Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb71a035-54bf-477d-990b-3ca729df4636.roa
File: eb71a035-54bf-477d-990b-3ca729df4636.roa (raw, json)
Hash identifier: jaY9YBBf2cRZby/NcmUtuoC06YfndjVZ8mM+3FLSs8I=
Subject key identifier: 6A:52:EF:CD:2F:72:2F:1A:83:AD:16:8F:DB:EB:C1:14:2B:CD:83:71
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E6DF4D1B887E8940819F6A173535C293A1FA53F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb71a035-54bf-477d-990b-3ca729df4636.roa
Signing time: Tue 28 Oct 2025 00:51:31 +0000
ROA not before: Tue 28 Oct 2025 00:51:31 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.243.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6d:f4:d1:b8:87:e8:94:08:19:f6:a1:73:53:5c:29:3a:1f:a5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:51:31 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=c17f1f54282fe3f3c2e2ac1288d6cc7b80880b7ab2176e5b5a7d0a8e90e97372, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:59:4b:f2:f5:5d:18:79:eb:67:38:a8:27:
18:11:87:80:6f:c6:4c:4c:44:c5:ae:62:e7:36:39:
87:e9:55:65:42:d0:69:2a:51:84:3e:c2:4e:e7:3d:
f7:a0:57:03:a0:ae:b7:79:3f:17:49:26:3d:a9:e7:
fa:0f:1f:48:55:a3:34:32:c1:8b:b2:b1:73:6b:82:
83:da:39:82:98:09:0a:69:6b:fe:58:b6:cc:73:1e:
b3:ce:73:51:4e:b3:1d:b8:91:08:44:44:97:04:c4:
27:fa:f4:c8:f2:23:63:53:15:b7:0a:93:ea:fd:2d:
a7:64:80:80:7a:a8:ec:d2:43:7c:98:6e:04:d9:29:
f3:98:9a:b8:85:d1:7e:e5:06:04:46:c7:db:97:eb:
92:2d:56:20:41:18:7b:67:25:c4:5c:e5:be:4c:ae:
d9:b4:43:1a:6e:0a:d3:3b:db:37:88:47:3a:eb:2f:
c8:05:56:82:98:c8:14:d4:6f:63:c2:a8:9a:03:d8:
34:4d:81:1f:22:d6:53:50:34:26:6d:ba:8b:91:2b:
7a:5d:0a:2e:fc:ea:10:57:e9:b6:9e:c3:69:22:78:
39:b4:26:51:27:d4:f3:20:48:53:0b:9e:99:0c:36:
a0:d2:e1:98:16:10:1d:41:cd:9b:bb:eb:e6:84:84:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:EF:CD:2F:72:2F:1A:83:AD:16:8F:DB:EB:C1:14:2B:CD:83:71
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb71a035-54bf-477d-990b-3ca729df4636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.243.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:2c:50:d5:ea:94:5b:4a:7c:97:b2:84:7e:49:bf:0a:a0:73:
bd:d6:b6:63:6d:d8:68:8c:42:c6:85:b7:5d:e5:63:ce:5a:3d:
5e:6b:e6:df:77:dd:17:69:2e:a9:b6:ec:69:81:97:53:05:95:
d9:e4:dc:ea:10:10:66:7f:34:96:f8:1f:6a:05:85:67:44:71:
22:97:cb:97:91:e8:e1:45:47:d4:4e:c3:22:ea:3f:64:55:8a:
b9:1f:d3:8c:a9:09:dc:87:d6:5a:98:f2:38:18:0e:f2:d9:94:
5e:02:75:85:aa:ab:82:39:46:62:d8:4f:ab:c0:47:d8:51:c1:
56:36:28:66:56:57:38:ac:05:2d:2a:dd:da:31:9b:3f:c5:e4:
84:07:a3:80:64:d6:38:11:70:06:12:00:10:db:13:80:41:df:
ee:46:c8:bf:49:7b:38:b8:09:a2:2b:20:55:15:7a:f6:52:11:
1c:15:f5:6c:07:c7:04:85:41:68:af:aa:62:12:b1:81:65:97:
37:96:65:a3:e2:1c:11:ba:60:d9:ae:92:7b:5f:21:da:4e:02:
7b:aa:7c:15:23:33:66:98:0f:d2:65:a0:81:cf:69:8b:8b:ec:
c4:7a:50:b5:b9:d4:47:2a:1c:e2:c0:d9:a4:80:f3:1f:6d:a2:
28:39:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:06 2025 by rpki-client