Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
File: 1347a92f-2ada-4350-b885-c21a89d01e42.roa (raw, json)
Hash identifier: 5BaWaaaJ5WuZUE7tj/XuHTD9UcZRU5w3GSt0cKWt4D4=
Subject key identifier: EC:02:CE:FD:76:27:10:F8:6D:74:2D:F5:D6:2A:2E:7D:6B:47:A4:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6232B759007D0223ADAF0BB7C5EA8D5B1C5F8E95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
Signing time: Sat 18 Oct 2025 02:01:27 +0000
ROA not before: Sat 18 Oct 2025 02:01:27 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:32:b7:59:00:7d:02:23:ad:af:0b:b7:c5:ea:8d:5b:1c:5f:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:01:27 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3597c59cef4344e94e6d4b164fb7d0cc951c9d165bf64f9e67aa1585c311b7c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:8f:71:f0:1f:24:46:70:0b:35:63:b6:88:
15:79:bf:7c:47:21:be:11:d1:7c:3e:ab:06:a3:9b:
b8:ad:ce:76:8f:5a:3e:d1:b9:bc:6f:88:7d:73:55:
05:9c:74:fa:60:97:a8:87:c5:53:b0:08:09:91:ca:
60:87:76:e5:d8:4f:3c:56:72:bf:35:07:39:75:4b:
63:32:3e:25:54:17:a1:c3:43:2d:30:03:e0:d5:50:
e7:95:16:d3:4c:a7:ef:ba:12:5e:9a:cd:e9:12:08:
60:c5:84:f2:62:55:94:03:df:97:b8:57:c8:38:28:
e9:7c:3b:0d:74:35:87:49:7b:cf:3a:2e:d8:f0:6f:
a7:71:01:00:3f:f1:d5:8e:39:14:84:0a:d5:f1:8e:
bd:f6:63:9f:bf:54:fc:32:e8:89:eb:d5:aa:b8:c3:
61:37:b0:77:8b:ee:1b:fe:23:64:4c:d0:2e:9c:db:
56:35:8c:f3:ae:7c:92:ab:44:2d:a3:61:fc:23:6c:
db:24:66:bc:a3:62:31:11:9a:82:39:e9:6f:ca:b1:
41:b6:15:3e:0b:c5:92:69:de:97:e2:5a:f1:f1:11:
d5:fe:86:43:bb:43:0c:1f:3a:f4:48:36:e8:f5:3a:
bd:24:3b:bc:00:fb:82:ac:d7:0c:c7:11:74:9b:25:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:02:CE:FD:76:27:10:F8:6D:74:2D:F5:D6:2A:2E:7D:6B:47:A4:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:67:3a:74:bb:f7:ba:bd:49:bc:76:2b:4a:ca:b7:e0:94:ec:
ca:92:e6:61:0e:f4:43:77:91:9a:b2:2c:45:fa:8c:ca:6d:ae:
65:dc:81:7b:79:a3:91:d7:e6:b2:4f:23:bb:f8:34:26:33:a9:
3d:2a:c2:6c:78:3b:bc:1a:ef:c7:ad:0d:3e:01:56:7b:db:44:
e0:a5:21:26:9a:a8:0b:a8:b0:22:7b:e4:27:06:22:bf:67:4c:
ce:35:08:18:37:8f:f6:6e:56:37:12:af:d8:e4:67:c8:0b:6e:
56:6a:41:e2:d1:22:83:e0:42:35:aa:4c:78:82:2d:3e:c5:bb:
50:3c:33:cf:a6:01:02:9c:5b:30:77:ef:44:c4:b5:40:17:b8:
70:52:0c:47:82:00:23:da:c7:fa:8d:b5:fb:4e:d0:0b:ec:1b:
f9:5d:54:c5:70:0a:c0:84:4f:74:8d:d0:0f:61:61:5c:39:b2:
fc:31:e6:d9:42:f2:97:6b:f6:92:cb:9b:3c:56:f8:0e:90:13:
c3:b5:27:21:0b:d4:2b:0f:69:00:fb:54:c7:87:8c:0d:ff:52:
e5:d9:1a:bc:a8:ed:e0:76:69:31:48:e1:a2:f9:7e:a0:30:0b:
b3:7a:e5:8c:57:0a:97:72:1b:a5:a0:ca:a5:28:35:d4:f7:cb:
1c:03:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:13 2025 by rpki-client