Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa
File: d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa (raw, json)
Hash identifier: Qi+qDRpWlBZEIRh2g6m/e3jMiVxyPhBR6Zh5EF5FiG4=
Subject key identifier: DB:42:AF:C0:DC:2A:CD:06:48:40:97:D0:64:A7:EB:93:E4:70:AE:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A84312D523FFE026868E00198F244F63F8D02F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa
Signing time: Fri 31 Oct 2025 00:10:12 +0000
ROA not before: Fri 31 Oct 2025 00:10:12 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:84:31:2d:52:3f:fe:02:68:68:e0:01:98:f2:44:f6:3f:8d:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:10:12 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=5a11fde631e41e25d605762098f3fcf13fa4e489589aded26957290ca49eafd2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:69:6a:b1:76:6b:2b:6d:6c:4a:5d:da:8d:
a9:cf:7c:14:5a:b9:0f:1f:be:0d:d7:5f:7a:3c:b0:
ab:a8:e6:fe:a1:58:dd:84:78:24:31:a2:b0:ce:aa:
ee:ec:c3:e5:e3:65:74:37:08:e1:02:33:2f:64:36:
1b:d1:d2:bb:f3:55:c9:fc:27:d6:a6:4b:f6:31:2a:
f6:54:10:ef:60:e4:1a:f7:bd:c5:b1:01:96:72:5c:
51:97:26:11:70:c6:86:d5:84:15:0f:83:21:6f:6b:
8c:39:fb:88:71:b1:d7:0d:62:78:7b:2d:8b:7f:c2:
16:e2:e8:78:9b:af:38:20:f5:7c:27:84:a9:78:d1:
36:5e:28:e9:99:8e:73:90:60:56:1d:92:7e:61:5f:
f5:8b:c8:4d:a0:7e:d2:6e:6f:79:51:6d:21:ab:30:
42:fb:a8:43:89:cb:39:d7:c4:27:a9:33:52:62:44:
d5:dd:ec:72:41:1b:2a:ce:f1:e2:1b:01:91:71:7a:
4a:d2:31:0e:cc:07:8d:d4:30:e0:56:05:da:3f:27:
66:fe:39:54:f1:57:a3:67:62:6a:ab:cc:75:0e:c2:
45:6d:cb:34:22:49:ab:27:ab:5c:d6:b3:9f:e9:37:
c6:4d:2f:eb:1d:51:6e:66:27:5c:3b:f1:17:99:2e:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:AF:C0:DC:2A:CD:06:48:40:97:D0:64:A7:EB:93:E4:70:AE:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.176.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:58:32:19:35:52:a3:c8:94:5b:34:f9:fd:83:67:59:eb:ff:
c9:17:da:9f:bf:e1:a5:c7:5f:48:5a:82:d6:f3:36:7d:85:4f:
17:b2:eb:bf:a1:65:60:23:5b:0b:13:dc:a9:ca:9d:1e:c4:5e:
6e:ba:f4:37:6e:89:30:58:cc:0a:58:53:64:04:3e:9a:c5:06:
15:c7:36:bd:ac:0d:2e:fc:37:a7:48:e7:47:06:11:7e:57:43:
d0:8f:e8:d5:3f:99:23:29:8b:5e:23:74:9f:22:e9:35:aa:9e:
c5:22:0e:72:56:be:79:90:98:bf:23:cc:87:09:86:5f:c7:61:
a7:ce:d7:66:10:50:c3:d5:28:5d:cf:a8:59:f6:ef:3f:3a:8a:
e2:61:ce:93:dc:90:49:b3:c5:f6:1d:e6:61:53:58:d1:30:47:
71:dc:62:fb:da:61:c8:f0:eb:b8:31:95:22:75:d5:76:3f:c3:
61:8c:61:72:3e:7a:a4:29:d5:86:da:4b:a2:15:ac:c9:87:ec:
b6:93:31:d8:93:bb:6e:d3:57:1c:90:8f:3a:75:3f:37:7e:ca:
7c:c4:32:19:4c:26:8b:a1:6b:59:02:4a:bc:14:09:44:fb:14:
37:fc:df:ff:36:22:51:ac:d8:df:6a:d1:8a:97:3b:b9:63:c8:
56:fa:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:48 2025 by rpki-client