Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa
File: 2f243fe6-341e-47d0-b6c0-16d041ff88be.roa (raw, json)
Hash identifier: pYaxDzVMZ+pqTUlZJLs5Vyb2tJBHUUYB1KDJo5cPMPI=
Subject key identifier: F5:D8:0F:B3:7D:86:E6:2E:E3:5F:B3:CB:E6:0D:2F:7C:FC:53:87:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3551311ECDF64248AEC653E1F825DB86B21EC361
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa
Signing time: Sun 19 Oct 2025 02:40:51 +0000
ROA not before: Sun 19 Oct 2025 02:40:51 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:51:31:1e:cd:f6:42:48:ae:c6:53:e1:f8:25:db:86:b2:1e:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:40:51 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=1b190752c0b75b888dbb1df754320fde91f570d630ea169575453c0a747e3fe9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:75:02:6a:13:0b:52:91:6c:96:a3:6c:f8:
7f:a1:92:36:30:42:a1:bc:41:83:75:27:8f:8d:40:
4e:f5:50:5b:53:5d:34:0a:7c:1e:3a:e6:71:20:18:
c3:30:f6:cb:16:47:25:51:10:a6:85:de:61:93:ec:
dc:56:1c:8d:07:cc:4b:4e:07:f2:52:8a:5f:79:01:
0a:f9:c0:aa:0b:c1:6e:09:af:0a:2f:33:dd:6f:15:
30:94:f5:7d:fd:9d:1d:47:51:9b:ea:fa:b0:c8:04:
e2:0a:c2:f1:e5:ae:cb:0a:08:ae:84:56:ab:73:b2:
d6:c0:0d:75:43:74:a0:9f:34:43:91:82:79:10:a9:
e4:77:f7:6c:d9:e2:9d:ea:b8:d9:6e:76:51:e7:07:
c1:58:39:8b:df:58:dd:20:b1:30:44:d4:49:e0:ff:
0e:d1:b9:d6:34:19:35:2c:e7:94:a3:64:c9:c3:1e:
fe:06:f9:e6:7b:e8:32:ae:8d:e0:9d:eb:95:27:11:
7b:67:32:2a:0c:7c:dd:bd:38:be:29:91:6c:7c:c8:
9d:59:33:8e:0b:a8:d0:35:44:ae:f1:5c:5e:68:bf:
f9:29:94:5a:92:cf:8c:c2:ce:b6:32:83:f1:26:17:
0e:1d:96:03:87:da:b0:16:8b:b7:c4:15:75:e7:d8:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:0F:B3:7D:86:E6:2E:E3:5F:B3:CB:E6:0D:2F:7C:FC:53:87:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.163.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b5:65:84:ae:a1:13:7a:1a:f2:62:90:2b:af:d3:e3:57:39:
b1:dc:34:5a:4c:64:d4:7f:03:c7:ad:06:92:b8:70:fe:02:15:
18:d8:af:e4:6e:df:63:ea:d9:3e:aa:be:46:d6:29:01:f0:c6:
ae:0a:28:35:2f:13:4c:9b:9a:45:83:60:3d:aa:61:c6:c2:90:
0a:95:70:9e:11:db:5c:35:57:ed:e5:66:87:a6:8b:5b:94:6c:
b2:26:d4:83:6d:27:3f:15:f0:c9:9d:1a:a4:fd:dc:b1:79:90:
7d:04:00:ad:96:71:db:ae:96:46:54:6a:8c:8b:90:aa:6f:16:
7e:79:e1:75:c8:fb:0d:98:60:4e:c8:d6:e1:5d:4f:9b:db:c8:
61:5a:35:29:32:23:64:4f:d9:40:d7:79:31:57:53:86:25:b8:
dc:a3:2d:f4:91:15:b7:67:c9:16:e3:8c:6f:c4:92:79:21:a4:
9b:c1:0a:90:12:5d:d1:e9:70:19:54:42:a1:70:2c:14:4b:fe:
85:11:c3:9b:59:5a:b7:a1:8e:8f:c4:05:35:05:d3:f4:f1:34:
a0:71:34:02:71:a0:6c:98:33:76:f4:8f:d2:ea:07:15:86:69:
65:f0:46:2b:d1:53:f8:a7:6a:ce:30:b6:88:70:5e:06:43:36:
ad:89:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:51 2025 by rpki-client