Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7a09e1-c81f-4444-8130-d554d8f712e5.roa
File: ed7a09e1-c81f-4444-8130-d554d8f712e5.roa (raw, json)
Hash identifier: DNfhjaZGmoIHMcK6HEo/+JJNv6apTQFY5IPd580bUHA=
Subject key identifier: 35:8F:35:24:91:BE:4C:5A:CF:10:A5:CC:20:AB:1A:6A:19:78:A8:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D3259D95DECA31ADC34E525D73E90C1DCB1CD86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7a09e1-c81f-4444-8130-d554d8f712e5.roa
Signing time: Sat 25 Oct 2025 00:00:40 +0000
ROA not before: Sat 25 Oct 2025 00:00:40 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:32:59:d9:5d:ec:a3:1a:dc:34:e5:25:d7:3e:90:c1:dc:b1:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:00:40 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=d6ddcc3ca9009e0f5c63f3188a967be4bd72ea86da45cd2644a28c4718fe695a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:4e:a3:3c:14:aa:ad:ab:dc:8c:d9:55:6a:
06:0d:c4:1e:fb:fa:62:66:9d:64:1d:c6:3a:3d:ff:
02:69:82:83:43:d1:d2:c3:50:77:3f:fa:0a:da:54:
7f:af:e7:0d:a4:d8:08:07:46:c3:34:f9:c0:9f:89:
d8:61:b1:d0:f7:0c:c0:e5:ef:69:13:6c:ba:8c:60:
01:36:17:be:14:5a:7d:50:ef:16:96:c2:51:52:bd:
ee:43:f6:24:e3:a3:7b:ea:65:04:f7:53:d0:ed:2f:
1c:98:b2:a0:ca:80:ba:5f:8e:7b:8d:67:9f:34:e4:
30:72:d4:8c:e9:73:6b:23:f6:ad:7a:f4:59:ee:25:
60:8b:16:a8:ea:b1:e4:97:36:1e:d7:8a:87:bf:25:
63:dc:7d:10:da:b4:1f:3e:dd:c3:36:5e:20:02:bc:
67:26:d8:ca:e9:1c:3f:27:11:6f:f0:f4:87:ba:03:
53:9c:75:de:f3:17:ac:ec:ed:a2:b5:e8:26:8f:2f:
cc:31:3e:c9:d8:16:67:7d:a8:16:a4:ab:fe:7d:50:
22:77:b3:1e:63:8b:67:94:41:38:07:40:67:4b:e5:
3c:5e:0a:2e:42:11:c8:f5:ad:45:a5:27:36:b8:88:
f6:8d:b2:0a:63:92:91:f1:4f:e2:10:40:c4:2d:42:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:35:24:91:BE:4C:5A:CF:10:A5:CC:20:AB:1A:6A:19:78:A8:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7a09e1-c81f-4444-8130-d554d8f712e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.40.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:16:ad:bc:44:e0:71:36:54:9a:71:69:a9:84:04:f9:b7:80:
cb:a4:ac:34:eb:4f:5a:71:71:b9:55:1f:c4:0c:aa:fc:04:f8:
5e:c5:23:55:0c:9a:30:ab:54:b9:a4:3b:e8:82:99:b3:d6:a1:
16:bb:10:85:79:9e:93:ec:3d:9a:24:7b:c3:2d:10:36:6a:61:
27:b3:1c:36:9a:3f:a3:c3:d4:15:6e:90:97:96:cd:60:06:43:
33:4c:47:cd:68:47:f3:61:dc:03:1b:4d:2d:b1:5e:b4:96:1b:
79:ed:7a:b5:5b:8b:a1:db:de:cf:c6:f2:95:28:9c:47:08:ff:
10:68:21:a5:06:7c:fc:2d:e0:e1:33:c0:01:2b:e8:e7:a7:4f:
3f:e1:31:f3:a5:83:e2:31:07:44:db:ea:7f:d4:7b:d6:6f:c9:
3c:c3:3c:d0:ce:5f:a8:12:23:1e:81:5a:14:99:d1:7a:b2:c8:
61:30:8b:ac:01:30:9b:22:c3:e0:5d:30:13:b4:6f:17:5e:67:
58:59:af:41:95:72:a2:fa:33:52:95:33:ee:ef:8f:b1:47:4c:
57:0e:55:f0:93:5f:3e:a0:40:9e:30:21:04:65:07:18:7e:62:
6e:d6:2b:58:46:1a:8c:a1:45:b4:8b:7f:ff:f0:4d:34:2c:6a:
1a:f2:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:33 2025 by rpki-client