Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
File: 18c5e828-21e1-417e-ac11-13a92ad7d891.roa (raw, json)
Hash identifier: Zt3pOj6uhMlXcXR4+xNRVf9TUn7CMwdIH2Xbko0vD2w=
Subject key identifier: 4A:2C:8A:A4:11:1C:73:14:75:22:2B:F4:07:45:25:29:45:B6:AC:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D37DE79F07056A58D5A33039FC24926E0B99002
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
Signing time: Mon 13 Oct 2025 15:52:41 +0000
ROA not before: Mon 13 Oct 2025 15:52:41 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:37:de:79:f0:70:56:a5:8d:5a:33:03:9f:c2:49:26:e0:b9:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 13 15:52:41 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=f474056cd7e66f79713c0d0eda7dcc8d31eb4f2cbc2694c167844378011a01ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:0d:7e:ca:88:51:42:3f:24:82:85:5a:1b:
6f:85:fb:91:57:a6:be:42:f4:71:20:12:2a:7a:36:
8d:59:81:2c:7f:4a:26:1a:a4:11:4a:d5:cc:03:a4:
8d:26:c3:b5:b2:89:86:75:d2:3d:89:00:34:27:13:
ed:a7:c6:3e:be:39:eb:1d:03:15:15:37:ea:10:78:
65:dd:45:01:f9:bb:2e:33:fb:75:dc:c1:f6:88:e7:
bf:f0:4c:13:35:29:e2:c3:24:59:2a:63:6a:a6:36:
59:2f:ed:63:89:48:cf:6f:e9:b8:95:64:55:38:68:
20:ae:3a:2b:33:a6:55:cc:ff:0e:0e:51:74:11:63:
18:ec:6a:bc:b3:65:07:c0:1c:93:0d:f6:e3:08:c6:
7c:51:0a:5b:a1:37:a9:2b:e0:f0:35:0f:88:1c:43:
fe:6c:10:fc:bd:90:d6:e0:67:17:f1:cd:55:97:d5:
b1:8d:8b:15:37:4e:cf:bf:c2:91:88:41:e0:d5:2f:
f1:74:b2:26:f4:b7:d0:67:0e:df:37:7c:10:cc:37:
a4:d5:2e:29:f7:15:6f:2f:55:47:4b:2b:ba:b5:72:
5e:32:62:72:b7:f4:8a:e2:ff:44:42:5a:62:24:98:
df:56:38:3a:ff:19:02:3a:c6:55:da:bb:66:d2:72:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:8A:A4:11:1C:73:14:75:22:2B:F4:07:45:25:29:45:B6:AC:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.35.0/24
Signature Algorithm: sha256WithRSAEncryption
86:96:bd:95:3e:1f:13:f2:0e:39:b9:9a:e1:6f:7f:ac:e1:a0:
36:e9:01:f7:45:50:83:7c:65:20:bf:2f:be:3a:d7:7b:be:cd:
25:59:5a:0b:a7:6a:dd:0b:8b:55:90:5a:f1:c3:85:b3:1b:be:
64:18:76:28:b7:49:99:a3:77:1c:45:57:98:79:cf:45:20:af:
e2:a5:36:a0:b6:9d:67:6c:0a:8f:af:4e:75:2e:4c:a9:4d:69:
75:de:fd:42:c4:24:6b:96:23:c0:51:c5:43:36:0a:82:b1:90:
16:bc:e7:7b:a4:2c:03:cb:2e:75:a3:cc:27:00:2b:90:a9:40:
30:ef:85:f6:a1:4e:5f:9b:1f:70:18:27:64:68:a6:b9:1c:49:
53:f8:d9:d6:11:33:12:cd:9f:72:e3:03:38:5e:81:dc:cd:d9:
65:01:33:90:bc:ec:51:0f:0f:69:8d:61:14:9b:78:aa:1a:b9:
17:2a:17:5c:ae:15:9c:44:32:e8:65:cf:49:ac:97:a8:7a:76:
d6:26:16:df:b2:77:df:ee:82:88:38:7a:f8:3e:27:9c:f4:86:
90:04:50:8a:f9:48:6b:42:0f:1c:9e:61:f0:55:47:80:16:46:
a0:65:3b:9a:55:b4:54:35:66:0c:f5:c4:60:f9:76:65:1a:ce:
a8:9b:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:24 2025 by rpki-client