Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3395fd69-93f9-4e45-8502-0694369b4d47.roa
File: 3395fd69-93f9-4e45-8502-0694369b4d47.roa (raw, json)
Hash identifier: slz4lOV5CKxLn2BSWxOvgvSFEMWM4jhOsxq+cQs1UhY=
Subject key identifier: 27:72:08:93:B8:51:28:DA:E1:21:81:15:58:43:28:78:AF:93:0B:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 657756AD377B6DC7C874CBE03FDD74F6DFA7D7D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3395fd69-93f9-4e45-8502-0694369b4d47.roa
Signing time: Wed 08 Oct 2025 00:12:51 +0000
ROA not before: Wed 08 Oct 2025 00:12:51 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:77:56:ad:37:7b:6d:c7:c8:74:cb:e0:3f:dd:74:f6:df:a7:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:12:51 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=8a2bc345e0f39d6a8b50930ed78556082adfa657eeb5e68cd6e3fdcb41b87713, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:cc:1c:57:cd:6a:92:3e:10:33:ab:a2:d2:
89:8d:18:4c:d2:21:50:fc:13:b5:80:ad:fa:28:da:
67:fe:56:77:76:ba:7d:75:45:90:88:d4:ff:89:b0:
db:c7:fe:bb:24:df:5a:2b:13:e1:0b:93:22:78:2c:
3f:18:99:91:19:62:f7:aa:c5:7a:d5:f0:04:60:aa:
04:4b:6c:b4:dc:54:0a:4c:a6:aa:86:43:b0:67:57:
f0:97:13:d2:b4:72:dc:a6:3d:66:3b:71:35:19:e9:
cf:78:f4:d0:e6:9b:ef:ab:59:b2:af:33:1d:b8:6d:
55:2f:2b:6c:a0:de:2a:cb:cd:96:3a:79:dd:05:4a:
bc:29:89:3f:ab:8a:e1:49:4c:67:57:de:51:47:e2:
c8:f6:d2:40:14:bd:3d:8f:38:23:3b:d6:e2:ea:5d:
72:cd:01:a4:eb:cc:47:b1:a2:03:da:00:51:d2:a8:
ab:fa:5d:88:df:b7:53:c5:5b:67:b8:5b:8d:a0:2f:
ff:17:c8:63:3a:e1:0b:c3:aa:36:24:8d:52:d1:47:
18:c8:01:31:58:f2:81:04:b3:9d:05:12:ed:e4:e8:
8e:55:d4:b5:c9:81:37:af:2d:9e:44:88:ac:63:29:
9c:d0:1a:a7:0c:49:58:53:7b:1f:86:51:ba:d6:89:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:72:08:93:B8:51:28:DA:E1:21:81:15:58:43:28:78:AF:93:0B:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3395fd69-93f9-4e45-8502-0694369b4d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.2.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:68:f3:a6:27:48:57:59:59:86:e8:d7:e6:95:17:c6:43:8b:
96:ad:ae:44:01:f2:eb:3c:9b:1b:0f:6e:f2:83:04:f3:9c:89:
95:89:f3:80:7e:43:c7:bf:09:c8:5a:00:b4:1e:18:80:86:a6:
94:dc:c8:79:8b:00:7a:24:65:da:b5:e2:11:27:8f:c3:bd:45:
bd:ec:3d:45:b3:a5:08:c5:c8:66:cc:c1:84:f4:58:ff:3f:ae:
29:31:31:37:3a:fb:d4:83:c2:13:8c:cc:93:0b:51:70:c9:3f:
e0:f8:8b:55:92:cc:d6:c5:2b:4c:eb:bf:d8:b0:b2:18:d3:20:
8a:c5:f4:3c:49:26:1b:64:71:11:78:a2:c1:6d:75:5b:aa:ef:
75:48:cb:45:5c:60:e4:5b:0b:7e:e6:e1:62:9d:f0:d5:9b:5a:
78:27:a3:1f:c3:9a:54:17:49:5c:5c:aa:bd:ac:42:9f:51:49:
df:80:66:6a:4d:82:fe:4c:a9:5c:6b:7b:d6:f6:ac:3c:2f:b9:
c3:f1:af:e1:f4:93:a4:4b:eb:46:be:04:5c:67:ef:29:6a:d0:
fb:82:a7:4a:50:e2:24:bb:a9:1e:d9:b6:de:7d:65:9d:89:e4:
57:cd:bb:65:34:09:54:cc:fb:41:77:c0:c4:01:d7:cf:09:a9:
14:3e:a4:2e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZXdWrTd7bcfIdMvgP9109t+n19AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAxMjUxWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YTJiYzM0NWUwZjM5ZDZhOGI1MDkzMGVkNzg1NTYwODJh
ZGZhNjU3ZWViNWU2OGNkNmUzZmRjYjQxYjg3NzEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7jMwcV81qkj4QM6ui0omNGEzSIVD8E7WArfoo2mf+Vnd2
un11RZCI1P+JsNvH/rsk31orE+ELkyJ4LD8YmZEZYveqxXrV8ARgqgRLbLTcVApM
pqqGQ7BnV/CXE9K0ctymPWY7cTUZ6c949NDmm++rWbKvMx24bVUvK2yg3irLzZY6
ed0FSrwpiT+riuFJTGdX3lFH4sj20kAUvT2POCM71uLqXXLNAaTrzEexogPaAFHS
qKv6XYjft1PFW2e4W42gL/8XyGM64QvDqjYkjVLRRxjIATFY8oEEs50FEu3k6I5V
1LXJgTevLZ5EiKxjKZzQGqcMSVhTex+GUbrWiQKNAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUJ3IIk7hRKNrhIYEVWEMoeK+TC9kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMzOTVmZDY5LTkzZjktNGU0NS04NTAyLTA2OTQzNjliNGQ0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4AjANBgkqhkiG9w0BAQsFAAOCAQEAyGjzpidIV1lZhujX5pUXxkOLlq2u
RAHy6zybGw9u8oME85yJlYnzgH5Dx78JyFoAtB4YgIamlNzIeYsAeiRl2rXiESeP
w71Fvew9RbOlCMXIZszBhPRY/z+uKTExNzr71IPCE4zMkwtRcMk/4PiLVZLM1sUr
TOu/2LCyGNMgisX0PEkmG2RxEXiiwW11W6rvdUjLRVxg5FsLfubhYp3w1ZtaeCej
H8OaVBdJXFyqvaxCn1FJ34Bmak2C/kypXGt71vasPC+5w/Gv4fSTpEvrRr4EXGfv
KWrQ+4KnSlDiJLupHtm23n1lnYnkV827ZTQJVMz7QXfAxAHXzwmpFD6kLg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:33 2025 by rpki-client