db:d2:9e:49:87:91:de:ee:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:51:21 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=7ab61cb11557b92e82e02eb412888c9117a8ee78c975e354c0abf4f09bf9aa64, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:fa:bb:83:29:c6:fa:28:aa:51:33:4f:70:
b9:57:d6:ef:3b:e7:2d:85:77:1b:04:7b:c1:9c:6e:
7a:41:1e:e5:ac:2d:04:3c:67:53:56:17:2a:93:52:
ca:35:68:07:51:7b:e1:89:89:b7:47:9d:8d:4b:61:
5b:f2:c4:81:ac:f6:39:14:7d:1c:57:7a:80:db:ce:
b2:7e:5b:4f:60:83:68:22:7b:7b:13:02:ab:56:02:
1e:6f:dd:b2:8d:87:ac:e5:a6:87:03:55:7b:75:1e:
b6:16:a5:73:b4:db:68:5e:46:c9:b3:f6:c8:61:cb:
9b:1b:b5:94:47:a5:be:76:cc:de:06:ad:ec:86:89:
77:96:b2:cf:07:69:f1:5c:d8:e8:c0:28:7d:05:88:
cf:4c:7e:3a:4f:7d:a7:97:96:32:af:34:af:3c:f1:
1f:d0:09:a3:cf:8b:9a:30:45:3b:d6:67:9f:d1:5b:
d5:5d:c9:b2:86:99:35:9a:b7:4c:b4:dc:f1:53:92:
3a:a0:9a:5a:97:14:3a:bc:77:24:73:65:58:28:1c:
0e:dd:f8:f6:86:e2:90:a4:65:05:e7:6e:cd:fa:72:
41:19:90:18:ac:a3:0c:26:4d:4a:21:79:70:d0:db:
10:21:ba:98:8e:83:c6:7d:41:3a:00:64:3c:79:28:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:7D:4B:A5:00:E1:04:59:58:A2:AB:83:3A:01:49:77:C3:DB:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.210.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fb:87:b0:9c:f4:74:6b:1d:9e:7e:db:e5:1d:9e:1a:82:24:
00:b3:77:da:77:41:3d:36:45:b4:76:c2:73:82:51:fa:0b:65:
f8:fc:51:7f:6c:03:7a:15:c8:e6:18:1a:08:37:b3:b8:0d:85:
b5:cf:25:60:47:26:99:a5:2c:cd:38:12:0d:6f:51:13:44:b1:
c6:81:9b:36:c3:13:1a:18:4d:f8:cd:fd:02:ad:b3:2d:e3:53:
f3:da:34:90:4d:4d:e2:ac:29:75:ee:24:85:17:96:3a:41:97:
1c:ad:f0:76:87:64:0b:d9:ad:f0:96:80:ec:34:7a:98:da:23:
ac:73:f9:f3:83:73:04:e0:38:2d:4e:29:0a:6b:7c:d4:37:78:
24:a5:61:f2:37:56:f6:4f:5c:e1:23:ed:11:ef:06:3b:0b:49:
7f:50:d2:64:d7:94:fe:f9:66:9f:2e:7c:31:e7:60:3b:8c:72:
c9:90:22:ae:90:7a:d0:d9:46:57:86:69:73:5f:bc:0c:e4:68:
fe:9b:f6:2d:5c:6d:37:b3:65:79:92:1d:83:b3:e9:33:74:e2:
bc:ea:be:d5:32:47:cb:db:1d:70:10:e8:08:03:ee:be:fc:cf:
38:30:18:30:1a:91:5f:66:5d:17:e3:40:fc:af:67:fa:c8:1d:
00:ce:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:25 2025 by rpki-client